Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
File:                     3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          EGpM1j1rOJjD5lYy5Wchuv/jogF+E++xxQSb4XFGRlo=
Subject key identifier:   2E:DE:D0:BD:CA:05:6F:82:6C:BE:7D:3C:96:2D:80:C2:07:E1:48:F1
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       7A5A336C79E1BC80114A9BDFA4B3A82261C29F0F
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 01 Jul 2024 01:06:00 +0000
ROA not before:           Mon 01 Jul 2024 01:01:00 +0000
ROA not after:            Mon 30 Jun 2025 01:06:00 +0000
asID:                     58475
IP address blocks:        103.81.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5a:33:6c:79:e1:bc:80:11:4a:9b:df:a4:b3:a8:22:61:c2:9f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jul  1 01:01:00 2024 GMT
            Not After : Jun 30 01:06:00 2025 GMT
        Subject: CN=2EDED0BDCA056F826CBE7D3C962D80C207E148F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:77:8f:63:bf:9c:44:5d:2b:c5:64:83:37:
                    45:75:02:73:2a:38:b5:3f:66:9f:18:79:41:ab:28:
                    37:d3:de:4d:01:b7:3a:6e:4d:16:a5:ce:08:6b:c1:
                    e2:ce:dd:44:2f:c9:05:1a:a7:8f:30:76:f6:62:6d:
                    f8:82:7f:9a:ff:47:42:87:43:97:60:2b:09:4e:6e:
                    c9:ca:c1:da:ae:0b:51:07:fd:28:29:19:a3:fd:c8:
                    2d:9f:fc:ab:80:74:0f:ef:3c:a3:d1:37:dc:f2:ce:
                    94:a6:00:90:46:3c:c3:cf:8d:1b:eb:b9:a6:9c:a2:
                    6d:0d:e5:56:e1:76:dc:36:a3:17:9a:7c:41:53:63:
                    19:f7:3f:7d:2d:6d:9b:b1:7a:b9:3d:db:4b:f0:78:
                    ac:bb:a9:d5:c6:dd:f5:20:42:45:59:a9:01:b8:95:
                    8c:aa:16:67:66:c7:62:e1:db:85:cb:eb:a6:95:18:
                    14:b3:28:b2:14:0d:86:d8:5c:b1:84:23:71:c6:12:
                    02:e5:2a:04:a1:2c:8f:58:02:57:93:ae:35:a6:84:
                    8c:18:ea:f6:ca:e7:00:4a:3c:56:c4:82:9a:12:03:
                    ed:f2:c0:5c:b2:f1:a0:c0:c1:70:36:29:c9:7f:49:
                    6e:50:39:be:a9:63:40:16:b2:1a:80:9b:ba:4b:6c:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:D0:BD:CA:05:6F:82:6C:BE:7D:3C:96:2D:80:C2:07:E1:48:F1
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e38312e3130302e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:95:19:0e:21:39:50:3d:13:cc:16:da:99:64:b3:46:9e:
         23:10:d9:e0:3a:8a:09:d8:02:cc:9e:d1:8f:ef:07:8c:ee:7f:
         ac:e5:51:f2:2e:5d:96:6a:cd:1e:72:72:8d:4e:92:fc:42:32:
         80:de:de:0a:83:2f:6e:01:be:ae:5b:5d:97:8c:05:c7:6c:12:
         fc:08:2a:3b:eb:58:1f:b5:02:b7:ca:17:a4:91:93:e4:41:ea:
         a6:be:ea:48:a4:78:19:0d:e8:1d:19:31:c9:33:bd:4b:df:99:
         23:4a:15:df:8a:55:bc:63:4c:56:74:ba:08:91:a2:e2:e0:8e:
         40:97:d6:3c:7a:3a:38:43:3b:86:36:e8:40:64:44:23:c0:e9:
         77:11:f6:9e:9b:6e:b8:4c:21:62:42:53:67:fe:19:05:4a:a2:
         1f:29:59:ba:de:c7:64:75:40:92:59:47:f7:a3:dd:dd:91:a5:
         24:bd:5e:e4:26:85:95:b0:3c:7f:03:78:48:68:cf:cc:38:92:
         a1:cb:ee:d4:5d:78:04:33:ff:fd:9b:59:3b:5d:48:22:b5:d2:
         8c:bc:39:3c:11:f6:d8:29:70:1d:c7:eb:01:f0:8a:4e:ca:a9:
         9c:c2:fc:12:9e:ca:7a:5f:e2:6a:f8:ef:10:b3:a7:e9:1e:61:
         a2:13:79:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org