Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
File:                     3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          ljwF6ITVZZqVtcMOWEgbQb3tCP2RBo+I4AZDViUqEJs=
Subject key identifier:   51:D1:8F:63:7D:CB:2F:83:8C:F3:7F:1A:9E:92:B3:E7:14:9D:C2:C5
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       53E346E24DF3A5B6BA0BA97929FCF3A1704C80B9
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 01 Jul 2024 01:05:27 +0000
ROA not before:           Mon 01 Jul 2024 01:00:27 +0000
ROA not after:            Mon 30 Jun 2025 01:05:27 +0000
asID:                     58477
IP address blocks:        103.31.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e3:46:e2:4d:f3:a5:b6:ba:0b:a9:79:29:fc:f3:a1:70:4c:80:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jul  1 01:00:27 2024 GMT
            Not After : Jun 30 01:05:27 2025 GMT
        Subject: CN=51D18F637DCB2F838CF37F1A9E92B3E7149DC2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:42:69:0c:e1:f3:79:a8:6b:7b:58:88:81:
                    1e:b7:49:6c:34:84:fd:3b:9e:ed:69:ba:66:49:a6:
                    21:00:49:59:22:83:e2:80:75:d8:a5:f5:55:f8:d6:
                    33:9f:ee:d9:77:eb:bd:0c:40:1f:77:59:3b:4f:93:
                    82:38:61:b1:df:f6:17:c8:0f:bc:89:6f:a7:3c:3a:
                    37:93:52:0e:65:68:ab:1e:a0:3e:16:5a:3d:55:c8:
                    3f:0e:e5:ed:4a:68:2c:95:0b:85:20:44:ec:0d:b5:
                    7b:64:1a:b0:78:59:e2:c9:28:44:f0:6d:2d:83:ef:
                    26:da:d9:43:21:d9:29:49:0b:f8:5b:32:bd:90:67:
                    cc:f8:5a:54:c4:fe:d5:b7:01:bc:23:e8:80:75:ca:
                    a0:30:83:04:79:77:8d:39:5b:a9:22:c7:d7:14:1f:
                    0f:fc:76:93:6f:89:72:74:aa:c6:81:75:47:eb:2e:
                    17:fc:2f:2c:20:82:da:cf:53:df:ae:6a:34:c1:78:
                    7d:81:3d:82:10:84:44:b7:f7:84:1e:b1:6e:2c:08:
                    13:64:a5:31:19:0b:28:b8:04:9e:ec:d7:f8:9a:83:
                    20:9f:89:8c:17:80:79:55:f0:5f:13:2c:a6:c9:de:
                    c8:2d:ad:46:6d:9d:e9:b3:3e:af:5f:43:e7:79:a9:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D1:8F:63:7D:CB:2F:83:8C:F3:7F:1A:9E:92:B3:E7:14:9D:C2:C5
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:cd:13:a9:94:81:dc:b6:90:a9:f7:75:fd:30:51:54:ee:dc:
         d0:74:d9:12:e0:97:1e:5e:b4:90:56:7d:8e:68:21:47:dd:87:
         e7:3b:ae:d2:4e:d2:80:e5:1c:6b:7d:3d:02:0e:44:32:a2:1f:
         4b:87:0f:4b:8d:5e:2b:87:a8:ed:75:b5:f6:7d:77:42:af:31:
         37:e1:26:89:61:c8:d2:f4:ff:7c:e4:b4:dd:78:29:5c:ab:16:
         00:82:aa:c7:d4:67:69:53:0b:6e:fc:1e:4e:5a:68:dc:b5:4e:
         61:08:cc:dc:e9:1d:8e:ba:cf:db:6e:80:8e:55:3b:19:69:e0:
         30:9c:13:4c:df:7f:87:20:b5:c0:65:ba:ed:8c:02:3b:54:a2:
         c3:12:e8:97:44:01:b0:ad:05:82:ff:9a:35:7f:15:8f:e9:f6:
         a2:70:b8:b2:3a:e0:10:66:20:6f:59:21:f8:e6:cc:8b:5e:e2:
         da:74:0c:7e:01:4b:d9:ab:6a:4f:7f:ea:06:61:68:33:a5:be:
         2f:dc:b1:11:62:79:93:10:e8:48:10:16:e9:23:d8:63:36:e1:
         ca:be:53:31:22:1e:f7:bb:84:45:84:5f:82:2c:14:5e:9f:26:
         97:e7:80:84:a6:30:74:44:51:e0:60:41:c3:f6:33:6b:14:d1:
         c1:96:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org