Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          inrFUM/5CwXojBI2sTkJRY2EzoHBVXYYugcwwrqYnSY=
Subject key identifier:   DD:2E:41:61:F9:DB:07:E8:09:67:6E:8F:18:B0:F7:D4:3D:E3:72:3B
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       281D0421666A647DEFD756A6D7D6DFA61CFDF500
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time:             Fri 26 Jul 2024 04:00:01 +0000
ROA not before:           Fri 26 Jul 2024 03:55:01 +0000
ROA not after:            Fri 25 Jul 2025 04:00:01 +0000
asID:                     149951
IP address blocks:        103.111.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:1d:04:21:66:6a:64:7d:ef:d7:56:a6:d7:d6:df:a6:1c:fd:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Jul 26 03:55:01 2024 GMT
            Not After : Jul 25 04:00:01 2025 GMT
        Subject: CN=DD2E4161F9DB07E809676E8F18B0F7D43DE3723B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:58:45:38:ce:bf:ef:f0:9a:bf:f4:37:fc:
                    2e:67:9d:83:17:45:83:0e:ba:a6:41:56:04:28:35:
                    93:e1:a6:e6:39:24:71:d5:b3:76:1f:04:23:4a:92:
                    e9:eb:94:c5:87:b7:ff:08:d8:3e:fe:db:08:f2:3f:
                    2f:24:51:ee:47:29:6b:c1:1d:d2:92:a9:48:ac:20:
                    0b:c2:13:0e:13:34:7a:d6:86:2e:63:12:ff:b6:42:
                    66:ba:7e:99:9e:93:ae:de:08:af:80:ec:a8:f2:45:
                    a2:01:e2:0f:ba:ad:83:46:a1:27:59:b6:60:04:58:
                    d9:b3:6b:a8:1d:a1:c0:74:9b:7b:41:5e:d4:aa:f4:
                    22:70:1b:1f:99:3a:69:80:6a:9b:c1:03:7d:55:8f:
                    e0:93:2f:ea:52:9e:e7:a8:23:89:d4:3c:68:37:1c:
                    fc:6a:19:d9:bd:d1:9d:ab:54:0a:1a:ad:40:2f:2e:
                    a4:4d:70:58:6d:2c:ed:eb:db:b0:c8:fa:c8:bd:52:
                    af:53:c8:c1:6f:6e:10:70:3b:05:d4:f2:4c:9d:ab:
                    f4:8c:d7:c7:a4:11:60:eb:83:da:41:cf:74:02:66:
                    26:db:28:48:a0:77:31:db:d4:cb:81:9b:42:4d:6c:
                    5d:3e:b5:a9:8e:d4:f3:f8:e6:30:b7:43:b9:f4:04:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2E:41:61:F9:DB:07:E8:09:67:6E:8F:18:B0:F7:D4:3D:E3:72:3B
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:3e:84:ce:7f:c8:5d:ac:fb:51:1e:f0:18:51:b1:1e:d7:a9:
         ff:0b:e0:7c:92:5b:d8:60:6c:ca:f4:3e:16:0c:a9:a4:f7:6e:
         47:ae:81:79:b2:c6:93:ef:93:b4:4a:40:58:86:9b:64:09:94:
         a9:3f:ae:64:18:a1:07:d3:57:f8:31:85:79:83:ad:98:d1:e4:
         4e:cb:7b:19:5b:8b:df:47:bd:71:4b:35:3a:70:b5:2b:99:23:
         dd:55:3f:03:35:b8:bd:6f:07:ed:6b:28:29:5b:1d:e8:c8:99:
         80:a7:b3:a7:f7:72:9b:74:1a:86:22:cf:1c:52:f0:44:51:21:
         d7:1c:96:f7:0b:d8:64:3a:76:8b:7e:cd:cb:96:64:06:70:84:
         e6:d8:cc:70:33:dc:98:a0:1b:e4:b0:88:09:63:eb:be:48:a0:
         22:7b:1b:f8:01:11:fd:ee:16:28:7e:13:81:ef:43:bf:b2:f9:
         ab:32:f5:16:02:6b:3a:ea:14:48:ec:d3:2d:58:7b:ba:a7:a5:
         91:f9:70:e6:a5:d6:bb:d1:db:f3:a7:b0:a5:33:48:f6:16:fe:
         f2:d1:df:8e:c3:71:db:ef:34:d0:a4:e7:8e:b4:1c:00:77:9e:
         b5:c9:b1:4c:94:ef:5c:2e:ef:8e:11:7b:4a:03:a6:3f:b8:3d:
         d3:7b:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org