Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          XXxYzdDJN7beDsCAVogZnoKqobBPchgEznsNd2kNNyo=
Subject key identifier:   30:88:2F:50:A5:C9:FA:C6:5D:CC:EF:88:16:3D:BC:3F:FF:05:CF:BA
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       4C079526158309A585B969197B7DFB8688F9144D
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa
Signing time:             Fri 25 Aug 2023 04:00:00 +0000
ROA not before:           Fri 25 Aug 2023 03:55:00 +0000
ROA not after:            Fri 23 Aug 2024 04:00:00 +0000
asID:                     149951
IP address blocks:        103.111.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:07:95:26:15:83:09:a5:85:b9:69:19:7b:7d:fb:86:88:f9:14:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Aug 25 03:55:00 2023 GMT
            Not After : Aug 23 04:00:00 2024 GMT
        Subject: CN=30882F50A5C9FAC65DCCEF88163DBC3FFF05CFBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:bf:56:b0:7d:3d:91:ae:5e:61:d9:94:81:
                    30:3c:95:3c:bb:d9:c5:aa:5f:c5:e0:f5:55:4a:a0:
                    3b:3a:aa:ba:3b:b9:d1:d0:66:e2:49:e7:a2:39:b1:
                    08:bb:54:38:64:58:57:86:9c:d0:2a:cc:24:34:24:
                    7d:17:bb:c7:b5:d2:b5:ef:2a:a7:5b:d9:59:8e:1b:
                    c1:b4:8b:39:b1:90:61:46:eb:f6:ca:36:8e:8e:74:
                    49:94:65:7e:57:80:f9:88:23:95:26:ab:b3:27:02:
                    75:42:ef:34:ee:2b:71:7d:32:db:5c:76:a6:02:96:
                    cb:e4:af:56:a5:96:2f:d9:65:4e:de:ec:18:50:94:
                    6e:08:15:92:57:b1:13:60:a7:78:ae:ca:7c:de:77:
                    c1:57:76:9d:e5:76:66:80:57:71:54:c2:40:ca:d8:
                    9b:9b:70:04:fd:2f:cc:27:e1:f0:03:77:2f:46:3f:
                    98:2f:c8:ea:08:e6:3e:f9:57:3a:99:ea:99:c3:a8:
                    7c:94:46:71:98:a7:77:16:76:18:74:91:65:1e:69:
                    8c:01:d4:2b:be:2e:7b:d7:e2:39:9a:66:78:5f:b9:
                    be:46:e0:ef:d8:08:b8:9a:dd:09:a5:d2:e9:37:2f:
                    bc:51:8d:f9:7a:f8:6c:6b:77:f9:be:a0:a4:a7:7c:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:2F:50:A5:C9:FA:C6:5D:CC:EF:88:16:3D:BC:3F:FF:05:CF:BA
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:9d:26:18:0b:4f:89:df:f0:f0:31:7f:68:b0:31:1e:8d:
         5e:22:0e:18:50:11:d8:c7:dd:f1:92:4b:2f:34:6e:b4:07:62:
         e9:c9:2d:dd:32:46:f2:08:56:09:5e:07:6f:3b:e4:4d:1d:7b:
         90:92:ab:cb:a3:88:f5:d8:f4:d1:e8:9d:79:f4:9f:85:19:32:
         1f:6d:b4:ab:94:4f:41:50:9c:55:2a:97:e5:d7:e5:de:48:06:
         2e:b2:85:1f:dd:95:3b:62:5c:75:66:b8:97:87:56:df:c4:93:
         fb:69:90:04:4b:c7:31:83:a3:e5:ea:41:ad:0b:7f:bd:18:35:
         28:29:c5:3f:7a:87:84:58:e9:2b:f4:77:3e:52:5b:da:d4:ab:
         b6:9c:f8:15:11:95:34:25:13:f3:e0:fb:c0:da:35:78:61:18:
         3f:cf:26:21:e0:64:96:82:72:62:c8:f7:f5:4c:eb:84:dc:47:
         a8:9b:7b:f5:61:17:49:11:16:dd:8b:eb:43:6e:2a:31:48:2e:
         ba:df:59:c8:72:99:98:4c:8f:c1:34:e3:54:a3:85:c0:d5:46:
         60:b2:bb:94:5a:5a:e8:78:98:32:f2:12:bf:42:68:a7:ec:84:
         11:10:47:21:d8:8e:7c:50:59:3f:c8:25:1d:47:c4:f8:9c:35:
         5d:c3:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:44:44 2024 by rpki-client on console-ams.rpki-client.org