Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa
File:                     3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (raw, json)
Hash identifier:          MK8sCC8N+jxIle5DouV0FAWtS3LVmt81dQuXnTzLQj0=
Subject key identifier:   AF:71:55:13:46:00:D8:9C:55:B8:9C:8D:8E:E4:68:53:C5:51:80:6C
Certificate issuer:       /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
Certificate serial:       01FAC9BEB23810AD11B3FA20C723FD19E9FBE6C9
Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa
Signing time:             Thu 25 Apr 2024 15:00:00 +0000
ROA not before:           Thu 25 Apr 2024 14:55:00 +0000
ROA not after:            Thu 24 Apr 2025 15:00:00 +0000
asID:                     150980
IP address blocks:        103.70.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl
                          rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:fa:c9:be:b2:38:10:ad:11:b3:fa:20:c7:23:fd:19:e9:fb:e6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16
        Validity
            Not Before: Apr 25 14:55:00 2024 GMT
            Not After : Apr 24 15:00:00 2025 GMT
        Subject: CN=AF7155134600D89C55B89C8D8EE46853C551806C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:c4:ef:b6:73:f8:10:f2:4c:5d:75:3b:4b:
                    6b:e7:9b:c2:17:a1:bd:3f:69:2e:16:21:40:be:82:
                    2f:98:71:33:f9:8c:b4:8d:5c:bd:4b:2d:f7:65:06:
                    75:65:cb:d4:7a:8f:a1:ba:a7:69:b2:1a:7d:df:1d:
                    a4:ff:30:d2:10:08:5e:0b:52:8d:07:32:d9:6e:d3:
                    6b:98:88:91:93:51:4c:bd:03:25:dc:59:fe:7d:25:
                    7d:ac:b5:22:95:b1:a5:ac:1a:d9:38:d5:1d:5e:31:
                    99:40:88:c8:5f:a2:c5:4e:c6:5d:e8:21:07:92:a5:
                    29:13:f8:90:38:48:58:6c:26:64:fc:cb:88:be:42:
                    04:ef:36:44:fe:38:a5:65:d4:23:b1:a9:5d:7f:75:
                    45:2e:78:3a:c5:58:17:24:a7:ba:2c:89:c8:be:c1:
                    06:6d:38:5f:72:20:ab:63:89:32:ef:91:67:11:62:
                    bd:9c:ea:ed:65:82:60:dc:32:20:a6:c0:2e:bb:6b:
                    ea:bc:f6:20:32:a3:3d:77:f7:79:92:9c:0e:55:14:
                    04:6d:71:78:7f:bd:61:15:7b:f1:a1:60:a2:e0:02:
                    b2:8a:cb:47:65:ba:04:f4:dc:fa:9f:fb:57:f6:e3:
                    bd:05:6b:c7:8a:94:df:7c:73:c4:74:db:d2:d2:3b:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:71:55:13:46:00:D8:9C:55:B8:9C:8D:8E:E4:68:53:C5:51:80:6C
            X509v3 Authority Key Identifier:
                keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:42:95:8c:1d:97:8c:91:73:73:2f:91:07:2a:cb:c2:8b:8d:
         57:75:3e:26:0b:88:8f:5e:0c:40:57:0e:e5:fd:a4:60:b3:e0:
         da:96:e4:6c:1f:14:e3:39:a9:fe:67:c9:53:c6:d6:27:26:6a:
         3e:b9:e9:0a:19:31:b3:d7:ec:b8:ad:35:f3:42:45:16:35:7b:
         6a:95:8d:81:96:49:90:d5:46:33:cf:3f:d5:85:b2:74:0c:7e:
         e5:81:51:2b:c2:69:d4:3b:b0:fb:56:a1:02:20:fc:0d:44:b7:
         f6:dc:8d:63:bc:f5:6f:0c:ea:cc:05:b1:10:c0:0f:ef:14:a2:
         17:7b:32:f4:0f:98:a4:0a:68:bc:d3:35:b5:73:56:65:66:b6:
         7e:3f:a8:6b:74:92:b1:ff:20:08:34:29:f0:25:ed:12:21:7d:
         bd:62:88:d4:63:ee:0b:e1:0d:74:11:2b:44:ae:cf:99:25:19:
         14:f8:c2:29:bf:cf:fd:4b:66:4e:68:9a:5c:c1:12:a0:f3:3b:
         f5:1f:8f:8f:8b:3e:22:dc:a0:cb:bb:3e:60:b2:da:cd:db:ae:
         1b:48:84:d2:46:75:68:2e:12:03:9b:92:cf:55:aa:d6:cf:0c:
         cf:19:d4:7b:0c:b7:78:43:a8:87:95:74:b3:f6:35:14:62:92:
         3b:52:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org