Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          b+Xtzw+6na2a+xMS20wYCYPacvkf2l2PSoCEFblC4OY=
Subject key identifier:   B1:4B:90:34:90:2C:17:1E:95:24:45:F3:8D:8C:12:1B:CE:4F:74:F6
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       06AADCD5D0E2531417FFE9E6133E927BF7827A2B
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 13 Nov 2024 09:53:53 +0000
ROA not before:           Wed 13 Nov 2024 09:48:53 +0000
ROA not after:            Wed 12 Nov 2025 09:53:53 +0000
asID:                     46023
IP address blocks:        103.245.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:aa:dc:d5:d0:e2:53:14:17:ff:e9:e6:13:3e:92:7b:f7:82:7a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Nov 13 09:48:53 2024 GMT
            Not After : Nov 12 09:53:53 2025 GMT
        Subject: CN=B14B9034902C171E952445F38D8C121BCE4F74F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:87:17:e4:5a:78:03:db:7c:e7:7f:3d:71:
                    73:65:e3:dc:66:3a:10:5b:2d:44:77:a8:88:99:02:
                    b9:23:a6:24:fb:aa:88:0b:cd:60:cb:21:5d:29:91:
                    e4:90:13:da:c6:e5:ad:60:56:03:ec:4b:f5:b8:f7:
                    0f:31:cb:05:02:dc:47:21:88:40:18:eb:fc:5c:a3:
                    e7:0c:c2:9e:ca:64:01:bf:f5:a0:d5:01:48:1d:9b:
                    4a:9c:58:a1:d0:a4:ce:48:2f:a5:7b:b0:5d:7d:82:
                    77:db:45:a5:21:fe:dd:96:10:ff:34:d9:bd:b8:f6:
                    96:86:11:5f:06:ab:92:c5:cc:98:f0:8a:b4:5d:43:
                    73:2c:c9:98:f8:fd:3c:3a:2c:e8:2b:69:3b:9c:c7:
                    bf:af:b1:8c:ce:52:e4:86:5d:34:d5:b9:ab:57:d3:
                    46:56:ac:ef:1d:34:3e:e4:b6:c0:05:49:11:d0:89:
                    60:d4:16:2c:a7:22:72:17:2c:cf:0f:ca:8e:ca:4e:
                    e4:c6:e1:49:a1:23:9b:48:1a:04:24:0b:7d:a5:46:
                    60:fe:48:67:91:bb:6f:93:b8:88:a0:4e:d1:7e:9d:
                    8b:ea:c1:2c:8a:6a:23:b1:96:04:59:9d:1f:81:d4:
                    89:19:e9:2b:c7:fa:7b:3b:d0:ec:a2:40:6b:1e:8d:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4B:90:34:90:2C:17:1E:95:24:45:F3:8D:8C:12:1B:CE:4F:74:F6
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:44:74:1e:c8:cc:f9:af:92:76:e3:c9:f7:fa:b4:60:6b:
         17:8e:f1:ea:17:b1:cb:8c:fd:a1:6a:d7:53:23:f8:1b:45:a1:
         f6:5e:08:0e:ca:c6:15:3d:a3:f5:70:bd:18:5b:40:b9:65:72:
         f8:10:bc:98:3c:c8:9a:e3:50:21:36:ae:95:65:53:09:a0:98:
         5b:30:fc:7e:d3:2b:57:4f:77:95:b5:97:d3:dc:f8:bd:41:e0:
         78:2c:ce:fa:39:b6:fd:ab:8f:28:2c:82:7c:0d:aa:c4:66:d0:
         96:87:43:7d:5a:43:a8:6d:2f:6d:d0:c7:6f:89:c6:54:1b:e7:
         93:32:1f:f9:d8:51:48:9b:fe:04:7a:75:37:cf:cb:02:be:d4:
         ea:2e:27:4c:42:e9:5f:17:e2:cf:0a:3c:88:03:da:5f:c2:a1:
         2a:68:77:58:33:15:00:fb:57:7a:c2:5c:73:8e:4e:f2:c3:15:
         74:d4:f5:51:26:16:75:15:ff:a5:3f:fa:14:c9:c3:07:d0:e1:
         6e:59:f9:a0:b0:93:ea:f8:2a:b9:e4:a8:33:8a:28:9d:56:5f:
         78:b1:96:5c:36:b6:3a:3c:d9:43:61:4e:95:00:22:7a:27:6c:
         3b:4d:3f:5c:b4:57:d4:52:96:ef:d7:af:c2:c4:57:96:6c:7d:
         6f:15:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org