Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier:          4Ce67YL0bl40nJXMynzDOb6UG6RAWI//TFzIcKJFNZA=
Subject key identifier:   0F:41:AA:AF:1F:8F:26:35:D8:22:D1:86:B3:C8:35:D6:27:53:88:8C
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       2F21C85E080DABB25112BD94A6DCFD3532C8EACB
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
Signing time:             Sat 31 Aug 2024 09:00:00 +0000
ROA not before:           Sat 31 Aug 2024 08:55:00 +0000
ROA not after:            Sat 30 Aug 2025 09:00:00 +0000
asID:                     139419
IP address blocks:        103.144.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:21:c8:5e:08:0d:ab:b2:51:12:bd:94:a6:dc:fd:35:32:c8:ea:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Aug 31 08:55:00 2024 GMT
            Not After : Aug 30 09:00:00 2025 GMT
        Subject: CN=0F41AAAF1F8F2635D822D186B3C835D62753888C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:5f:3a:01:05:cb:8c:1c:b9:34:82:c9:a3:
                    21:b3:ee:7d:8f:40:fa:43:20:bd:54:67:68:a1:b3:
                    1b:76:a9:20:e4:ce:ee:d5:aa:a2:36:60:26:c1:47:
                    d2:31:2f:4c:df:a7:70:56:1e:62:06:97:9f:a1:65:
                    13:49:1f:29:91:8e:8d:f2:a8:29:98:b2:0b:cd:76:
                    9e:fb:5b:4e:dd:cc:b8:29:15:0d:7a:9c:a1:52:da:
                    6a:17:d2:a0:ba:69:ab:fd:95:8e:f6:e9:7f:f9:82:
                    b2:5c:f9:66:30:0f:e2:fd:08:a9:36:ab:89:99:bb:
                    71:dc:50:9c:ad:6b:e3:c6:b0:c7:b6:db:cb:7a:50:
                    3b:a9:50:0a:54:39:c9:40:69:d9:6b:95:de:c2:6a:
                    f4:a3:58:5f:13:3f:65:f3:77:a1:95:8b:f2:4f:f8:
                    ca:ce:56:b1:55:0e:df:86:c1:1d:d2:18:cf:71:90:
                    36:4b:93:45:4e:50:d2:fd:6b:41:6b:dc:e6:b1:9a:
                    5f:81:93:38:89:70:b4:38:27:c9:e7:d5:9d:0f:66:
                    d9:03:d4:70:79:64:7a:08:35:6b:3a:ac:e8:ec:56:
                    77:3c:32:80:37:cd:ee:f8:57:b7:96:bf:8a:93:7b:
                    43:56:10:68:62:f8:95:a1:fc:c9:f1:6a:d6:f0:42:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:AA:AF:1F:8F:26:35:D8:22:D1:86:B3:C8:35:D6:27:53:88:8C
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:33:fd:47:4a:94:21:22:d0:b8:4a:71:da:0e:da:6d:37:ca:
         69:71:ce:99:d1:64:c5:5d:db:68:0e:60:db:f9:dc:4e:80:89:
         a5:5d:fd:a5:e5:bc:f1:1d:fc:78:38:13:85:f2:d8:3a:ca:9a:
         48:da:5f:5a:70:ee:2a:16:2d:53:ed:e8:3b:72:13:83:07:40:
         96:65:1f:f2:c2:86:55:f0:ed:5e:11:e3:5e:f9:86:56:92:9b:
         77:27:94:1f:80:48:c6:0d:19:12:99:ed:a4:b7:8a:23:10:4a:
         b3:a5:55:06:ef:04:fc:66:bc:3c:66:40:b4:55:6a:92:61:8e:
         f2:aa:77:01:8b:fc:74:ef:e1:52:74:94:58:59:57:79:17:35:
         e5:50:bd:73:93:b8:f0:17:4e:79:52:a9:b7:53:5c:7b:a5:dd:
         ad:c2:ee:eb:3b:42:ae:3b:e5:d8:90:55:63:aa:ca:48:47:ff:
         f6:17:73:ac:17:fd:17:1e:4d:7e:6b:22:74:65:1a:66:a5:6d:
         f4:01:a9:1c:61:18:5a:53:0a:7b:08:45:06:79:34:40:d2:32:
         f2:71:31:d0:d3:1a:4c:65:27:54:12:60:ad:36:30:bd:60:ad:
         db:f9:c5:a7:8b:d3:36:fc:69:c6:6e:88:14:83:2f:ac:bc:a7:
         43:00:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org