Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa
File:                     3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier:          JkQA/oVx7nSJZSG/P9kFIu+xx/U2BTezfRvZq/eeJWQ=
Subject key identifier:   56:79:C8:50:7A:86:5F:2F:67:EF:C8:F1:77:63:9E:40:8C:EB:4B:18
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       1F1397C8FEC0362DB2F18DD840549851A350A768
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa
Signing time:             Sat 31 Aug 2024 10:00:00 +0000
ROA not before:           Sat 31 Aug 2024 09:55:00 +0000
ROA not after:            Sat 30 Aug 2025 10:00:00 +0000
asID:                     139419
IP address blocks:        103.144.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:13:97:c8:fe:c0:36:2d:b2:f1:8d:d8:40:54:98:51:a3:50:a7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Aug 31 09:55:00 2024 GMT
            Not After : Aug 30 10:00:00 2025 GMT
        Subject: CN=5679C8507A865F2F67EFC8F177639E408CEB4B18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:df:3e:5b:5f:12:67:79:e0:24:48:e2:e5:
                    5d:7f:20:0a:4c:0d:c7:a1:08:d6:fa:c8:e8:ce:ee:
                    0c:d6:90:24:97:ef:2a:fe:e4:89:6b:3f:f6:79:d7:
                    ec:d5:c4:1b:38:f3:aa:14:a0:52:52:ef:91:01:53:
                    12:13:6a:91:2f:44:0b:ad:90:ef:1a:8a:aa:20:ae:
                    b5:35:ab:20:b8:e5:91:86:76:50:12:1b:2a:99:90:
                    84:da:b2:49:8e:dc:fb:52:96:13:8e:2a:1a:ce:bd:
                    54:83:dc:ad:d1:01:b4:c2:56:45:65:df:b4:2f:e9:
                    e3:29:09:8a:cf:e5:a8:12:77:b5:e2:59:f6:47:31:
                    e9:d0:7d:61:74:b8:b0:a3:96:1b:fd:7d:86:ef:13:
                    83:20:30:66:b3:c3:e7:81:f8:02:fb:de:34:6c:0f:
                    75:61:62:fd:46:ce:65:fb:b9:a6:ed:a4:eb:12:20:
                    2c:9a:9b:15:08:f2:aa:fa:ad:a4:e0:ec:d9:d9:42:
                    3e:eb:ed:fa:2e:63:b1:d5:1d:32:37:9d:3f:48:19:
                    0e:24:88:35:d5:7b:d4:32:a5:68:e7:f5:aa:e1:eb:
                    4b:07:5e:22:d9:e2:28:cf:7e:72:9f:88:b2:30:f8:
                    07:3d:30:03:b0:47:10:74:54:09:55:21:bf:ae:90:
                    f5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:79:C8:50:7A:86:5F:2F:67:EF:C8:F1:77:63:9E:40:8C:EB:4B:18
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35352e302f32342d3234203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:5b:51:16:92:b6:28:f1:fe:26:b4:80:08:63:99:9e:4c:
         a6:9a:58:3b:56:4f:4e:3f:7c:9d:0f:e4:42:df:d1:97:27:1d:
         76:d6:31:2b:ef:d5:d1:d2:b9:14:1b:a8:7f:67:70:b2:76:1d:
         e4:f3:20:45:74:4e:ed:1f:db:27:91:6a:7a:05:59:f9:23:11:
         72:01:6b:d5:b3:57:9d:d7:0c:10:3e:2b:0f:52:c0:22:ca:2a:
         9e:1a:11:7b:7a:15:47:67:de:ca:76:40:de:4b:8b:ab:98:37:
         bb:ca:3c:14:4a:5c:83:99:f7:db:43:b6:60:5e:ed:97:5d:f3:
         a1:10:da:5f:d4:c8:6d:67:f8:97:18:fd:f2:52:9b:82:f9:33:
         f8:b6:0a:e1:2c:7d:5f:bd:13:fc:8e:c8:4c:f4:d5:33:2c:dd:
         9d:8e:ab:3d:1d:c1:03:d5:a5:b6:9e:92:73:32:c0:e7:1c:ac:
         b2:a5:17:c9:1b:6c:ff:e0:8f:09:b6:9d:39:d4:ef:c5:65:af:
         3a:21:0c:73:ef:d0:55:fd:1f:d1:31:5f:ef:d1:92:4d:94:f0:
         2d:57:f7:7c:74:fc:19:43:78:57:b8:1d:11:4f:8d:fb:f6:12:
         83:59:7b:ea:2a:2b:21:40:d7:35:a1:55:13:56:ee:a5:90:53:
         e5:ef:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org