Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36372e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          5vNJdsqDgtKOPi9BoVegbcmCSbcHkrBxHCGXtJxH6FY=
Subject key identifier:   ED:CB:D4:5A:16:7D:63:21:6C:4C:00:26:D5:4A:0C:3B:90:65:3B:1C
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       0D8A61EAA53A46CE502D8A4888BE7BBE1B94DA87
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 27 Feb 2024 04:00:01 +0000
ROA not before:           Tue 27 Feb 2024 03:55:01 +0000
ROA not after:            Tue 25 Feb 2025 04:00:01 +0000
asID:                     136055
IP address blocks:        103.81.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:8a:61:ea:a5:3a:46:ce:50:2d:8a:48:88:be:7b:be:1b:94:da:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Feb 27 03:55:01 2024 GMT
            Not After : Feb 25 04:00:01 2025 GMT
        Subject: CN=EDCBD45A167D63216C4C0026D54A0C3B90653B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:6a:4e:f0:13:e2:cd:e4:14:86:15:28:7a:
                    e9:66:c9:bf:d2:dd:b5:c6:87:4b:ec:21:d6:2c:5c:
                    a2:4a:c8:73:c3:e9:21:33:af:1f:b0:63:41:5a:3b:
                    a2:eb:71:7c:64:42:b3:68:3d:02:fd:30:97:f1:0f:
                    f5:30:ba:99:5e:05:b3:22:09:10:fa:73:46:ce:b7:
                    18:e4:dd:77:69:01:64:d8:77:d4:bb:6c:2a:84:41:
                    af:7b:c9:ab:51:d5:7b:73:36:93:96:d8:8c:8e:08:
                    0b:73:d7:18:d2:48:64:a4:7e:34:57:76:fd:0a:c9:
                    e9:18:8e:4c:74:4e:10:81:58:23:6f:91:89:f8:0c:
                    ed:2d:86:31:19:a2:b2:64:76:76:2b:2f:27:2a:d9:
                    da:29:e9:86:c4:f2:92:8d:84:79:23:9a:d7:81:df:
                    ab:d6:dd:ae:0c:94:a1:02:3b:52:66:7c:2c:11:33:
                    4c:1e:c5:89:74:78:70:18:5f:be:cc:cf:96:38:be:
                    f9:17:fd:71:31:97:00:23:05:4f:1a:f2:71:68:1d:
                    13:f1:75:87:b6:17:70:00:25:f2:b0:4f:d8:2c:02:
                    00:91:df:e1:fc:b2:3a:1f:56:bb:7d:20:6b:f7:81:
                    e2:97:7c:c0:d1:58:fe:b6:46:58:ec:15:2f:23:07:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CB:D4:5A:16:7D:63:21:6C:4C:00:26:D5:4A:0C:3B:90:65:3B:1C
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36372e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:ce:a7:1b:81:48:b9:aa:c9:bd:ee:c0:47:d0:d0:a9:7c:
         48:89:3a:46:08:32:e6:b4:91:57:1f:25:88:61:a8:66:9b:a0:
         5c:9d:e0:2e:a6:96:ed:2b:03:ef:26:10:df:53:d4:4a:28:a5:
         a6:c7:88:bd:69:64:37:ff:3a:fa:22:aa:7e:7d:5d:f9:84:4b:
         71:9f:f0:0c:67:90:a4:35:05:73:e9:48:13:01:ec:e0:a7:ea:
         e7:00:a4:7c:96:2f:32:43:87:da:e1:cb:3f:13:a3:3b:a2:7e:
         d9:23:14:42:4e:05:bf:a0:a3:13:ed:f0:91:3e:5e:06:83:33:
         5a:c9:4a:1b:64:8f:4e:74:f1:26:d1:df:e1:46:76:d9:0b:e5:
         57:cc:99:e7:df:73:f6:10:3f:b7:59:2d:47:8a:77:c2:f3:75:
         3b:07:ee:5e:4f:6c:16:cc:b4:bf:05:3a:25:b1:10:7b:c1:94:
         1e:f7:8a:33:96:e7:72:6d:b2:93:10:b3:1e:4b:e6:b2:ad:52:
         9a:c5:12:a0:fd:b6:d7:bf:49:51:23:73:ed:12:c9:d2:ec:8c:
         31:b9:24:ba:6a:26:3f:33:63:92:96:39:55:0c:06:9c:9f:fb:
         fb:9c:96:09:5b:a6:ac:4d:f5:19:42:74:54:09:dc:6c:fe:0f:
         58:fb:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org