Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
File:                     3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (raw, json)
Hash identifier:          Uv8tuYF/QTMtaVTPN9djdHPVFc+uhTVK2IKPoFXRjUA=
Subject key identifier:   6A:A8:9A:E3:4F:F2:7D:22:AC:BA:77:05:FE:86:BC:EF:F7:3C:A5:5D
Certificate issuer:       /CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
Certificate serial:       4F87851935126B8697ADD2B7B178CE2D1DBA9CD6
Authority key identifier: 70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
Signing time:             Thu 01 Feb 2024 13:00:01 +0000
ROA not before:           Thu 01 Feb 2024 12:55:01 +0000
ROA not after:            Thu 30 Jan 2025 13:00:01 +0000
asID:                     150500
IP address blocks:        103.131.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl
                          rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:87:85:19:35:12:6b:86:97:ad:d2:b7:b1:78:ce:2d:1d:ba:9c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70CC719DF5876DBD92D41F5AF0359E3A698BDDD4
        Validity
            Not Before: Feb  1 12:55:01 2024 GMT
            Not After : Jan 30 13:00:01 2025 GMT
        Subject: CN=6AA89AE34FF27D22ACBA7705FE86BCEFF73CA55D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:bd:87:a3:a6:06:b6:0f:4b:2e:b4:53:d5:
                    b4:16:55:15:44:c9:56:ad:53:bf:d4:bb:d3:4e:32:
                    62:45:3c:2d:35:c7:8c:fb:14:78:32:e0:7e:01:97:
                    4c:f8:6f:72:8c:9f:8d:0d:29:1b:49:0e:70:d6:76:
                    da:c1:5d:28:d4:1d:e3:e3:9d:c8:23:ce:e4:59:21:
                    04:8d:88:3c:b1:a6:70:b5:71:35:59:49:82:ba:00:
                    f2:eb:99:52:b8:a5:51:96:84:01:2b:8f:54:3b:df:
                    08:d5:de:e6:6d:91:2a:10:17:b8:82:71:d5:de:e4:
                    db:bb:5b:d5:78:30:30:88:a3:67:90:e2:bd:cb:f1:
                    a3:67:8a:ed:2d:d5:0a:2b:2d:c6:eb:d3:7e:25:6e:
                    ab:33:5e:49:b2:7a:8d:11:c4:c0:a2:d1:d0:a8:00:
                    2a:00:0d:63:a9:59:25:23:77:64:15:ad:7a:cf:80:
                    da:a3:58:b7:53:05:0c:13:d2:76:74:5c:b4:00:95:
                    b8:a0:97:0d:bd:41:9a:75:ce:1f:12:0a:87:13:e1:
                    7b:00:24:37:9b:cb:f6:e4:e4:41:c1:d1:ba:d7:65:
                    9a:0e:95:30:7e:b4:00:4b:70:db:06:a3:1f:73:f4:
                    c0:d8:4a:b2:cb:f2:16:e0:92:c0:6a:1b:f8:59:28:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A8:9A:E3:4F:F2:7D:22:AC:BA:77:05:FE:86:BC:EF:F7:3C:A5:5D
            X509v3 Authority Key Identifier:
                keyid:70:CC:71:9D:F5:87:6D:BD:92:D4:1F:5A:F0:35:9E:3A:69:8B:DD:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70CC719DF5876DBD92D41F5AF0359E3A698BDDD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:ec:fc:82:9f:d9:43:1f:23:38:83:19:a8:0a:ae:3e:58:
         fc:93:ab:cb:c6:dc:a6:85:25:7d:ce:17:b4:26:f3:cd:3a:3e:
         de:63:20:0f:2a:24:49:65:8e:23:5f:02:f1:a4:e5:8b:a4:59:
         c7:1b:9a:bb:25:74:59:ed:9d:ea:b8:89:82:27:70:4b:90:fe:
         6b:14:35:4c:7f:e2:15:c0:88:81:48:c4:f6:8f:2c:68:72:9f:
         68:01:4b:2a:2e:f8:79:4b:82:fb:01:97:b3:92:68:08:38:35:
         a8:96:b3:f0:6b:2b:80:60:62:3e:e4:3b:70:f8:fd:f1:a4:3c:
         72:36:15:22:64:f0:cd:75:3b:f6:74:29:fa:eb:31:db:5d:85:
         c4:94:84:6a:c3:eb:54:69:68:a8:15:22:d5:09:33:ac:4b:19:
         ae:58:52:03:22:ac:a4:35:6b:52:76:a8:a4:5f:d4:35:66:5e:
         41:bb:9e:fc:ab:88:65:41:04:f8:b5:19:4e:4c:93:d4:68:8d:
         e7:f3:50:dc:ab:ad:64:3f:f1:e0:65:40:55:a7:31:35:4c:f4:
         16:d6:33:ae:d6:de:bb:d5:dc:d8:56:0d:f5:54:b4:9a:17:76:
         ac:fc:71:17:5a:f5:a6:4a:f5:4f:9a:d8:96:00:28:79:dc:7c:
         71:c5:b9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org