Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
File:                     3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa (raw, json)
Hash identifier:          Gieaps/sVWGO4EVoaPnllxhgw2OpKbh8FOYq+URWEY4=
Subject key identifier:   FD:0A:CA:8C:1A:B4:11:3D:2D:3A:DA:5C:8F:D6:F9:24:67:65:D8:1B
Certificate issuer:       /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial:       4778BE9046D7B5C639B64A1CA1871EBDF72C9A4C
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa
Signing time:             Fri 26 Apr 2024 10:02:06 +0000
ROA not before:           Fri 26 Apr 2024 09:57:06 +0000
ROA not after:            Fri 25 Apr 2025 10:02:06 +0000
asID:                     141903
IP address blocks:        103.164.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
                          rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:78:be:90:46:d7:b5:c6:39:b6:4a:1c:a1:87:1e:bd:f7:2c:9a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
        Validity
            Not Before: Apr 26 09:57:06 2024 GMT
            Not After : Apr 25 10:02:06 2025 GMT
        Subject: CN=FD0ACA8C1AB4113D2D3ADA5C8FD6F9246765D81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:fb:72:34:b4:c0:6d:7f:35:ad:f7:04:e9:
                    a0:f6:36:36:d6:d9:1c:94:b8:95:4f:9c:35:61:00:
                    5b:ed:ab:a8:d3:ae:e0:23:8e:b1:c9:96:9b:b9:fd:
                    f3:2f:27:a8:d1:11:97:5e:a4:0e:b9:cf:64:ff:ef:
                    72:a6:74:6a:e9:05:1d:54:e9:c1:ab:a2:41:81:cf:
                    e0:64:62:95:ff:2c:b5:06:3b:9d:90:fe:ab:b4:e6:
                    b8:b1:11:63:bc:b6:ce:1f:3a:58:44:d8:37:db:4e:
                    49:95:5c:fb:6c:34:b8:4f:04:2b:77:8c:6c:6f:54:
                    fd:73:2d:ef:0d:e0:7d:b6:51:ea:b5:34:c2:c9:af:
                    71:0c:ce:97:a0:25:5d:12:fc:67:94:8f:f1:ad:49:
                    95:73:ba:38:ef:08:41:c1:bb:20:80:5a:ce:b0:63:
                    36:db:02:9f:b4:67:0c:37:d1:54:f5:c0:22:94:55:
                    92:f9:e8:0e:ea:48:e5:f4:06:aa:59:1f:92:77:29:
                    42:2f:39:d1:f5:6a:12:0a:93:2e:57:ab:9f:f3:f5:
                    0f:ba:f1:70:5e:b2:f9:2a:fa:2c:98:a7:42:21:3e:
                    db:1c:39:67:95:1c:96:da:ff:cc:01:52:a7:7c:b0:
                    c0:8b:57:53:fd:d5:bc:ff:c6:39:8d:12:a3:2e:2a:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:CA:8C:1A:B4:11:3D:2D:3A:DA:5C:8F:D6:F9:24:67:65:D8:1B
            X509v3 Authority Key Identifier:
                keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35372e302f32342d3234203d3e20313431393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:be:ca:1e:a8:7c:66:54:5f:1c:83:31:7b:91:30:ea:5f:36:
         2d:89:5d:dc:cd:c7:b1:64:e6:86:ef:13:63:a6:51:37:90:41:
         a3:47:cd:87:b6:88:7a:2d:18:79:c4:d2:77:54:13:07:da:bb:
         5d:77:9a:90:24:42:e3:c9:94:ec:ef:32:1b:7e:24:4f:46:cd:
         d7:88:e3:ed:2c:ce:39:b0:c0:f5:d3:75:da:68:d7:6a:51:ba:
         74:35:32:1e:dd:53:94:f3:07:24:2a:5a:02:9b:fe:ed:5c:46:
         c3:65:6b:78:05:bd:a4:cc:2a:27:e0:a4:07:cb:8c:e6:18:f4:
         45:76:ea:77:4d:f6:e9:a0:53:6f:8a:ff:ad:6e:44:ff:07:27:
         67:ee:49:4f:77:94:5b:a1:1b:aa:7a:68:c4:29:32:2e:c0:e2:
         5e:ed:26:90:6e:0b:17:ed:6a:ef:61:9f:13:e4:48:ab:af:b1:
         5e:f4:f7:a2:ec:a9:83:9e:43:b6:04:5c:4a:a4:37:90:c5:31:
         4c:34:9a:45:54:53:bf:e4:b8:3b:d8:b4:ed:f3:2a:45:ad:6b:
         11:8d:2b:02:15:5f:ec:e3:e4:86:e4:5b:a8:c2:13:da:72:60:
         b7:bb:ca:43:2c:7e:c2:48:53:81:9a:e3:e4:15:1e:f6:49:85:
         59:5e:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org