Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
File:                     3130332e33302e302e302f32322d3234203d3e20313331373738.roa (raw, json)
Hash identifier:          RPH1Q5KSgvzuf4nqRbO9CPwqZ8A+VML/hmITbBy7T5g=
Subject key identifier:   24:0C:81:2B:D4:60:DB:03:BD:32:60:3C:92:FD:AC:5B:2F:D8:84:DA
Certificate issuer:       /CN=4C493E592E006837A093CD288BB55329BE38D2D2
Certificate serial:       53F02E9BA2F53AADA90EB5C70765B4B304F6B250
Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
Signing time:             Mon 01 Jul 2024 01:05:00 +0000
ROA not before:           Mon 01 Jul 2024 01:00:00 +0000
ROA not after:            Mon 30 Jun 2025 01:05:00 +0000
asID:                     131778
IP address blocks:        103.30.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
                          rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f0:2e:9b:a2:f5:3a:ad:a9:0e:b5:c7:07:65:b4:b3:04:f6:b2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2
        Validity
            Not Before: Jul  1 01:00:00 2024 GMT
            Not After : Jun 30 01:05:00 2025 GMT
        Subject: CN=240C812BD460DB03BD32603C92FDAC5B2FD884DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:ca:71:2b:4a:41:4e:42:e8:23:fd:96:a8:
                    29:71:ee:f9:e6:48:0a:00:43:53:7b:de:b1:d7:7e:
                    91:46:34:7d:99:01:38:28:e4:d8:d2:a9:4b:89:ba:
                    8d:80:32:1a:e0:bb:5c:77:42:6b:46:49:85:72:17:
                    72:dd:da:92:2f:04:30:04:ae:c5:66:d4:a8:30:64:
                    6c:58:2c:c0:44:67:06:25:c0:f8:1b:ae:74:f6:14:
                    89:cc:2e:74:36:e4:a4:fe:ea:23:15:c9:3e:0c:bd:
                    5c:60:f7:66:08:a3:1f:97:4f:21:36:94:0c:c8:26:
                    37:9d:db:68:68:91:e4:c3:60:c6:ed:cf:4d:9b:7e:
                    ee:62:80:30:c9:0b:27:7f:48:80:2f:00:bc:ce:bc:
                    1b:9f:f9:e9:46:1e:be:fd:b7:d6:99:57:fc:5c:d7:
                    1e:96:97:44:83:ab:e5:f4:b7:b9:b7:ed:7f:13:ed:
                    1d:04:c6:be:f6:42:ba:30:3b:59:81:7a:1f:39:2b:
                    fc:9f:ff:f3:e0:c4:3f:69:58:79:b3:cf:4a:86:52:
                    12:eb:e9:2a:20:76:2e:b1:6a:77:58:70:98:e4:34:
                    87:e9:9f:c9:ec:0a:83:c7:e8:80:6b:84:1a:39:4b:
                    aa:6d:ab:5f:f4:b0:ff:14:71:d0:a3:c4:27:bc:d5:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:81:2B:D4:60:DB:03:BD:32:60:3C:92:FD:AC:5B:2F:D8:84:DA
            X509v3 Authority Key Identifier:
                keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:b1:93:42:c3:11:e8:e7:cc:49:e0:c8:d2:a6:3d:e7:25:dc:
         80:3c:ac:db:cc:4a:20:97:de:40:ab:c3:76:ac:fa:54:2d:23:
         1d:97:d4:4d:28:02:95:c0:42:d4:22:76:1d:22:29:ed:5b:ca:
         ed:50:8f:06:3f:0d:cc:67:8c:68:ae:65:0b:58:9f:4b:16:bf:
         31:3a:68:24:d9:06:42:c1:7f:46:e5:2c:f0:82:db:9e:32:1d:
         4e:79:5e:84:82:f5:d1:4a:9f:67:af:22:30:b3:72:85:62:a9:
         58:84:5b:72:53:03:f0:e4:9e:09:6d:fd:5e:e7:12:d0:ac:ae:
         d8:82:b5:25:db:77:a0:63:db:fe:44:24:ca:20:41:52:7d:6c:
         7a:ec:27:e6:d9:99:62:ff:0a:10:9a:f5:42:7f:ea:b7:3b:1b:
         3f:89:3a:c9:46:a4:7d:fc:42:db:ed:c1:a7:85:0e:e2:25:c0:
         f3:18:c1:41:68:48:b4:d5:c3:fb:79:24:dd:b1:bc:d4:fd:dd:
         09:e6:e8:51:95:81:50:6c:ee:5f:20:05:46:5e:30:83:89:77:
         31:c7:0f:28:01:81:87:0b:6a:69:77:d1:0a:1f:5c:00:82:7e:
         de:4b:85:4a:87:f6:cd:72:bb:f3:17:59:c6:a6:ea:dd:c4:b6:
         05:93:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org