Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa
File:                     3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (raw, json)
Hash identifier:          z/bdYKPsWk7YNEeVXfCQTitUSwNMYoNeymKYv0ZpbrQ=
Subject key identifier:   0F:4B:44:7B:C6:59:9C:BC:0E:D8:6A:77:98:A2:A6:78:E9:A3:D8:5C
Certificate issuer:       /CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
Certificate serial:       6DFB4A848311E4AE2AD8E5E9769FF446B5E6BC15
Authority key identifier: D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa
Signing time:             Tue 27 Feb 2024 05:38:15 +0000
ROA not before:           Tue 27 Feb 2024 05:33:15 +0000
ROA not after:            Tue 25 Feb 2025 05:38:15 +0000
asID:                     131737
IP address blocks:        103.15.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl
                          rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fb:4a:84:83:11:e4:ae:2a:d8:e5:e9:76:9f:f4:46:b5:e6:bc:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3917D15F87332C50BFC1165A882EFEA7D8B6162
        Validity
            Not Before: Feb 27 05:33:15 2024 GMT
            Not After : Feb 25 05:38:15 2025 GMT
        Subject: CN=0F4B447BC6599CBC0ED86A7798A2A678E9A3D85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:5b:b6:36:56:1f:67:01:c5:b6:3b:2b:7c:
                    40:7b:4d:e2:aa:8a:cf:1d:11:32:1f:4d:0c:c3:f0:
                    06:93:bb:9b:fb:e8:cb:83:20:05:d1:b4:b4:f2:4e:
                    25:fe:3e:89:d8:c8:86:5c:db:16:eb:63:6c:0a:a2:
                    37:cd:da:c0:8d:26:15:4f:d6:60:5e:c7:14:7b:8b:
                    e8:18:b7:68:cd:63:33:42:ae:00:63:b7:0b:60:70:
                    c2:4c:be:16:ef:77:5d:76:53:a6:0d:93:7b:ee:c6:
                    c0:60:ad:0d:f5:bd:c1:c1:16:3e:db:5f:34:fa:c6:
                    86:0f:05:78:e3:bb:44:fc:1c:d0:87:26:72:08:7d:
                    a6:ef:0f:34:8a:9c:0f:b4:8e:c6:64:a0:09:92:0b:
                    61:22:11:96:7a:2f:c6:0e:44:9e:3a:7d:eb:48:32:
                    af:b7:7c:6e:1b:80:78:17:f0:3d:aa:29:02:89:7b:
                    e5:61:ce:96:96:8f:ed:0a:98:d3:22:e9:ab:f6:fa:
                    15:c8:b3:82:5a:6f:ca:ee:b3:21:8a:24:20:95:b8:
                    59:6e:45:5b:5d:ca:ab:61:f8:d0:81:6e:a3:0f:76:
                    3d:ec:31:de:31:c0:a7:da:45:49:7b:ec:4c:74:d4:
                    6e:bd:40:58:a4:a9:7f:54:5b:08:01:0d:a4:db:66:
                    55:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:44:7B:C6:59:9C:BC:0E:D8:6A:77:98:A2:A6:78:E9:A3:D8:5C
            X509v3 Authority Key Identifier:
                keyid:D3:91:7D:15:F8:73:32:C5:0B:FC:11:65:A8:82:EF:EA:7D:8B:61:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/D3917D15F87332C50BFC1165A882EFEA7D8B6162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3917D15F87332C50BFC1165A882EFEA7D8B6162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:17:49:53:f8:d7:95:84:43:4d:3d:dd:73:5d:09:92:f5:
         76:fb:ae:60:8e:ab:b7:81:32:fa:bc:fa:71:82:3b:d3:e5:23:
         87:fe:8f:56:6d:56:3f:9f:f1:39:b6:75:92:28:09:9e:7c:a4:
         50:8f:6e:06:90:52:5e:6e:e3:f5:21:1e:ce:6f:5f:d8:8f:87:
         db:99:e7:13:4c:4d:64:26:5f:31:4a:87:4f:15:ec:a1:ce:d7:
         fc:65:c7:85:41:c8:ec:54:f6:35:a3:8c:51:38:79:1d:40:cc:
         64:46:a3:d4:a3:39:25:87:c3:ff:c5:67:0c:7c:82:38:79:39:
         56:6e:a9:da:81:a9:1b:f8:7d:2c:0e:b4:84:c2:c2:9b:59:c2:
         07:ba:c0:40:56:79:fe:fe:de:69:10:d4:29:21:c2:77:85:83:
         5d:64:dd:3c:75:f6:41:c0:ba:c1:bc:0d:0b:1e:d7:02:4c:3f:
         2a:b0:8d:ab:ba:df:91:a8:dc:74:fa:19:9a:b3:8a:99:d9:8f:
         78:28:6d:4b:1a:69:9a:c1:d5:81:93:50:2a:f8:3e:80:27:b3:
         08:c9:0a:00:c0:a0:af:49:59:29:0e:3f:94:2f:6c:48:44:bc:
         67:cb:6d:ec:49:59:9e:e8:43:a8:e4:39:e1:c2:3c:4f:37:90:
         ae:10:a0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:06:24 2024 by rpki-client on console-fra.rpki-client.org