Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          uw1IMEfhECnCQ5x+C3EkhFtsv7FNGp+Ew9Y1n8aiN7E=
Subject key identifier:   0E:33:58:DA:BF:55:F1:B8:70:7B:11:DE:E4:BA:CE:A9:2A:34:2E:F7
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       1EA1A041F298D373BDA93A8F24C3400B11C93270
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa
Signing time:             Fri 12 Apr 2024 20:00:01 +0000
ROA not before:           Fri 12 Apr 2024 19:55:01 +0000
ROA not after:            Fri 11 Apr 2025 20:00:01 +0000
asID:                     140389
IP address blocks:        103.150.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
                          rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a1:a0:41:f2:98:d3:73:bd:a9:3a:8f:24:c3:40:0b:11:c9:32:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Apr 12 19:55:01 2024 GMT
            Not After : Apr 11 20:00:01 2025 GMT
        Subject: CN=0E3358DABF55F1B8707B11DEE4BACEA92A342EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:cb:c3:c7:18:de:77:be:2e:5d:f8:69:6f:
                    dd:2a:4f:44:2b:b1:85:83:a6:73:66:ae:7c:2a:27:
                    2d:9d:7d:fe:3f:da:e9:79:55:4f:d5:2c:b2:33:b6:
                    f8:a5:c1:e6:9e:8b:b5:ed:d2:57:ce:1d:1b:99:4c:
                    ed:81:b8:db:7e:c8:29:10:92:88:cc:16:82:a6:1a:
                    a8:08:21:f2:5d:39:38:03:3b:c6:f5:20:f6:bf:e2:
                    75:d2:08:0a:41:08:bb:5d:da:ab:7f:4b:08:a6:06:
                    73:8e:a5:2d:ef:10:12:44:d5:ab:c0:bb:02:05:26:
                    8e:05:37:d8:62:5c:44:8c:7e:97:20:6c:9e:71:f7:
                    d7:a2:f7:8e:aa:f3:62:0e:ac:8d:dd:09:0f:df:2f:
                    c1:21:4f:8e:c8:d1:b7:a7:cb:7c:55:c6:1b:0b:5d:
                    25:e2:0b:06:bd:cf:60:5f:6f:ab:0e:dd:ac:a9:26:
                    6d:d0:63:4b:ca:46:dd:7c:80:6c:8d:dd:e3:20:46:
                    75:a1:c1:31:50:75:8b:c1:30:11:fd:46:fa:cc:db:
                    72:c0:af:a2:88:75:d4:e9:c2:f3:a3:89:bc:2d:ae:
                    94:6e:f2:97:1e:4a:19:cd:16:56:2e:10:90:c4:a8:
                    6f:bb:05:49:ab:4b:39:0e:6d:fe:51:fa:00:97:fc:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:58:DA:BF:55:F1:B8:70:7B:11:DE:E4:BA:CE:A9:2A:34:2E:F7
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:b5:99:7e:91:66:4c:9e:cf:a5:84:e3:e3:03:6a:9b:1a:
         4e:df:c6:a7:3a:ba:7e:81:d2:d2:11:00:b9:43:c4:e9:6e:03:
         14:0d:ab:02:be:b7:be:80:82:6f:ea:bd:07:b2:2a:92:7e:13:
         7d:64:9c:b3:11:37:6d:f4:df:63:4d:76:0c:f5:03:49:2f:9a:
         d6:79:9c:fb:d2:2f:05:b4:1d:6b:ca:f4:6b:57:db:7f:c8:ca:
         96:07:56:56:5d:1b:98:1f:98:5a:ee:98:f0:4b:7f:ae:ad:ab:
         ce:54:a6:03:8c:35:ae:4b:1e:5d:37:64:fc:12:60:27:3f:a6:
         ea:a0:25:cd:28:52:86:8f:32:55:68:af:4c:14:c2:ab:52:7d:
         51:ec:43:82:d9:3b:61:03:52:61:e7:a9:c7:37:7d:c3:96:6e:
         35:d6:c5:82:dc:16:1b:9e:a1:f7:10:fb:50:1e:8a:60:11:ad:
         fb:ab:e0:03:e1:3e:ca:05:40:b8:31:55:e1:3f:4a:2e:6d:62:
         94:d8:5f:6c:5d:bb:bf:69:8c:4b:95:26:02:ad:e5:41:ab:4b:
         86:87:fe:f8:55:71:4f:26:eb:63:18:e5:ad:4c:42:7c:62:20:
         34:80:1c:0a:f2:1f:2b:56:f7:a5:bf:06:b1:b7:f1:79:06:b2:
         34:cf:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org