Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=
Subject key identifier:   41:E9:B2:19:21:B4:94:FD:EB:5F:B3:7F:E0:CE:1B:0B:70:01:5C:6F
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       7581939B3111056D98B43B059C75E8ECB8E1CD50
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 16 Jun 2024 07:00:01 +0000
ROA not before:           Sun 16 Jun 2024 06:55:01 +0000
ROA not after:            Sun 15 Jun 2025 07:00:01 +0000
asID:                     55002
IP address blocks:        103.82.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 00:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:81:93:9b:31:11:05:6d:98:b4:3b:05:9c:75:e8:ec:b8:e1:cd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Jun 16 06:55:01 2024 GMT
            Not After : Jun 15 07:00:01 2025 GMT
        Subject: CN=41E9B21921B494FDEB5FB37FE0CE1B0B70015C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:f1:8e:eb:85:07:63:f9:25:43:4f:64:ee:
                    2b:5d:f7:84:b9:09:d2:b9:44:db:73:a3:b0:2d:59:
                    28:cb:81:81:20:b0:8b:37:2b:6d:9a:16:06:79:85:
                    b7:74:7e:36:c5:f9:d8:e5:bb:19:ab:7f:90:c1:31:
                    62:78:14:33:18:30:14:68:f2:92:31:c0:9e:b8:ff:
                    ce:bc:14:23:d4:4a:a3:93:c5:8d:64:74:a6:14:65:
                    b6:65:37:d7:ad:d9:2b:6b:6b:14:67:d0:48:2c:c0:
                    8d:94:8b:6f:0e:33:f8:f7:b9:df:6f:51:b4:c1:6f:
                    bb:d8:aa:67:56:df:cd:43:10:6e:9c:ce:d0:61:68:
                    b1:87:5b:7b:5f:f8:56:5b:cc:f9:54:f2:85:15:c5:
                    89:18:cd:de:d0:d9:77:e9:b9:fc:1b:97:13:0f:d8:
                    dd:bd:f7:f9:ed:04:1d:13:9d:ed:05:c4:be:18:e2:
                    f1:29:65:6a:af:c3:15:c8:58:8e:9f:ac:ab:d8:1f:
                    b3:d9:48:a3:cf:18:5d:34:a9:e7:77:56:2f:3d:27:
                    05:d2:66:e9:4b:ba:06:6e:74:dc:22:eb:11:8b:8c:
                    a9:d9:55:66:13:e0:42:63:06:cf:f8:2c:4f:8f:27:
                    79:34:d7:3e:d7:3e:59:5c:42:3a:67:ae:ad:48:7a:
                    d8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E9:B2:19:21:B4:94:FD:EB:5F:B3:7F:E0:CE:1B:0B:70:01:5C:6F
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:7e:cb:ee:58:9e:2e:0e:9c:86:14:12:b4:9e:51:ad:9d:
         3a:5b:c0:b9:b0:cd:54:8a:89:45:f4:52:75:17:99:e4:8a:26:
         9f:9f:e9:02:f4:2a:e0:8e:02:dd:2d:f6:22:d0:ae:0f:22:2e:
         fc:ac:a6:9a:70:ba:f0:17:c0:d6:61:c8:47:36:a8:8c:91:89:
         eb:41:6d:a5:c9:8e:be:0c:2a:be:40:b1:b5:11:49:92:05:5b:
         a7:86:83:05:b4:76:52:91:c0:90:eb:63:4c:e1:14:b0:2c:e5:
         83:a9:b2:c4:bc:8a:a4:e4:6d:dd:7f:8a:d6:42:83:a1:84:59:
         28:4e:d0:e3:af:8f:13:e3:9e:85:b6:80:4c:b4:62:b1:d7:ee:
         25:f6:10:37:fa:2a:29:60:b7:9a:78:3f:28:64:95:c5:39:b3:
         9e:da:fa:8b:b8:41:7a:6c:5a:14:c9:c3:15:17:2f:f1:36:1a:
         9e:01:c7:03:10:54:d0:b7:dd:ad:26:d1:10:e0:7e:13:0d:fb:
         88:88:2f:0e:c2:c4:79:e4:07:06:16:cb:84:65:b6:9f:7a:eb:
         0a:7e:64:6c:e2:3c:98:31:56:13:a8:c8:9d:e6:08:c6:4d:b8:
         8a:15:a6:7c:31:8c:b8:44:1a:4a:8c:cd:c1:10:78:2b:bd:39:
         59:46:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:09 2024 by rpki-client on console-ams.rpki-client.org