Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa
File:                     3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (raw, json)
Hash identifier:          JjyDr2Ctwx6p5beCuL3MsA6ech7V//I2qBBlG9qo/TM=
Subject key identifier:   A3:3B:6F:3B:C8:54:46:A7:A3:55:9F:3A:58:61:54:08:6C:F9:E8:5E
Certificate issuer:       /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial:       53DDFEE0B18B73A0BEC558007279CBBE2A52CE85
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa
Signing time:             Mon 22 Jan 2024 06:00:01 +0000
ROA not before:           Mon 22 Jan 2024 05:55:01 +0000
ROA not after:            Mon 20 Jan 2025 06:00:01 +0000
asID:                     150502
IP address blocks:        103.54.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
                          rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dd:fe:e0:b1:8b:73:a0:be:c5:58:00:72:79:cb:be:2a:52:ce:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
        Validity
            Not Before: Jan 22 05:55:01 2024 GMT
            Not After : Jan 20 06:00:01 2025 GMT
        Subject: CN=A33B6F3BC85446A7A3559F3A586154086CF9E85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:03:2d:06:5f:c4:11:87:9c:d6:4c:42:42:
                    ba:51:12:79:b0:2f:aa:74:c5:81:20:d0:2c:87:5c:
                    4e:53:72:17:ce:3b:1d:bd:69:f4:48:5c:eb:a1:60:
                    a2:08:4c:76:b7:ac:27:b2:16:9b:83:60:24:95:72:
                    35:a5:4f:e9:5b:40:ab:85:38:57:aa:50:c8:33:6a:
                    36:6c:0f:1b:a9:e4:1c:2d:f4:f1:7e:c8:19:6f:90:
                    67:84:69:f7:56:50:8c:f9:fe:5c:7a:57:c9:25:e2:
                    bd:61:0c:3b:f1:10:63:98:90:f0:7e:32:e3:b8:d0:
                    e0:d3:81:5e:9f:d7:b3:cd:64:bf:66:bd:1a:e8:f8:
                    c8:c3:8b:af:53:9f:d8:0b:7f:dd:c3:08:c3:47:d1:
                    2e:d2:41:37:36:7b:e8:17:99:07:e9:c5:da:95:13:
                    14:cf:fd:c4:31:cb:e1:71:e0:ba:9e:49:d5:bb:cd:
                    50:1d:97:cd:0e:ea:f8:86:8b:70:88:92:0e:59:3a:
                    83:79:7d:5f:0c:b9:31:12:eb:09:9e:b5:1f:31:8d:
                    e1:fe:29:87:eb:a2:74:74:ca:55:56:d4:dd:d3:43:
                    60:bd:a4:89:0b:f3:2a:e4:99:f2:48:2a:00:14:05:
                    2a:26:33:c5:ee:f8:4b:74:2b:6b:62:d1:82:69:f5:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:6F:3B:C8:54:46:A7:A3:55:9F:3A:58:61:54:08:6C:F9:E8:5E
            X509v3 Authority Key Identifier:
                keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d8:9c:f6:51:df:a7:b2:36:d1:6a:a2:9d:5e:b6:b5:8a:71:
         91:5f:a4:c5:8f:11:d1:17:75:07:7f:ad:ed:45:50:91:93:bf:
         bf:60:a9:08:98:23:bb:11:58:49:f9:70:73:15:6a:54:2b:c0:
         99:31:2e:85:fb:47:c4:dd:84:16:73:ec:4b:71:0f:53:15:78:
         55:ed:d0:30:08:68:f3:6c:bc:c8:95:4e:28:d8:ec:f3:66:09:
         69:fd:fc:2b:07:cc:ee:c1:22:a5:ec:9f:29:da:6c:5d:c8:e0:
         c5:04:e4:62:88:3c:df:79:d0:08:7d:49:f8:cf:80:8d:33:d3:
         7a:f5:19:45:32:8a:bf:a5:7d:51:60:26:5f:7e:b4:c0:7c:f0:
         50:7e:50:ca:e3:13:f4:4f:76:dd:9c:38:86:85:dd:f9:45:13:
         3a:ab:c8:2b:a0:f5:89:a3:b4:78:b0:57:50:4b:87:28:aa:d5:
         21:db:bb:8c:52:0f:9a:b8:60:45:67:79:5f:b1:f1:3f:1b:00:
         98:c9:84:be:65:7e:04:36:fe:81:39:54:d7:a0:11:e0:b4:6d:
         9d:45:77:ba:6f:dc:6d:63:3f:bd:18:5c:e4:c1:b1:11:21:21:
         31:45:f4:81:08:46:0a:85:66:1f:65:bb:26:85:70:48:08:dd:
         b5:91:1b:50
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUU93+4LGLc6C+xVgAcnnLvipSzoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1
RUVDMjM5QjAeFw0yNDAxMjIwNTU1MDFaFw0yNTAxMjAwNjAwMDFaMDMxMTAvBgNV
BAMTKEEzM0I2RjNCQzg1NDQ2QTdBMzU1OUYzQTU4NjE1NDA4NkNGOUU4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCflwMtBl/EEYec1kxCQrpREnmw
L6p0xYEg0CyHXE5TchfOOx29afRIXOuhYKIITHa3rCeyFpuDYCSVcjWlT+lbQKuF
OFeqUMgzajZsDxup5Bwt9PF+yBlvkGeEafdWUIz5/lx6V8kl4r1hDDvxEGOYkPB+
MuO40ODTgV6f17PNZL9mvRro+MjDi69Tn9gLf93DCMNH0S7SQTc2e+gXmQfpxdqV
ExTP/cQxy+Fx4LqeSdW7zVAdl80O6viGi3CIkg5ZOoN5fV8MuTES6wmetR8xjeH+
KYfronR0ylVW1N3TQ2C9pIkL8yrkmfJIKgAUBSomM8Xu+Et0K2ti0YJp9Wh1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoztvO8hURqejVZ86WGFUCGz56F4wHwYDVR0j
BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB
QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD
MjM5Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzNzY5NGI3LTMyNTYtNDY2Ni1h
M2ZlLTZlODJlNzgzYjFlMS8wLzMxMzAzMzJlMzUzNDJlMzEzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzarMA0GCSqG
SIb3DQEBCwUAA4IBAQBi2Jz2Ud+nsjbRaqKdXra1inGRX6TFjxHRF3UHf63tRVCR
k7+/YKkImCO7EVhJ+XBzFWpUK8CZMS6F+0fE3YQWc+xLcQ9TFXhV7dAwCGjzbLzI
lU4o2OzzZglp/fwrB8zuwSKl7J8p2mxdyODFBORiiDzfedAIfUn4z4CNM9N69RlF
Moq/pX1RYCZffrTAfPBQflDK4xP0T3bdnDiGhd35RRM6q8groPWJo7R4sFdQS4co
qtUh27uMUg+auGBFZ3lfsfE/GwCYyYS+ZX4ENv6BOVTXoBHgtG2dRXe6b9xtYz+9
GFzkwbERISExRfSBCEYKhWYfZbsmhXBICN21kRtQ
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org