Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31362e302f32342d3234203d3e20313336303835.roa
File:                     3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (raw, json)
Hash identifier:          owuKJ6CVlpumrmiYvGv6LFymhh0iftK2bFRLbak/Vtw=
Subject key identifier:   15:50:65:0A:0C:D6:A9:31:0D:85:DD:F0:D5:F6:A0:0D:8F:8E:97:C8
Certificate issuer:       /CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
Certificate serial:       7051939838C5780FF393F63891DBDDC96A431D86
Authority key identifier: 48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31362e302f32342d3234203d3e20313336303835.roa
Signing time:             Thu 31 Oct 2024 04:20:18 +0000
ROA not before:           Thu 31 Oct 2024 04:15:18 +0000
ROA not after:            Thu 30 Oct 2025 04:20:18 +0000
asID:                     136085
IP address blocks:        103.87.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl
                          rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:51:93:98:38:c5:78:0f:f3:93:f6:38:91:db:dd:c9:6a:43:1d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A
        Validity
            Not Before: Oct 31 04:15:18 2024 GMT
            Not After : Oct 30 04:20:18 2025 GMT
        Subject: CN=1550650A0CD6A9310D85DDF0D5F6A00D8F8E97C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:72:74:56:4e:ea:c8:a3:95:bf:ed:92:f1:
                    a6:73:ac:34:0f:3e:d9:6a:1f:5f:e2:45:ea:10:d5:
                    0e:38:cb:88:4a:af:8f:6e:98:b0:d5:5a:ec:28:c4:
                    5a:23:c1:72:97:ae:6b:2a:31:1f:a2:d8:32:6e:a5:
                    f8:48:8a:04:f9:c3:14:4e:2b:df:61:b1:4c:d6:f1:
                    97:9e:08:ff:d1:00:78:6b:09:82:82:83:80:0c:8f:
                    19:9d:33:49:d4:e1:05:32:bf:94:1f:54:82:90:b4:
                    c9:76:28:35:c9:22:49:37:e1:fc:a8:65:92:84:07:
                    8f:a0:af:79:69:8d:53:5e:42:ff:95:ba:0f:a3:2b:
                    8b:ea:33:e0:5a:49:09:51:77:8f:d0:bf:9a:38:6d:
                    e8:b1:12:c2:d6:d3:fc:f9:9d:c2:4d:e1:de:1f:05:
                    2c:59:8e:7e:74:3d:de:ea:94:90:60:d5:e8:b5:90:
                    17:90:4d:7d:ea:83:cd:9f:07:13:36:0b:b6:f8:f7:
                    19:2a:cf:a2:4b:86:96:bd:c8:b8:7a:4b:a1:43:08:
                    6d:8f:e8:23:d6:04:02:7a:03:4a:24:d7:20:db:17:
                    7b:e8:aa:98:a0:4a:ef:23:34:21:fc:36:6c:0d:b8:
                    b3:f5:b1:45:06:1e:4b:a4:36:e4:b4:0f:8c:ad:33:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:65:0A:0C:D6:A9:31:0D:85:DD:F0:D5:F6:A0:0D:8F:8E:97:C8
            X509v3 Authority Key Identifier:
                keyid:48:50:0B:00:C6:1D:A1:B0:EC:44:84:E0:79:1D:BB:CD:DC:34:EA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48500B00C61DA1B0EC4484E0791DBBCDDC34EA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/3130332e38372e31362e302f32342d3234203d3e20313336303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:33:86:b8:27:2c:b3:7b:3e:48:a2:f0:a2:9c:6e:60:04:28:
         44:dc:10:89:c6:ed:68:d4:2f:75:e1:4b:a3:95:93:0c:15:85:
         4d:89:e8:66:2e:bb:28:02:8e:98:d1:78:fb:44:09:16:e9:27:
         70:1a:7b:9a:34:3f:f2:cd:35:95:47:e5:67:06:4b:8c:59:86:
         57:95:70:34:56:a4:6c:8f:05:0a:68:79:e0:e5:6d:8d:e5:33:
         c7:d9:bf:1b:4a:83:c5:ea:77:02:ac:69:f7:45:31:c6:3d:cb:
         de:0b:b1:9d:eb:8b:a4:ec:1b:5a:2b:e0:68:de:f8:bb:3f:18:
         b6:80:65:50:3a:e3:8a:b8:0b:e9:b8:10:f9:08:4e:e8:d6:00:
         51:dd:c5:3a:53:84:bc:71:b2:e2:8f:5e:b7:c0:15:0f:63:ab:
         28:fa:1e:73:dd:f7:76:be:71:82:36:10:34:44:93:2b:9c:15:
         d7:bb:cb:56:32:50:09:f4:a8:22:97:17:87:a7:d5:ff:d2:0b:
         93:83:0b:83:bf:da:6a:96:48:bd:33:15:b5:45:b5:07:2e:67:
         d7:46:30:04:59:af:f9:ae:95:c9:7d:2c:fe:1b:45:a2:8e:90:
         8d:5c:84:1f:fa:d2:d3:5c:d2:ae:fc:30:32:c0:15:07:79:81:
         79:65:eb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org