Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
File:                     3130332e342e38312e302f32342d3234203d3e20313530323034.roa (raw, json)
Hash identifier:          hENxCBn3b5Sa1xU//NYHqKbmQbm0+5hAnLw3eC3Hwr4=
Subject key identifier:   12:16:7A:87:8E:CB:06:86:BC:CE:AB:AC:36:9D:C1:59:C3:61:D1:D0
Certificate issuer:       /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
Certificate serial:       2E9BD71264C92AF6A78C3FD6DBD89A113C4ADE7C
Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa
Signing time:             Wed 21 Feb 2024 12:00:00 +0000
ROA not before:           Wed 21 Feb 2024 11:55:00 +0000
ROA not after:            Wed 19 Feb 2025 12:00:00 +0000
asID:                     150204
IP address blocks:        103.4.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl
                          rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9b:d7:12:64:c9:2a:f6:a7:8c:3f:d6:db:d8:9a:11:3c:4a:de:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
        Validity
            Not Before: Feb 21 11:55:00 2024 GMT
            Not After : Feb 19 12:00:00 2025 GMT
        Subject: CN=12167A878ECB0686BCCEABAC369DC159C361D1D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:7d:0e:30:b9:b7:f6:dc:a5:6a:d7:f3:c0:
                    19:6b:ac:29:9d:ea:e1:06:68:e6:2c:6d:a6:e5:a9:
                    8f:b1:42:ab:23:2d:be:d6:cf:d2:d6:19:ae:d1:17:
                    c1:d4:9b:d3:48:68:58:81:b8:0f:1f:2e:b5:7d:1b:
                    2f:c1:a6:f6:c4:26:15:9e:b4:18:1c:aa:2c:1c:2b:
                    47:1f:62:59:85:02:07:9b:a9:0c:e6:be:8e:09:6a:
                    ab:f2:65:bb:4d:0f:69:44:e3:b1:c5:dc:d7:7e:8e:
                    d2:0f:0e:b9:e9:e1:0f:d4:c9:82:62:0c:0d:5f:1a:
                    1b:7d:84:97:d8:f8:e1:aa:94:c9:df:86:16:4f:a7:
                    fe:90:cf:91:5d:a5:0d:15:03:6d:96:47:a1:09:f2:
                    41:d7:aa:e2:b7:52:7b:d5:2c:1f:b3:df:f6:0b:ea:
                    59:33:4f:37:ef:11:27:32:01:73:62:8f:f9:12:78:
                    f0:3d:b2:a3:64:27:31:68:4d:17:e9:f2:0e:5e:0c:
                    4b:6a:ed:16:d1:7a:ef:56:fa:ec:a6:a6:7c:85:7d:
                    db:02:e1:14:69:b5:99:27:fe:0a:73:4b:d6:bd:31:
                    8b:5b:a7:f1:9c:43:29:cd:d0:70:d3:e8:50:a8:04:
                    bb:d9:14:36:bf:1b:d6:db:74:20:57:45:58:3a:62:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:7A:87:8E:CB:06:86:BC:CE:AB:AC:36:9D:C1:59:C3:61:D1:D0
            X509v3 Authority Key Identifier:
                keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38312e302f32342d3234203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:3c:7c:ec:02:c7:19:e7:8c:3b:1d:4e:85:ed:1f:5f:b1:
         05:60:5a:29:e3:9f:ef:1a:50:ec:2c:f3:8a:ec:c2:91:83:7a:
         f8:67:4f:85:74:76:7d:bd:38:f4:6d:7b:7a:16:07:a6:97:69:
         fc:a4:20:8d:24:ea:43:9a:fa:fc:a1:f1:80:47:85:a1:64:79:
         7a:f0:7f:40:75:55:9f:0d:39:56:3f:87:ce:98:4b:44:90:0e:
         de:d3:d4:7d:35:7e:c3:7e:17:9c:44:ab:fe:b4:e1:01:b5:cc:
         7f:3c:44:d3:c6:dd:dc:dc:b9:11:50:0b:aa:dc:ae:a9:40:56:
         06:34:b6:e5:d1:42:84:cc:31:e1:98:bc:30:70:83:41:07:ba:
         e4:80:c2:80:65:c3:63:ca:67:02:b5:0d:47:6e:72:f8:7b:0a:
         c4:14:69:6a:e4:cc:74:55:28:d8:55:d3:e3:f1:3a:b2:0b:80:
         f0:5a:da:53:d6:47:30:40:5e:dd:6b:ff:ee:9f:56:2e:5e:e3:
         46:78:e0:fc:fe:24:d1:be:59:ef:bd:b9:f1:15:53:71:e9:32:
         97:4d:6b:24:9f:b6:90:0c:0f:ab:3c:91:ba:5e:29:d5:19:95:
         bd:5e:ef:79:67:ff:6e:8c:63:54:24:11:e6:b3:51:8a:b5:75:
         7f:43:19:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org