Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa
File:                     3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (raw, json)
Hash identifier:          UcVriHXLq51fdaANA3PdMhx9PaPhtGFXAVilM8tjzJU=
Subject key identifier:   48:FB:00:BE:61:73:66:74:02:4B:29:F1:74:52:B3:B9:AF:EA:58:1E
Certificate issuer:       /CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
Certificate serial:       471DC9A4BFFCE8983EBDD6818F272F0E31E2777C
Authority key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa
Signing time:             Fri 15 Nov 2024 07:00:01 +0000
ROA not before:           Fri 15 Nov 2024 06:55:01 +0000
ROA not after:            Fri 14 Nov 2025 07:00:01 +0000
asID:                     150481
IP address blocks:        103.115.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl
                          rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:c9:a4:bf:fc:e8:98:3e:bd:d6:81:8f:27:2f:0e:31:e2:77:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537
        Validity
            Not Before: Nov 15 06:55:01 2024 GMT
            Not After : Nov 14 07:00:01 2025 GMT
        Subject: CN=48FB00BE61736674024B29F17452B3B9AFEA581E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:38:39:08:5e:cd:58:32:71:b7:48:fb:ca:
                    7e:2a:a9:38:22:54:e5:b2:73:8c:d5:03:ad:a5:44:
                    44:9b:67:74:1d:91:7d:a4:31:78:27:f8:94:28:9d:
                    4b:13:08:82:04:f7:d2:ad:3c:01:66:98:eb:4b:3e:
                    a2:04:1d:b8:a1:ea:29:12:f4:eb:ad:09:11:05:0e:
                    32:af:8f:69:ed:f1:ad:d8:c3:74:bf:0e:3b:fb:14:
                    80:a5:e0:33:fa:f0:df:90:f2:88:6b:25:a3:08:d9:
                    f6:39:1b:e0:fa:08:c5:b9:75:13:8e:4f:1d:d1:d3:
                    37:36:39:6a:bd:97:a1:88:ef:51:5a:77:dc:e0:64:
                    98:44:37:26:77:7f:7a:f1:38:02:95:a9:bb:3c:99:
                    ac:55:91:35:f1:5c:90:d7:95:43:52:dd:c8:8b:be:
                    0a:fe:45:d8:8c:2d:e4:b0:fe:3d:3a:ef:e5:16:ee:
                    03:4f:61:18:71:5e:58:fb:aa:e4:f6:d4:72:cf:95:
                    2e:a2:2c:85:7c:00:d3:b5:19:92:6a:b1:16:c5:0c:
                    0c:f9:78:e4:3a:4f:10:e5:95:64:01:ed:f4:2d:5c:
                    34:da:0f:07:49:29:87:8f:9f:7c:8e:10:d3:24:8f:
                    51:e5:64:5d:4f:31:52:0f:52:f2:6d:68:75:17:54:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:00:BE:61:73:66:74:02:4B:29:F1:74:52:B3:B9:AF:EA:58:1E
            X509v3 Authority Key Identifier:
                keyid:7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a9:d8:e0:eb:07:39:d3:50:56:ea:e8:6a:ea:95:ba:8d:11:
         bd:b6:9b:5b:1f:58:7e:d1:95:84:2f:a8:25:5f:c2:5b:13:21:
         45:86:3d:51:ea:bd:8d:dd:b7:2e:ea:88:5e:27:5b:67:a1:6f:
         8f:d7:03:9a:7c:48:44:b2:ba:ca:7e:e4:e7:32:7e:43:ea:47:
         5e:fd:70:73:dd:20:f4:b5:6d:5c:22:96:fc:e8:d1:86:5e:46:
         08:2f:f3:df:12:03:55:7a:a5:11:09:93:80:49:81:d9:33:49:
         a3:17:7f:87:62:a6:eb:eb:f8:4f:59:c4:50:99:71:66:46:df:
         82:4d:04:6b:f9:93:af:0b:50:83:19:13:fc:aa:cc:47:8c:64:
         69:e6:b4:7b:6a:f0:20:c5:a6:5a:35:80:c3:ce:6d:d5:3c:a8:
         ca:2e:21:c1:6e:9b:f1:af:2c:79:39:96:64:08:c4:03:03:f9:
         f6:4c:45:25:92:b8:a1:a4:54:bd:d8:3a:88:33:0f:42:c0:c5:
         79:8c:8c:a3:d7:2a:14:87:25:46:63:55:93:6e:28:76:d4:83:
         7d:43:cb:37:e5:3c:44:b3:b7:df:fa:11:be:47:83:00:54:28:
         61:5a:85:eb:a3:aa:38:f1:6a:7f:66:a6:08:14:6b:1c:da:22:
         e0:e5:e9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org