Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
File:                     3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (raw, json)
Hash identifier:          SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=
Subject key identifier:   A3:F7:9A:16:28:55:5A:07:1E:55:07:80:7A:2C:A5:24:B7:99:7D:68
Certificate issuer:       /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D
Certificate serial:       7A321C69C0C20FD122FB337D009CE46E57E197B8
Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
Signing time:             Fri 26 Jul 2024 07:00:00 +0000
ROA not before:           Fri 26 Jul 2024 06:55:00 +0000
ROA not after:            Fri 25 Jul 2025 07:00:00 +0000
asID:                     136862
IP address blocks:        103.102.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl
                          rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:32:1c:69:c0:c2:0f:d1:22:fb:33:7d:00:9c:e4:6e:57:e1:97:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D
        Validity
            Not Before: Jul 26 06:55:00 2024 GMT
            Not After : Jul 25 07:00:00 2025 GMT
        Subject: CN=A3F79A1628555A071E5507807A2CA524B7997D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:47:f0:b8:09:13:73:a1:68:5e:b0:03:3f:
                    63:8b:d1:a0:a6:4e:13:f3:8e:65:04:fa:9c:de:8b:
                    50:dc:86:0a:1e:1d:f7:96:bc:45:39:aa:be:df:b4:
                    4a:21:55:eb:3a:1b:fa:63:10:5d:3f:38:67:a3:c8:
                    bc:78:20:a6:f2:f2:49:0e:7c:f2:ef:cb:03:8d:a5:
                    c5:44:16:ed:13:40:ea:39:3e:3b:d6:51:f8:3b:1c:
                    c7:9f:2b:5a:e4:91:a7:fa:5d:6b:31:e8:26:fe:ac:
                    d8:c1:0f:1b:65:ea:d4:83:60:20:9e:d3:96:ea:2f:
                    75:3c:e0:c0:6a:78:ff:26:a2:bb:90:d1:34:dd:ab:
                    1e:7c:72:2f:22:71:0a:04:54:c9:4f:05:22:cc:22:
                    e2:19:00:8d:03:86:d4:08:0d:69:e0:c8:ca:7b:8b:
                    23:e1:b6:48:aa:80:c3:f8:33:40:44:19:37:75:84:
                    25:0a:76:60:90:63:12:65:1f:bb:8b:d4:41:7c:5e:
                    57:e9:53:69:38:2e:c0:d8:1c:69:04:e0:68:20:65:
                    91:89:fb:7a:88:02:c5:3c:bd:91:3d:88:f5:79:f0:
                    00:24:cc:34:c1:18:6c:37:3b:bb:37:80:a3:68:1c:
                    14:14:24:a1:cf:62:ae:2d:d6:ab:76:16:23:62:ea:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F7:9A:16:28:55:5A:07:1E:55:07:80:7A:2C:A5:24:B7:99:7D:68
            X509v3 Authority Key Identifier:
                keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:7f:ae:03:d6:7b:15:be:b8:45:26:b1:b8:51:29:3f:9d:2e:
         57:a4:ec:37:99:c6:9f:ab:50:e5:7e:c0:ff:ff:39:53:31:3c:
         68:d5:c9:1a:06:58:b7:b9:91:a1:4f:ce:96:af:06:36:92:07:
         3d:48:9a:08:71:b0:89:52:70:74:62:25:ec:b8:a6:80:10:2b:
         67:cd:4d:b3:1f:2c:7a:e1:45:c1:8b:8d:d0:5a:9d:de:d4:a6:
         72:9c:e5:50:6c:67:78:1c:67:37:a6:6d:58:9c:83:3d:54:55:
         6a:31:81:27:d0:be:17:5a:11:bc:8f:69:fa:df:43:43:91:57:
         96:92:c4:ba:52:93:c9:89:b5:5f:df:b2:bb:96:97:46:23:a4:
         f7:47:24:24:ef:59:60:21:f8:90:a7:58:da:61:3b:3c:6f:39:
         6a:74:71:18:65:cf:9b:25:8d:c3:9e:d9:5b:ed:53:70:4d:58:
         c4:07:fb:e0:f5:db:1d:45:88:2d:bb:60:64:13:82:e8:68:eb:
         1a:10:9d:a3:66:31:4b:d1:e8:7f:fa:bd:84:08:5c:f7:38:76:
         be:9b:8c:b0:ef:83:e2:b6:6a:9f:ed:f6:ae:05:72:fc:10:cf:
         97:4a:56:a5:f0:a0:ba:ea:55:0a:b2:f5:09:22:1a:94:5f:74:
         b8:b0:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org