Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e34382e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          24KwUjur3eaTdZ1F+9Eh0rruH/CABrpO4rp4v7oF/fI=
Subject key identifier:   55:B6:3F:2D:16:20:4F:1A:E4:54:CA:47:08:6A:CD:43:36:38:F0:5F
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       328C04CA062CF53E388B63DF706F40742DD9800B
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 23 Jun 2024 17:00:02 +0000
ROA not before:           Sun 23 Jun 2024 16:55:02 +0000
ROA not after:            Sun 22 Jun 2025 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:04:ca:06:2c:f5:3e:38:8b:63:df:70:6f:40:74:2d:d9:80:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun 23 16:55:02 2024 GMT
            Not After : Jun 22 17:00:02 2025 GMT
        Subject: CN=55B63F2D16204F1AE454CA47086ACD433638F05F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:ef:5d:8e:ad:9d:84:dd:ca:23:ab:06:92:
                    08:e7:33:be:c3:70:6f:06:4e:0a:fe:29:64:6d:95:
                    fe:5d:24:2e:57:0d:9d:b7:7d:98:0b:ca:fc:ed:6b:
                    bd:2c:91:e5:f1:e8:af:95:4f:39:f1:10:e6:9f:9b:
                    bf:d7:f3:6e:68:10:56:1a:c1:cf:46:2e:02:76:82:
                    6e:9e:17:a9:b7:ed:b4:82:d1:15:56:43:de:25:ed:
                    87:c2:0c:84:bd:cf:c1:fe:76:33:e8:9b:82:be:da:
                    0b:e5:1a:6b:8a:ee:65:57:7d:b8:b5:7d:e7:62:ac:
                    53:c2:a1:01:6d:c9:32:fe:84:31:6f:45:f3:5c:ee:
                    81:f1:c9:c8:6e:92:15:23:9f:fe:f6:ed:34:f0:78:
                    a9:72:b4:ab:bf:59:a5:c0:c4:60:43:54:07:5f:98:
                    2d:cd:fb:14:5c:c2:f6:6a:24:f3:c5:c7:0e:39:b9:
                    17:9f:02:d5:6a:f0:6d:da:63:bb:ed:0f:8d:8a:ec:
                    d7:61:30:57:df:cc:e9:7e:e9:6a:87:68:0f:2c:ae:
                    33:82:2a:fa:93:c3:3c:36:04:51:e8:f1:5c:28:17:
                    74:90:95:81:5f:f3:fe:7f:8d:9a:b2:8e:35:c6:b4:
                    f4:a0:a1:8f:7e:d4:43:47:dc:a3:c9:e6:e3:6f:71:
                    44:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B6:3F:2D:16:20:4F:1A:E4:54:CA:47:08:6A:CD:43:36:38:F0:5F
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:37:97:c0:f5:ff:e6:44:f1:3c:19:eb:74:4e:c2:98:64:
         90:53:39:95:51:71:5c:66:80:aa:3f:8d:64:5b:14:9c:61:7a:
         df:41:42:d8:b8:08:69:bd:8d:45:aa:e4:54:59:40:8f:03:14:
         51:ee:dd:a7:14:8c:b6:57:52:ae:3e:01:0f:e7:5d:1a:66:a5:
         62:42:47:97:44:f3:ba:e6:2e:44:5d:34:2a:f6:5a:32:31:0d:
         92:26:91:7a:bd:73:12:66:49:00:ae:76:83:65:d4:44:75:1b:
         0b:17:89:3c:55:e7:52:17:15:8f:37:a8:78:ae:c5:2d:9d:70:
         83:6d:fc:4d:29:18:45:36:e4:a3:f4:d9:31:0c:aa:27:90:1b:
         43:a7:f1:74:07:de:20:2f:23:91:76:6a:e3:c7:3b:49:3c:dc:
         08:38:1e:19:5a:25:69:9f:10:d4:5d:73:c1:aa:78:62:22:a2:
         c3:dd:52:26:f1:c7:49:cf:29:66:d9:d9:27:16:2b:2e:93:3d:
         54:43:c6:73:44:c6:7d:a3:a8:26:e3:49:47:34:87:3e:b8:00:
         e7:42:84:6e:3e:b1:de:7f:9c:01:6a:84:e7:04:5e:e9:ec:34:
         d9:9a:31:fd:86:8b:e0:a4:5e:72:0d:55:bd:cc:8c:e1:48:26:
         3a:9d:6e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org