Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
File:                     3130332e312e35312e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          Lx6mbXqTbsqqqJEaZ6Ptl1cSIXULA4hNI34A7lM8ago=
Subject key identifier:   3B:79:B0:C5:BA:E3:AE:61:98:95:C1:95:52:5B:D0:D4:76:ED:9C:AE
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       631B027C5C2340DB7D98B26F0DD326E1DBE84175
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
Signing time:             Tue 29 Oct 2024 09:00:02 +0000
ROA not before:           Tue 29 Oct 2024 08:55:02 +0000
ROA not after:            Tue 28 Oct 2025 09:00:02 +0000
asID:                     142352
IP address blocks:        103.1.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1b:02:7c:5c:23:40:db:7d:98:b2:6f:0d:d3:26:e1:db:e8:41:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Oct 29 08:55:02 2024 GMT
            Not After : Oct 28 09:00:02 2025 GMT
        Subject: CN=3B79B0C5BAE3AE619895C195525BD0D476ED9CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:76:93:ac:51:06:e3:30:4f:01:32:97:d3:
                    ce:2f:a9:5f:91:06:21:ba:86:70:4d:6c:84:5a:0d:
                    63:d9:93:7f:a9:e2:c7:01:4c:a0:68:b3:cd:49:ee:
                    97:20:bd:87:fa:a0:6f:b8:f4:92:c3:14:76:8e:1c:
                    44:88:88:85:60:7e:2b:3e:43:db:b1:89:54:72:96:
                    e9:ba:db:33:c5:8b:13:2b:2b:0a:35:4d:7f:dd:0e:
                    89:39:34:cc:b1:08:42:de:d5:92:ea:55:71:52:fe:
                    97:90:de:0c:f5:75:4a:0c:7b:1c:16:f6:16:1e:83:
                    d8:16:ca:dc:cf:be:eb:8b:c5:a3:c8:af:f3:cc:6f:
                    75:92:f4:91:69:09:89:b7:39:a5:2a:7a:09:3b:63:
                    f6:bc:68:6a:88:6d:d6:7e:9a:d8:09:38:c7:f6:38:
                    2b:f1:6e:95:67:0f:1f:62:56:1d:c0:53:fc:9a:97:
                    df:58:9b:6e:de:64:d3:6d:6d:97:a6:0d:62:bc:1e:
                    a1:79:7e:aa:9b:7e:80:62:7c:13:e9:40:ac:c7:8b:
                    dc:b7:6e:bb:7b:d5:ce:6e:25:c8:0b:b3:36:ba:f4:
                    c0:6f:b6:4e:aa:f4:cf:68:49:63:57:1f:a3:39:a8:
                    c6:7c:25:8d:f7:d3:ef:36:16:eb:42:1e:13:5d:02:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:79:B0:C5:BA:E3:AE:61:98:95:C1:95:52:5B:D0:D4:76:ED:9C:AE
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:06:62:4a:2d:41:0d:55:33:b5:db:fd:7d:96:48:34:71:
         c5:42:a2:1c:74:e1:3f:64:17:ab:ae:ab:3c:e0:4c:54:ec:c9:
         b8:36:92:e6:34:19:cd:45:95:78:0c:a6:d8:86:3e:18:b6:de:
         5c:c0:b9:09:26:d2:28:90:83:7b:18:aa:4f:2f:cc:ef:1c:20:
         06:a2:f1:f3:17:69:26:9c:39:35:c6:e0:65:07:7b:12:0b:73:
         41:30:ba:4d:25:78:53:1c:66:25:da:f1:17:c7:e3:62:e8:9e:
         c9:89:50:48:30:8b:ee:cc:e0:67:72:6c:96:37:74:7f:f5:d6:
         00:74:98:79:d8:d2:5d:fb:a2:90:59:78:b4:0a:93:cf:3a:fb:
         e5:54:f7:80:35:82:2f:76:ec:fe:d7:05:a1:2f:1e:09:57:c0:
         41:06:0c:e8:67:cf:d6:83:78:cc:85:e0:b2:e8:66:e5:f9:3d:
         6a:de:07:36:94:5f:92:34:12:fd:81:70:c5:c4:ba:b4:8a:c7:
         10:ef:86:d6:e5:5c:40:41:4d:f9:fa:f4:a7:27:25:00:f8:95:
         57:39:1a:40:f7:9d:2a:66:5a:49:4d:c2:18:43:a8:fe:b1:77:
         03:47:e2:14:2c:b1:d8:63:a5:83:92:0f:4e:6f:54:0d:80:de:
         5e:3c:b1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:03 2024 by rpki-client on console-fra.rpki-client.org