Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
File:                     3130332e312e35312e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          hqEXAE+cbaYD7kuJ3+E6ntoXAX3BePjIFjj6GJKDOOk=
Subject key identifier:   61:68:78:51:4A:2A:9D:66:6D:F3:EC:A4:85:41:D0:9B:9F:75:B5:00
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       7CF8ED86F462A20DACF28CCBC84FD203DE7538E7
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa
Signing time:             Tue 28 Nov 2023 09:00:01 +0000
ROA not before:           Tue 28 Nov 2023 08:55:01 +0000
ROA not after:            Tue 26 Nov 2024 09:00:01 +0000
asID:                     142352
IP address blocks:        103.1.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f8:ed:86:f4:62:a2:0d:ac:f2:8c:cb:c8:4f:d2:03:de:75:38:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Nov 28 08:55:01 2023 GMT
            Not After : Nov 26 09:00:01 2024 GMT
        Subject: CN=616878514A2A9D666DF3ECA48541D09B9F75B500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:05:65:09:79:90:6e:8f:f2:39:bd:56:32:
                    25:20:88:77:61:70:ba:c0:1c:b2:84:e7:a0:5b:96:
                    10:6a:24:de:53:d4:5d:66:4a:4c:d8:ec:44:7a:2e:
                    c0:34:b2:d9:5f:07:31:c1:38:35:75:a9:77:cd:3f:
                    aa:42:d8:be:f7:3a:43:23:fb:dc:6d:49:85:5c:48:
                    cb:45:40:ab:99:47:78:01:d5:8a:07:40:8a:42:2e:
                    e2:5f:a8:0d:2e:69:5a:34:c9:28:71:d4:39:f7:9c:
                    6d:c8:61:d5:92:0f:8b:98:6e:28:37:17:9b:d3:ca:
                    4a:2b:1a:df:ef:f5:6f:45:02:98:50:cb:0d:5f:34:
                    b9:f7:fd:fd:32:7a:e0:c5:43:a7:31:f6:c3:c3:4e:
                    d6:1b:bc:a7:68:ed:b1:b1:33:e8:da:de:31:88:35:
                    c5:ae:fe:20:88:24:63:62:a2:71:e5:a0:d7:e9:28:
                    32:52:e5:53:4a:d3:b2:3d:53:c0:a1:bc:97:52:bd:
                    58:10:2d:6d:dc:b0:2b:2e:37:ed:57:80:ac:41:a8:
                    d2:d4:6b:ac:13:e9:fe:be:c9:68:ce:42:6c:70:28:
                    9f:c3:43:c6:ec:23:e4:4b:09:bd:88:98:5e:a9:6e:
                    8d:04:ce:ea:6c:dd:76:60:ad:64:5b:d6:57:5c:6e:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:78:51:4A:2A:9D:66:6D:F3:EC:A4:85:41:D0:9B:9F:75:B5:00
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35312e302f32342d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ab:38:47:25:9c:ae:f9:2c:b7:7b:37:9b:73:ab:f2:87:7f:
         7d:5b:64:3a:89:47:90:8c:0a:3c:52:6b:8d:30:6c:fa:0e:2a:
         4e:15:6e:10:2c:8a:a8:62:a3:2f:60:6e:a3:fc:3d:2b:c6:c1:
         0e:43:22:09:69:64:4d:e6:22:8b:57:81:b7:c3:e1:0d:f6:9b:
         57:26:33:f5:d2:57:5e:de:92:2a:b7:7e:c7:b0:91:3a:d8:be:
         ca:ee:4c:ed:4e:66:25:27:91:7a:cd:8e:f2:b1:fa:64:b7:9f:
         78:32:76:82:a0:8e:39:84:2d:2f:ea:51:4e:c1:c4:ef:72:89:
         96:ae:6d:f8:8b:51:9e:c9:a5:c3:a5:f2:b7:9f:59:d2:05:94:
         c7:8b:ae:e5:9e:d5:b9:7c:a2:8d:f4:98:55:1e:10:b4:22:22:
         11:74:8e:79:ae:74:08:1e:bc:16:2d:22:87:19:b3:b2:32:e5:
         11:d2:71:05:67:84:75:4f:0d:dc:86:8a:25:e7:d8:9c:0a:12:
         eb:bb:b1:7f:08:c8:65:e7:46:75:c9:ad:56:41:7e:c2:c4:98:
         e5:8a:9e:e2:7b:75:68:8c:92:cc:cb:c5:23:86:59:bb:3e:77:
         a9:77:4b:ff:09:89:70:a2:49:e9:72:8e:09:1c:a5:61:98:98:
         34:37:ad:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:52:59 2024 by rpki-client on console-ams.rpki-client.org