Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa
File:                     3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier:          +nVjF5rDMGN6GQO5kbnVGx8HKrpIshvz0VxBevj3Unw=
Subject key identifier:   4F:4E:E7:E0:41:44:AA:9D:20:67:CD:ED:1C:4F:97:24:25:16:42:B0
Certificate issuer:       /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
Certificate serial:       15BE5CE7579E4FE17F19697A77CB67A16D2B52C7
Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa
Signing time:             Thu 22 Feb 2024 02:50:37 +0000
ROA not before:           Thu 22 Feb 2024 02:45:37 +0000
ROA not after:            Thu 20 Feb 2025 02:50:37 +0000
asID:                     150942
IP address blocks:        103.105.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl
                          rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:be:5c:e7:57:9e:4f:e1:7f:19:69:7a:77:cb:67:a1:6d:2b:52:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
        Validity
            Not Before: Feb 22 02:45:37 2024 GMT
            Not After : Feb 20 02:50:37 2025 GMT
        Subject: CN=4F4EE7E04144AA9D2067CDED1C4F9724251642B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:2d:46:17:b7:45:17:34:e3:b2:69:35:bc:
                    9c:43:1b:ae:25:4e:c6:68:13:02:8f:47:eb:aa:9b:
                    7a:18:58:1d:cc:21:e3:aa:66:84:dd:1d:73:2c:03:
                    80:e8:06:9f:ad:0b:07:7f:f4:82:01:d9:c5:ca:51:
                    a3:e3:8d:f2:f5:91:18:17:83:90:79:05:b3:3b:bc:
                    17:63:c0:23:b4:46:82:0c:d1:01:80:dd:3e:86:bc:
                    7b:6f:f5:66:8c:57:44:21:ca:e4:6a:84:aa:c7:8d:
                    fb:ed:db:ac:b6:f7:5d:2e:84:94:c9:01:eb:f5:0e:
                    a9:88:04:c8:2b:e8:49:2c:14:20:3f:07:1f:9c:5b:
                    75:e4:db:d9:19:3f:61:a3:8d:37:8d:e3:89:5a:d1:
                    49:fd:8b:b3:20:fa:5f:e7:db:33:b2:8b:5e:f1:89:
                    4d:c7:3a:2b:27:8f:30:4a:03:c5:99:c9:e3:07:01:
                    be:24:c0:f8:a6:d2:5a:e7:24:ca:19:92:32:71:fe:
                    07:23:f5:0f:9a:34:1d:04:b3:4d:58:86:a3:0c:87:
                    a1:f1:b9:e6:8c:2d:b6:ad:f3:ff:62:ad:ed:d4:06:
                    ff:50:07:bb:30:20:dd:8e:ac:c2:13:72:a5:8a:ee:
                    1a:cf:32:79:60:31:35:3d:29:b6:7b:1f:47:f0:33:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:E7:E0:41:44:AA:9D:20:67:CD:ED:1C:4F:97:24:25:16:42:B0
            X509v3 Authority Key Identifier:
                keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35362e302f32342d3234203d3e20313530393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c0:b9:fb:f1:38:37:cb:65:a0:5c:ff:85:84:e3:c7:bf:54:
         8b:41:38:ea:03:af:c4:6f:50:ad:12:22:de:71:0d:4d:15:be:
         bc:3f:d7:b2:57:0c:8f:70:d9:b9:f7:d7:22:01:b4:fa:d3:91:
         16:ca:f5:5e:a1:87:9b:2e:7b:33:a9:97:fc:b6:bb:8c:95:00:
         94:63:cc:e5:e3:11:0a:77:0c:e1:30:88:ab:54:0d:2d:97:6a:
         62:eb:95:c9:7b:24:31:cc:1d:69:ad:95:a5:e9:f5:0d:6e:09:
         ea:a1:fc:4c:b3:79:16:b8:26:b1:90:29:9c:a6:5b:7d:c0:57:
         bb:6a:09:ac:01:57:89:c8:5f:cb:80:24:fb:55:3f:46:ac:b2:
         74:69:94:d8:65:37:61:ce:70:e6:2e:32:00:c1:1c:22:0e:86:
         5d:71:91:39:b2:92:c9:fe:1e:06:61:60:f0:b3:0c:e3:e0:00:
         f7:8a:4d:85:78:f8:7f:7c:b9:ef:ad:96:0d:48:dd:62:7d:69:
         c7:8e:77:65:c8:dc:fa:17:ff:14:7d:bf:8b:b0:f4:52:e1:6b:
         be:cc:a5:dc:cf:46:64:2e:84:ef:66:0f:4c:c7:d7:d3:15:94:
         07:03:91:8b:c8:11:b7:21:45:b6:8b:4c:de:6f:c8:f1:f2:c8:
         5f:65:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org