Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa
File:                     3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa (raw, json)
Hash identifier:          Np/t8IuGG6aQddkGmruvdeMxBiMsTkW8puQwaVRjg24=
Subject key identifier:   53:98:7A:0D:26:6F:8B:19:7F:4D:09:21:C6:EB:5D:84:74:04:A4:56
Certificate issuer:       /CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
Certificate serial:       36016B17A3142A590A0184B5512EE85546A8A201
Authority key identifier: E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa
Signing time:             Thu 22 Feb 2024 02:51:06 +0000
ROA not before:           Thu 22 Feb 2024 02:46:06 +0000
ROA not after:            Thu 20 Feb 2025 02:51:06 +0000
asID:                     150942
IP address blocks:        103.105.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl
                          rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:01:6b:17:a3:14:2a:59:0a:01:84:b5:51:2e:e8:55:46:a8:a2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943
        Validity
            Not Before: Feb 22 02:46:06 2024 GMT
            Not After : Feb 20 02:51:06 2025 GMT
        Subject: CN=53987A0D266F8B197F4D0921C6EB5D847404A456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:e3:2b:06:b4:23:4a:03:a5:35:04:b4:39:
                    59:5d:f3:1a:fa:32:e9:2f:2e:bb:cc:86:d9:ee:60:
                    20:71:7c:7a:36:35:9a:c6:b1:8a:61:20:55:a1:98:
                    12:33:d0:54:0e:96:60:43:5e:a3:7a:dc:37:e6:21:
                    6c:5c:c6:71:88:fe:a7:83:40:75:d6:dd:ed:f4:5a:
                    d6:7d:ac:fe:7b:3c:06:bd:90:c2:2e:06:43:26:b7:
                    b7:39:34:b2:8a:8f:6b:68:ee:6a:ad:18:4d:42:b3:
                    77:64:9d:4a:a8:a6:a5:03:ff:3b:37:5f:1e:c1:16:
                    08:08:3d:0b:48:76:5b:75:db:42:8d:6b:85:82:66:
                    75:c8:64:8e:f1:ac:57:de:a1:8b:df:a6:bc:8d:a0:
                    36:51:67:7c:f5:c1:52:25:7e:ae:60:9a:83:27:82:
                    38:8a:7e:80:3d:39:7d:ed:7c:6b:23:2f:f6:21:34:
                    5a:b0:22:a6:68:79:95:54:31:42:e1:af:9f:1a:e8:
                    90:91:9f:6c:d4:9e:a5:09:01:ec:f7:00:ff:96:96:
                    49:65:67:0a:41:91:5e:8f:14:bd:1a:de:bd:b9:f2:
                    89:04:99:96:b7:ee:8a:d9:1b:67:58:f3:03:d0:6d:
                    30:ce:7e:e9:17:9c:3d:78:4f:49:e2:11:b5:de:25:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:7A:0D:26:6F:8B:19:7F:4D:09:21:C6:EB:5D:84:74:04:A4:56
            X509v3 Authority Key Identifier:
                keyid:E2:9E:83:C2:C5:89:7F:A4:F6:CE:FE:3C:37:EE:1A:65:32:B8:E9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E29E83C2C5897FA4F6CEFE3C37EE1A6532B8E943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b97cf9a0-e927-4814-8447-8b3a002760a8/0/3130332e3130352e35372e302f32342d3234203d3e20313530393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:d9:b4:2b:2a:96:0d:90:44:6c:a9:bc:76:21:c9:0e:4c:e5:
         71:eb:e4:76:48:2a:51:1f:9e:3e:3b:81:56:72:37:1b:64:4a:
         0e:3c:e8:29:a9:76:2d:c5:44:fa:8f:24:7d:dc:02:40:65:db:
         d1:72:54:1f:16:f9:2e:70:7a:9f:1c:8f:2f:e7:30:0f:e5:de:
         ec:b9:8c:f4:f7:ce:15:63:85:fb:77:ec:d1:f4:4c:bf:a4:45:
         99:97:e0:0f:25:82:6a:1b:91:42:d9:62:a9:77:57:a4:71:d8:
         96:25:d0:27:d4:ac:64:76:48:ff:37:58:d7:90:a3:d3:73:e0:
         d1:cf:9a:a7:41:1a:b4:90:fc:de:df:d7:47:4b:f4:33:4f:df:
         86:71:aa:3b:0f:15:bb:b3:9c:87:1c:60:e5:f9:00:69:b1:80:
         6e:c8:03:f5:d8:87:62:14:68:7b:08:7a:93:7a:6a:47:c4:d6:
         a8:de:26:7e:73:00:e3:41:a6:ff:b0:3b:52:6c:74:5f:1a:1c:
         d1:2d:79:32:e7:80:c3:2c:f4:f4:db:25:75:c0:52:81:a4:b7:
         d8:e4:2f:af:3e:7a:96:b8:91:a4:63:b8:8e:70:74:59:86:04:
         ed:0a:dd:b4:2d:9f:52:d1:79:45:44:62:58:5d:70:9b:c7:d3:
         e2:ea:6c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org