Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa
File:                     3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa (raw, json)
Hash identifier:          yyTWD3Hw0myJUHrqNZjjiJe9loGxE1U7dY1DuOfMkZ0=
Subject key identifier:   51:CF:59:45:76:CC:F7:ED:CC:2A:7B:B9:56:A0:AE:7F:8D:34:2C:01
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       441AFC8BF06264B12426C79A2E4D066A3F53424D
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa
Signing time:             Wed 02 Oct 2024 22:22:48 +0000
ROA not before:           Wed 02 Oct 2024 22:17:48 +0000
ROA not after:            Wed 01 Oct 2025 22:22:48 +0000
asID:                     133339
IP address blocks:        103.225.172.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:43:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:fc:8b:f0:62:64:b1:24:26:c7:9a:2e:4d:06:6a:3f:53:42:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Oct  2 22:17:48 2024 GMT
            Not After : Oct  1 22:22:48 2025 GMT
        Subject: CN=51CF594576CCF7EDCC2A7BB956A0AE7F8D342C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:6c:a2:9f:1a:87:e9:d6:1e:e7:74:a5:ed:
                    a9:d7:4f:92:97:d8:c3:b3:ce:1a:8e:3f:d1:60:46:
                    f2:73:9e:e1:a3:dd:c3:c6:0a:bb:f0:2c:24:94:9a:
                    2c:38:12:1d:96:b2:98:d8:7f:e9:30:10:03:7b:1d:
                    b9:44:f6:fa:5e:94:f0:0a:73:01:c9:6b:73:bb:5f:
                    eb:b7:85:d9:c0:3c:fe:38:ae:82:3f:b9:9a:c2:12:
                    16:72:55:84:d4:48:18:9d:96:d1:5e:bd:12:da:e4:
                    b7:61:3c:bb:4b:c2:d9:8b:93:ff:fe:49:42:37:7c:
                    c8:99:60:07:6f:52:c2:79:a1:d0:3e:14:6d:5c:27:
                    fe:d8:fc:f2:19:0f:c0:be:bb:fb:f6:83:92:3d:dd:
                    ed:e6:49:5e:6b:99:7c:84:65:b9:00:9a:a4:7b:fd:
                    b6:48:92:39:89:a1:c3:d0:99:a0:ae:68:3c:f6:3f:
                    10:8e:62:d6:13:0e:aa:a0:db:55:36:f1:76:b9:ca:
                    be:fb:ac:6f:0d:ea:3b:10:94:88:55:ad:f9:6e:94:
                    f8:7b:60:67:c8:41:25:52:74:d5:e2:07:8c:a2:26:
                    36:dc:60:b5:89:6c:a0:51:eb:b5:8c:78:7c:c0:17:
                    15:62:b1:0b:ba:ae:be:f8:10:82:1c:e2:37:ce:d9:
                    04:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CF:59:45:76:CC:F7:ED:CC:2A:7B:B9:56:A0:AE:7F:8D:34:2C:01
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e3232352e3137322e302f32332d3233203d3e20313333333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:e9:c7:86:57:69:a6:55:c5:cd:a3:2c:bd:bc:22:20:f3:
         34:88:e4:6a:b9:98:8f:44:6b:14:14:89:ef:01:6b:9c:f4:c0:
         3e:86:63:4b:72:30:09:08:a9:cd:88:4f:63:81:8e:f2:6c:56:
         d7:d6:d9:7a:ca:7e:cd:44:94:bb:26:71:05:c2:8e:19:c2:8b:
         79:55:60:12:81:44:c9:30:90:2a:70:c4:f5:42:3f:96:b3:d5:
         78:cb:0a:e1:ec:56:6f:70:c6:7e:df:23:d7:cd:8e:5e:15:29:
         d0:4d:86:2a:fb:3a:10:81:4e:f9:77:79:79:0d:f1:38:26:d7:
         31:33:42:24:de:77:ed:a9:79:93:50:27:7f:b7:92:29:91:5d:
         72:cf:a3:8c:be:a1:51:93:17:22:15:41:29:e5:ed:d8:80:5e:
         d0:2c:bf:eb:9b:85:cc:36:a6:b3:e8:f4:36:a5:03:e3:20:8e:
         cb:21:e7:d6:ae:48:e0:d6:e4:e6:f3:4c:fe:6b:5f:92:c0:66:
         37:f3:eb:d3:27:ab:66:33:7f:a7:ab:65:a7:03:b4:38:6a:1d:
         aa:ef:43:1d:7a:84:79:f7:61:6c:3b:04:6e:45:1a:92:28:a7:
         4e:7b:1b:5e:af:59:8e:c5:9d:7f:62:24:ae:21:85:18:26:a2:
         b9:3c:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org