Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa
File:                     3130332e31342e34342e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          uJE01qd/r5eFZspHoTfOBNs8cxX1yPIOaqod+sPD7gw=
Subject key identifier:   5D:3E:B8:80:A5:C3:B5:03:4D:75:3E:EA:E9:BD:60:0C:A7:FB:D6:8E
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       7E388F7EF96972B5B1FD84214E9ABDF0596CC3ED
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:11 +0000
ROA not before:           Mon 01 Jul 2024 00:59:11 +0000
ROA not after:            Mon 30 Jun 2025 01:04:11 +0000
asID:                     45312
IP address blocks:        103.14.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:38:8f:7e:f9:69:72:b5:b1:fd:84:21:4e:9a:bd:f0:59:6c:c3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:11 2024 GMT
            Not After : Jun 30 01:04:11 2025 GMT
        Subject: CN=5D3EB880A5C3B5034D753EEAE9BD600CA7FBD68E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:4a:89:49:f6:80:4d:fb:4a:77:25:71:55:
                    ce:f8:10:23:bd:4a:88:c6:23:94:56:66:fb:05:4b:
                    04:ab:96:40:98:9d:b5:ca:44:a4:35:af:c0:b4:9c:
                    68:e5:c8:7b:b9:37:9d:fb:38:2f:43:7a:88:a2:c1:
                    ee:d0:45:df:17:ad:78:12:81:1d:1d:73:6f:8f:74:
                    c5:83:8e:e2:7c:63:bd:a3:91:ae:b8:1c:51:af:7b:
                    16:bd:da:82:96:20:0b:4c:40:dc:43:7d:3f:3e:20:
                    94:a4:fb:29:15:48:14:8b:d5:40:27:3a:fc:87:a3:
                    f7:f0:57:9c:ab:5f:76:d3:59:99:08:1b:bb:32:7a:
                    65:fb:0a:1f:94:e1:69:5c:83:76:2b:e9:f0:be:0b:
                    b6:ee:8d:fb:a9:b7:7d:e4:44:03:7a:3c:76:6e:6e:
                    24:22:a4:60:d3:3d:43:82:5a:50:9e:0b:a6:be:df:
                    b0:89:c9:4e:ee:46:49:a3:ce:9e:94:06:43:b4:61:
                    10:83:10:a9:59:cb:7b:f4:ff:46:b3:ae:c8:f9:1e:
                    c1:e2:44:23:a7:7e:32:9a:57:e6:8c:3f:99:a9:2b:
                    29:92:92:86:81:a8:6d:34:54:8e:2a:0f:de:69:f3:
                    dd:d0:70:32:47:fb:bc:f8:82:55:0d:d7:39:4f:01:
                    18:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3E:B8:80:A5:C3:B5:03:4D:75:3E:EA:E9:BD:60:0C:A7:FB:D6:8E
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31342e34342e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:bc:ac:a4:56:9b:c6:33:c3:bd:ee:b5:e6:07:e0:bf:89:
         0c:1f:40:f9:d5:8c:fd:82:02:3e:96:5e:f1:64:95:64:aa:5f:
         3d:4e:cd:23:24:bd:00:31:94:22:71:e3:d5:0e:e9:88:33:a6:
         5e:05:e5:40:40:8a:b2:0c:5c:8c:c8:9b:05:48:12:68:48:cd:
         ab:eb:d6:a8:d3:f8:0a:3b:f9:4a:1f:75:d8:bd:40:26:6f:10:
         ef:3a:4d:64:aa:dc:61:46:c9:67:13:fb:c4:65:83:8f:a0:9c:
         53:d7:05:4c:72:5f:9e:da:f8:9e:9e:54:86:ca:00:eb:ad:9b:
         7c:e1:32:ad:4d:f9:95:a4:2b:70:ef:e9:f9:54:fb:d4:f7:65:
         f9:2b:48:56:a9:02:89:1c:a8:6c:60:02:ca:32:34:46:b8:fd:
         12:7f:cb:e2:65:aa:91:d9:da:39:93:cd:f4:94:25:9d:02:4f:
         bc:b2:c6:11:7c:e7:26:c8:7f:48:ea:3a:61:2c:d7:16:23:fd:
         c8:59:5f:04:02:f8:a2:65:c8:7a:dc:b6:1d:75:5a:91:cc:29:
         a8:ad:7e:0c:2a:95:da:db:d6:2f:63:7a:9f:5a:26:69:13:b8:
         7d:c3:27:06:01:bb:20:17:b4:e1:41:7f:98:4c:12:c4:66:bb:
         c6:46:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org