Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
File:                     3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          L3xGikEKl/d/gNsRCc8uwVITgzulmVPyG56nILbq08o=
Subject key identifier:   0A:03:A0:EA:D2:BB:F0:3F:4B:93:3E:AF:07:04:F6:06:39:13:24:A3
Certificate issuer:       /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial:       1F53B39C16020C12505E7C63104696DB9B71F1FD
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 29 Oct 2024 05:00:01 +0000
ROA not before:           Tue 29 Oct 2024 04:55:01 +0000
ROA not after:            Tue 28 Oct 2025 05:00:01 +0000
asID:                     45305
IP address blocks:        103.51.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
                          rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:53:b3:9c:16:02:0c:12:50:5e:7c:63:10:46:96:db:9b:71:f1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
        Validity
            Not Before: Oct 29 04:55:01 2024 GMT
            Not After : Oct 28 05:00:01 2025 GMT
        Subject: CN=0A03A0EAD2BBF03F4B933EAF0704F606391324A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:3f:98:e1:a6:8e:30:51:b6:40:0e:be:76:
                    39:04:a7:0d:10:53:95:cf:ed:40:40:a8:97:0d:4e:
                    9c:6b:02:4c:4b:25:4e:e4:11:78:90:12:58:da:d9:
                    b5:d1:00:d4:1e:49:c9:7f:9d:03:27:d6:b3:77:aa:
                    a9:76:cd:d8:f9:16:92:eb:f6:26:72:62:6d:fc:42:
                    38:34:aa:99:2e:c8:53:6a:33:01:53:8d:c8:d5:94:
                    6b:27:d3:1e:07:ee:a2:2c:a4:f7:1a:f7:4a:7c:80:
                    55:09:e6:c4:29:f6:fd:69:84:4a:cc:bb:d4:79:a2:
                    bf:af:b8:2d:f7:97:0b:67:4b:5a:9e:ff:88:3b:31:
                    76:99:c6:63:01:e3:0d:f9:c4:78:a0:0b:0e:b9:cf:
                    23:34:02:2b:f0:64:f3:22:a6:00:47:81:fa:a8:07:
                    64:e8:af:eb:f9:47:a9:af:d1:d5:75:e4:e6:e3:49:
                    27:a5:57:f2:1c:4b:ce:ac:14:a6:e3:f7:2a:b1:97:
                    f7:9b:1d:4b:d9:44:1d:36:ff:2c:4f:47:a9:e0:a4:
                    b9:e7:1f:1b:15:28:82:f2:66:7f:81:f9:b2:f0:44:
                    b0:3e:a4:ac:2f:33:15:14:c7:41:a6:f2:4a:9a:b0:
                    6f:41:e7:96:f3:a4:0c:7b:40:35:bc:f8:b2:ed:b2:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:03:A0:EA:D2:BB:F0:3F:4B:93:3E:AF:07:04:F6:06:39:13:24:A3
            X509v3 Authority Key Identifier:
                keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:82:a9:fa:82:d7:5c:15:a2:d6:cb:e9:5a:c9:40:61:91:
         7a:9f:e7:dc:6b:84:09:d5:dc:d2:ac:a6:86:b0:9c:ae:0e:9f:
         1f:15:7c:6a:63:68:b6:f8:d8:1b:af:3c:89:97:d2:55:7d:63:
         34:9d:78:9a:39:e3:76:0c:d0:d8:b7:51:5d:0d:09:10:66:79:
         ce:37:6d:38:07:b4:9e:d2:d4:70:cc:db:98:1a:b5:e9:86:9f:
         2a:e7:fe:1c:80:b5:bd:77:dc:c3:70:e1:07:72:5a:00:8c:6c:
         71:75:31:7a:86:24:a3:51:70:81:29:41:b5:5a:26:39:6e:37:
         19:42:2a:5c:1f:9b:06:1b:4e:d2:d2:1a:58:e6:d4:be:49:40:
         21:84:46:f6:15:21:60:7c:e5:9f:e2:33:6a:9e:3f:50:5a:6e:
         aa:96:55:ba:92:0d:f9:34:7c:73:dc:bd:dc:90:10:94:4d:c3:
         85:c3:65:5f:de:fd:ce:5f:b4:1e:34:48:d0:94:cc:9a:db:bd:
         3b:ab:42:8f:8f:6d:3d:19:fa:2b:30:c4:1c:77:09:2a:94:5e:
         c3:4b:79:49:bc:34:07:e8:e8:1a:3d:9e:52:a6:d9:9d:4a:97:
         cc:6e:a4:a0:2a:27:f3:02:bd:26:59:74:a9:26:b8:6c:db:fe:
         39:43:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org