Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
File:                     3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          tDGgYSq3lCOjAbyD+1uT73B3gsbRyYsk8Li2KR/M8KU=
Subject key identifier:   26:12:0D:71:C9:9F:02:83:39:1D:A7:04:28:47:CE:C5:3A:65:52:79
Certificate issuer:       /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
Certificate serial:       068C77D474BB97256F17A8D727C0C2AAAD5698D8
Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 28 Nov 2023 04:00:01 +0000
ROA not before:           Tue 28 Nov 2023 03:55:01 +0000
ROA not after:            Tue 26 Nov 2024 04:00:01 +0000
asID:                     45305
IP address blocks:        103.51.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl
                          rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 01:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:77:d4:74:bb:97:25:6f:17:a8:d7:27:c0:c2:aa:ad:56:98:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07
        Validity
            Not Before: Nov 28 03:55:01 2023 GMT
            Not After : Nov 26 04:00:01 2024 GMT
        Subject: CN=26120D71C99F0283391DA7042847CEC53A655279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:66:f5:74:9b:3c:9f:04:b3:7e:8d:9a:0d:89:
                    3f:ff:97:8b:fc:bc:f3:c3:0e:c2:e8:64:31:08:b6:
                    95:e7:cf:d3:df:b0:4e:d7:f2:fa:4f:ed:52:e0:44:
                    28:ba:93:57:b2:fc:c2:b5:ee:d5:97:e5:c3:38:5c:
                    4d:a4:a2:7c:b7:c9:05:1a:3c:b7:54:0e:e3:87:c5:
                    46:d5:88:ef:41:38:05:6c:eb:61:50:f7:6f:3a:7f:
                    1a:2d:d2:6f:d6:58:5b:4e:9e:35:7e:26:96:cf:2e:
                    dc:27:e4:07:8e:93:42:ac:cf:44:61:69:c2:80:45:
                    1e:a0:82:67:4d:d3:2d:c2:75:a0:5c:f7:39:5c:cc:
                    bd:f0:b6:63:58:2a:ff:c2:c7:99:fd:ad:b9:0d:00:
                    61:b9:13:2f:a9:af:9c:90:91:6a:db:26:fb:1f:92:
                    f7:9f:8b:c4:7d:1f:71:a0:48:34:7b:4d:0e:4b:65:
                    af:84:11:26:f2:78:fe:a1:1c:f9:85:ed:ca:e6:86:
                    9a:56:72:2e:34:58:70:c5:f9:f2:b7:c1:ae:91:8c:
                    da:91:6f:9b:b3:f7:d7:55:93:f7:ff:02:f1:1e:44:
                    3e:78:8d:62:66:14:82:88:3b:4d:44:b7:af:82:2f:
                    a4:1f:81:28:5d:0f:6f:6e:d4:36:6d:9b:b3:f3:7f:
                    b0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:0D:71:C9:9F:02:83:39:1D:A7:04:28:47:CE:C5:3A:65:52:79
            X509v3 Authority Key Identifier:
                keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230352e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:61:31:4a:3b:ec:b8:ad:c7:3e:b8:27:1f:29:b5:63:04:10:
         a7:a6:f3:58:a8:f1:95:46:8b:80:bb:38:55:ed:aa:ae:22:cf:
         24:0f:bc:3c:4c:65:c1:13:4e:ad:91:bd:99:a0:4b:08:f6:c2:
         d9:c6:0b:71:b0:44:c2:c4:9a:55:d3:99:a2:8e:95:5f:8f:eb:
         15:3e:f9:4e:15:82:55:66:1d:32:ef:bc:37:99:db:8a:4e:af:
         cf:d7:58:6e:c1:12:cb:2e:99:1c:46:fd:7f:07:c0:e5:ce:ed:
         40:90:8f:b3:1b:1d:12:76:02:6a:db:15:f3:99:5f:9b:e4:83:
         82:4d:6f:81:c3:30:17:c3:03:c3:f1:ac:77:13:db:66:9e:7c:
         a0:1b:d6:1d:78:20:08:80:d8:8d:f6:11:5c:f3:ff:01:96:07:
         db:4a:e6:7a:d6:88:e1:aa:be:49:24:4c:c7:38:8f:e3:26:6e:
         4a:31:53:59:33:81:48:1a:4d:98:23:18:3a:9b:07:31:7d:1f:
         5e:ed:fa:aa:8a:5f:22:45:63:97:2e:93:3d:fd:d4:6d:12:98:
         65:7c:86:52:06:98:0c:6e:ce:69:90:4a:86:12:a5:07:f7:bc:
         7d:95:1f:fe:48:1c:2a:ed:c5:61:9c:42:ff:80:ab:03:68:23:
         ec:c6:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 22:33:50 2024 by rpki-client on console-ams.rpki-client.org