Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa
File:                     3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa (raw, json)
Hash identifier:          /Q56c2vTgJrR0RwpAAmcT2LWHK3urcXnyJOILgRuaAw=
Subject key identifier:   A5:33:0E:3E:B9:C8:2F:0C:08:64:54:6C:8D:59:AD:E7:2C:C4:3F:A3
Certificate issuer:       /CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
Certificate serial:       3ADA282ECF56DCE8258FD5613FB25EC3DAE0C147
Authority key identifier: 74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa
Signing time:             Tue 09 Jan 2024 14:00:20 +0000
ROA not before:           Tue 09 Jan 2024 13:55:20 +0000
ROA not after:            Tue 07 Jan 2025 14:00:20 +0000
asID:                     151011
IP address blocks:        103.250.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl
                          rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:da:28:2e:cf:56:dc:e8:25:8f:d5:61:3f:b2:5e:c3:da:e0:c1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744F97E1DF1BD6D37E6C2EA8F02C088498F43323
        Validity
            Not Before: Jan  9 13:55:20 2024 GMT
            Not After : Jan  7 14:00:20 2025 GMT
        Subject: CN=A5330E3EB9C82F0C0864546C8D59ADE72CC43FA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:46:41:76:d6:16:66:9d:27:fc:d2:1e:45:
                    f5:3c:1b:20:87:98:cd:84:15:e4:67:14:98:c7:e4:
                    46:d4:09:3b:a7:0f:61:72:95:57:ef:ff:71:3f:b2:
                    5c:0d:ce:9d:23:d1:bb:04:9f:ea:a6:3b:6b:7e:b7:
                    01:08:4a:a7:ac:b0:9e:90:72:09:26:c0:70:c1:a7:
                    fc:20:92:07:4e:38:51:21:39:5f:0c:10:d0:37:df:
                    d8:3c:bb:b8:2e:b7:6b:c2:31:45:f5:8b:f2:0c:4e:
                    e5:ee:9c:12:b6:ff:0d:fa:33:95:a0:98:45:1a:44:
                    e4:dd:cf:0d:f5:73:35:e3:9c:4f:f5:17:a5:6a:f2:
                    1c:68:4e:ef:ff:0e:ae:8a:3d:45:41:7e:73:fb:d7:
                    63:e4:20:d1:1a:80:98:87:70:87:a4:9b:9e:4e:61:
                    82:9a:d8:09:d5:d0:3b:e5:fc:53:41:c5:e1:da:fa:
                    ea:57:b7:ab:07:d6:81:c4:e1:82:6b:cc:b2:11:4c:
                    80:be:82:0c:e5:8f:d9:b3:d3:48:f7:dc:98:03:1d:
                    7a:53:09:25:b9:31:fe:6c:55:a0:f3:9c:69:15:74:
                    0e:94:b8:40:c0:59:c3:c7:b7:8d:c3:c1:44:92:13:
                    6b:de:7f:b2:bd:fc:43:1e:f7:3f:93:68:89:99:57:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:33:0E:3E:B9:C8:2F:0C:08:64:54:6C:8D:59:AD:E7:2C:C4:3F:A3
            X509v3 Authority Key Identifier:
                keyid:74:4F:97:E1:DF:1B:D6:D3:7E:6C:2E:A8:F0:2C:08:84:98:F4:33:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/744F97E1DF1BD6D37E6C2EA8F02C088498F43323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c80dde94-e5be-4d29-bb12-45fb5c1d2c79/0/3130332e3235302e3130332e302f32342d3234203d3e20313531303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:37:e2:71:14:e1:ef:13:4c:a7:0f:49:8f:ae:ed:55:b9:59:
         b8:dc:0e:a6:96:ec:8b:e8:b7:2a:94:93:fb:04:4e:e6:0b:6b:
         be:e1:6b:ef:78:ae:25:2a:e9:63:04:07:84:45:51:1a:dc:b0:
         1f:95:ac:5c:1d:c7:6b:5c:7c:ce:17:85:81:45:4a:b2:c3:bf:
         7d:73:be:58:ef:5b:3e:0b:bd:9d:3a:04:3f:48:c6:39:53:12:
         b9:78:5d:29:32:c2:72:de:24:a0:49:1e:6c:37:b9:20:32:66:
         f3:0e:de:d7:0a:8a:9c:5c:bf:17:a3:f4:29:b2:3e:ec:0d:d9:
         79:de:cb:21:29:9d:da:21:72:78:a0:8a:0c:91:0e:86:44:c8:
         83:03:53:a4:59:04:0d:8a:09:95:5c:26:e1:40:ec:3d:24:03:
         6b:10:89:9c:57:fa:20:74:93:77:25:0c:c5:1f:a1:da:6a:a2:
         b4:87:a6:c4:bf:83:cf:90:16:34:fd:89:50:24:ff:bc:61:96:
         3b:f9:5a:f4:2a:ba:55:1a:cc:cb:b5:87:9a:8b:58:b2:64:ca:
         00:79:e9:b0:32:6d:26:a6:89:e5:be:81:32:6c:6f:86:11:be:
         86:3b:a4:3a:8f:37:09:70:46:69:ea:6f:81:48:f0:e2:29:4c:
         ca:75:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org