Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
File:                     3130332e32332e39382e302f32342d3234203d3e20313530323435.roa (raw, json)
Hash identifier:          7Ve4/gwOAFGa+Z0beMky73pWklzGR6y82uhIQHzqb/w=
Subject key identifier:   8D:07:DD:51:02:2A:C4:3A:2D:07:E0:F5:80:7D:94:E0:E8:A4:2F:30
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       131FBF07FD94DE93E4FB7AAA00CA8A683802C11A
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa
Signing time:             Sat 16 Mar 2024 07:00:01 +0000
ROA not before:           Sat 16 Mar 2024 06:55:01 +0000
ROA not after:            Sat 15 Mar 2025 07:00:01 +0000
asID:                     150245
IP address blocks:        103.23.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1f:bf:07:fd:94:de:93:e4:fb:7a:aa:00:ca:8a:68:38:02:c1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Mar 16 06:55:01 2024 GMT
            Not After : Mar 15 07:00:01 2025 GMT
        Subject: CN=8D07DD51022AC43A2D07E0F5807D94E0E8A42F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:58:77:67:5b:93:34:57:d9:4d:5e:ec:cd:
                    da:1e:47:ed:31:a2:12:09:3f:e8:9a:36:17:3a:96:
                    dd:11:26:1f:cf:d4:3c:85:46:11:d6:0b:80:a6:b0:
                    6f:c1:12:37:74:23:b3:58:d3:a0:45:b0:b5:12:a4:
                    ad:03:d5:86:f9:f8:09:74:54:09:d7:bc:54:22:72:
                    b8:30:27:d0:6b:fb:41:34:48:f5:c2:ae:a6:ad:35:
                    f0:f1:1a:ed:d9:62:ec:e6:8e:f3:20:07:2c:96:b6:
                    e4:ff:60:2e:5e:ae:68:6e:2d:fd:0c:eb:1f:37:1a:
                    df:ce:40:95:7a:29:64:c6:a1:d2:fb:f0:ac:bc:42:
                    91:ac:b6:06:2e:15:53:4c:6b:08:bc:f6:b5:bb:df:
                    4b:7a:1e:dc:fe:1d:fd:c5:ed:bc:cc:5b:c7:4d:40:
                    09:18:37:f9:0b:9d:4b:e9:be:43:d1:ab:bf:18:d0:
                    bf:bd:bf:be:c1:9e:42:01:43:8a:2b:2f:a2:15:8b:
                    0c:1d:68:66:e7:5c:2f:2c:79:ed:09:21:c6:fe:b5:
                    cb:e1:4d:6e:da:30:b0:4c:e9:f5:09:4b:ca:f4:23:
                    40:1d:1e:24:e9:a6:4d:8b:ff:81:34:e7:bc:9b:b0:
                    c4:45:71:fe:22:ce:9b:57:bf:a2:d1:81:c7:ee:84:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:07:DD:51:02:2A:C4:3A:2D:07:E0:F5:80:7D:94:E0:E8:A4:2F:30
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32342d3234203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:28:42:f5:78:c1:f0:7f:d2:19:7c:59:e9:68:0c:1f:36:ae:
         62:d6:a9:ec:5b:90:fe:3a:40:5b:64:d1:52:42:ac:cb:19:3f:
         00:97:50:cc:a8:02:b1:33:c6:d8:55:6a:be:7e:2d:38:32:89:
         12:06:56:33:99:3e:49:5e:0f:28:5c:b3:db:3d:dd:b0:ad:a0:
         3d:6e:43:cf:08:13:b0:eb:39:fe:4c:3d:68:e4:4b:37:c4:1e:
         d7:c7:95:8e:02:c5:66:8c:14:51:a5:9d:48:b0:d8:40:3d:04:
         9e:63:f1:d8:04:f2:91:a8:d5:ed:7b:16:01:8d:4d:31:f3:53:
         4e:f5:ec:e9:dd:26:19:3b:b1:82:30:03:39:97:ab:b8:65:5a:
         0f:82:1e:5f:5a:f2:f9:62:13:e9:a0:8d:32:0b:34:a3:1c:fb:
         94:57:a5:50:aa:f9:74:07:e2:c1:21:9d:0c:41:24:e3:37:e9:
         bb:6e:4a:cc:48:45:fc:63:fe:ea:cc:03:58:e9:93:10:63:fd:
         48:f2:da:90:9b:e8:0c:ac:08:2d:4e:2f:07:65:6d:e4:62:c3:
         55:bf:67:05:f1:32:66:cc:32:34:a9:76:9a:af:db:48:8b:89:
         fd:c8:0e:c7:a8:af:f9:54:ff:19:17:03:f4:a1:5e:6f:07:5a:
         38:00:8d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org