Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
File:                     3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          VUgo07FAP183hcn1tsxAwvEb1gMHzb6Dj7hfMPU//BE=
Subject key identifier:   14:3D:9A:7E:17:84:B8:AE:5A:E8:FB:A1:DF:37:C3:CB:2C:03:88:6F
Certificate issuer:       /CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
Certificate serial:       487ACE3DFD3B8963419ACB63C713266070C3C621
Authority key identifier: B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
Signing time:             Tue 27 Feb 2024 10:00:01 +0000
ROA not before:           Tue 27 Feb 2024 09:55:01 +0000
ROA not after:            Tue 25 Feb 2025 10:00:01 +0000
asID:                     56255
IP address blocks:        103.10.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl
                          rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:ce:3d:fd:3b:89:63:41:9a:cb:63:c7:13:26:60:70:c3:c6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3032084B1211BBB522E01AB56EC94BFBD1C91BB
        Validity
            Not Before: Feb 27 09:55:01 2024 GMT
            Not After : Feb 25 10:00:01 2025 GMT
        Subject: CN=143D9A7E1784B8AE5AE8FBA1DF37C3CB2C03886F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:52:5e:84:e3:6f:cb:74:5e:3c:67:d4:a9:
                    ba:9c:e6:e2:f6:eb:62:de:f0:fa:53:bc:36:31:a2:
                    02:cc:83:1b:db:e6:ef:bf:ba:d9:8c:1f:03:04:c6:
                    b8:61:3b:cf:01:26:96:93:a7:fe:d4:b1:a3:7b:d8:
                    18:ed:27:f0:6d:06:1d:cd:cc:cc:2d:86:0a:c0:71:
                    2c:02:76:44:50:f7:70:a4:af:03:c0:db:ba:f2:53:
                    69:1d:6d:d3:7d:d1:6c:b5:f2:3b:5c:a3:fd:3e:36:
                    78:cc:5b:73:0a:6f:31:7f:7e:7a:b9:2d:88:dc:23:
                    ab:71:29:56:55:ed:6d:54:d2:6e:65:b6:f4:4a:d0:
                    cb:93:57:b7:cc:31:0d:91:c5:fe:4a:fa:12:ba:ba:
                    87:43:4d:fd:57:21:6a:7e:47:ed:3e:45:b2:6f:78:
                    3f:0f:8e:b0:84:d7:2b:a3:cd:df:f2:c9:38:b6:3f:
                    21:9a:f3:94:99:01:84:79:d7:83:18:53:d1:41:44:
                    32:78:08:ff:da:f7:4d:b7:32:91:6d:b9:2b:cc:90:
                    4a:2f:98:81:31:7e:1e:2d:f3:9d:10:82:4b:b9:47:
                    1c:02:95:b5:ba:a3:77:93:63:de:a3:b4:77:0a:24:
                    0f:0f:fa:2d:3b:80:a2:98:78:52:c7:ca:bd:0c:84:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3D:9A:7E:17:84:B8:AE:5A:E8:FB:A1:DF:37:C3:CB:2C:03:88:6F
            X509v3 Authority Key Identifier:
                keyid:B3:03:20:84:B1:21:1B:BB:52:2E:01:AB:56:EC:94:BF:BD:1C:91:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3032084B1211BBB522E01AB56EC94BFBD1C91BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e9:11:d4:61:95:07:f4:8c:96:e4:c2:2f:d8:b9:2a:a0:45:
         cb:ed:ac:a6:ff:c8:e2:48:82:48:c8:0e:21:9d:39:1c:b3:ed:
         f3:51:d1:67:33:54:a7:9c:e5:40:81:0b:08:32:c1:31:3d:a3:
         4a:3e:2b:66:d3:d9:f8:1c:50:b3:7a:aa:1c:b8:86:4e:2b:87:
         f6:65:21:e4:25:e3:92:00:94:05:0d:87:fb:0a:d0:97:00:6f:
         22:c7:a3:b1:0e:1d:0b:45:a2:2a:e3:9d:81:d3:cf:5f:b3:4a:
         56:60:5e:9a:01:8a:a0:61:5f:36:1e:30:c7:b9:cc:30:47:f3:
         12:af:a4:b6:e4:ec:9c:08:34:f0:c4:43:3c:13:25:7d:6d:89:
         1a:72:f6:31:5b:cc:9c:ce:73:42:4b:74:a9:e1:0a:ed:53:e7:
         fa:cc:ec:ca:b4:b7:e8:a6:ee:df:85:f4:58:6f:72:bd:16:dd:
         8e:93:c8:c9:07:54:bc:79:43:69:61:00:1c:74:6d:7c:cc:9e:
         ee:64:0f:12:4d:26:76:f1:d5:5a:9a:a6:92:ca:25:d4:a3:3f:
         81:41:a4:c3:51:dd:ee:84:1e:42:2d:57:0d:54:cf:39:97:86:
         c7:13:cf:62:08:19:d6:29:49:31:26:85:c5:b0:4a:a4:e8:aa:
         d7:49:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org