Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
File:                     3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (raw, json)
Hash identifier:          DRt67ofnF1ECJ9/bHZxiXN6I94m8Z1I85hzUhgLXTtU=
Subject key identifier:   60:69:E1:5E:93:AD:E4:10:42:FC:5C:68:87:D7:8F:35:6F:E9:C9:2A
Certificate issuer:       /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Certificate serial:       7C67F15D938F7FF86C35324A74A33D19F85D54AF
Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa
Signing time:             Mon 06 May 2024 20:00:01 +0000
ROA not before:           Mon 06 May 2024 19:55:01 +0000
ROA not after:            Mon 05 May 2025 20:00:01 +0000
asID:                     140390
IP address blocks:        103.150.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
                          rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:67:f1:5d:93:8f:7f:f8:6c:35:32:4a:74:a3:3d:19:f8:5d:54:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
        Validity
            Not Before: May  6 19:55:01 2024 GMT
            Not After : May  5 20:00:01 2025 GMT
        Subject: CN=6069E15E93ADE41042FC5C6887D78F356FE9C92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5e:d2:63:ee:d3:c5:bf:b1:8d:14:52:af:f6:
                    04:cd:f4:a1:21:1b:8a:f2:c1:39:df:02:2b:9a:d4:
                    9b:4c:5f:34:f5:43:28:45:58:ca:e0:3f:18:66:de:
                    c5:31:e4:c4:d3:b4:18:94:4c:84:2a:a5:ca:bf:4c:
                    34:4c:cf:88:69:96:a2:37:e2:9d:64:f0:dd:35:87:
                    ac:08:db:fb:b3:e9:44:b6:07:1b:02:11:b7:8d:ef:
                    0a:48:20:85:f8:a7:c3:d4:b2:f3:63:0c:c3:e1:37:
                    98:f2:bb:f2:d1:15:51:e2:bd:5f:ed:36:36:88:74:
                    38:f7:a0:04:5e:c1:69:55:9d:55:56:42:30:63:1a:
                    18:7b:26:f7:b0:06:6a:bc:5c:53:01:0a:85:94:69:
                    e4:92:b1:38:30:2b:d6:5c:9d:8c:10:e8:b8:bc:3e:
                    1b:e2:1f:ae:84:09:d4:2b:ba:80:ba:8b:7c:c9:3f:
                    c0:ad:4f:35:df:9b:4e:73:18:46:37:02:14:89:74:
                    f2:aa:db:03:c7:82:3a:68:f1:ba:13:ba:8d:bc:2b:
                    13:9d:59:b7:29:d1:55:f4:9d:ef:c6:63:c9:32:65:
                    7e:90:42:87:6c:6c:03:f2:6c:09:c8:bd:84:ae:af:
                    91:ec:a6:bc:72:b5:00:14:c8:b0:1e:34:e7:fb:52:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:69:E1:5E:93:AD:E4:10:42:FC:5C:68:87:D7:8F:35:6F:E9:C9:2A
            X509v3 Authority Key Identifier:
                keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:39:24:88:f6:7d:ae:fe:27:32:a7:8b:aa:3d:c5:43:cf:26:
         9e:81:20:67:de:3a:5e:eb:39:13:91:8d:ad:08:1c:c6:8b:95:
         d5:8b:1a:b8:7b:9d:6a:65:47:e1:fb:57:a7:d2:00:69:a7:6a:
         6c:65:1c:91:03:7f:1c:fb:b0:8d:68:2e:d9:c5:96:00:90:b6:
         63:95:f9:b5:95:65:59:78:98:47:a1:6c:06:c4:5a:8f:7f:ca:
         b5:30:dd:2c:2d:17:be:31:0c:ad:41:7a:62:46:77:3a:c2:a5:
         d1:d2:6c:8c:bb:62:6e:59:6f:1c:06:b7:33:72:14:e6:ea:1c:
         7b:91:8b:53:3d:7f:2b:59:ff:8a:fe:7e:79:d9:06:57:61:77:
         01:8d:56:5b:8b:82:ab:df:33:ee:17:93:c1:21:69:35:08:33:
         e9:c2:23:91:06:82:40:79:ec:14:64:3e:ff:b6:66:e7:1d:ff:
         6d:7e:ed:67:f7:2f:d8:d9:eb:f5:c5:8c:c4:70:29:c7:37:22:
         22:44:e2:cb:23:b9:dc:32:f3:b7:35:8a:c3:47:7d:3b:e0:34:
         a6:ef:37:f1:ad:6c:d3:83:b2:d8:f4:9d:71:42:39:bb:e3:86:
         f6:74:5c:e9:73:dd:d4:56:17:9d:e4:e8:8e:89:da:bc:de:60:
         ee:0c:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:34 2024 by rpki-client on console-ams.rpki-client.org