Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa
File:                     3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa (raw, json)
Hash identifier:          y+PmnRwXAspcuyCeBxpBxMAUbPq+nHN3JTc40Vmc598=
Subject key identifier:   AA:33:1A:51:2D:24:58:8E:51:A6:8D:49:B2:C0:43:55:DB:BA:BA:67
Certificate issuer:       /CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5
Certificate serial:       463C460DB5D88A14F916F4614966991067F1C9D3
Authority key identifier: E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa
Signing time:             Fri 17 May 2024 08:00:01 +0000
ROA not before:           Fri 17 May 2024 07:55:01 +0000
ROA not after:            Fri 16 May 2025 08:00:01 +0000
asID:                     150973
IP address blocks:        103.17.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl
                          rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3c:46:0d:b5:d8:8a:14:f9:16:f4:61:49:66:99:10:67:f1:c9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98B5C8DE6CD8A83092FB55578388BB55D8021A5
        Validity
            Not Before: May 17 07:55:01 2024 GMT
            Not After : May 16 08:00:01 2025 GMT
        Subject: CN=AA331A512D24588E51A68D49B2C04355DBBABA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:a9:38:1c:25:80:75:eb:7c:5a:d5:fd:2d:
                    84:1d:88:88:db:e1:02:3c:30:4a:ca:cb:0e:7d:7c:
                    50:d6:f0:aa:41:97:bd:4b:f4:e1:1f:10:71:d3:7f:
                    2e:15:ad:b9:27:09:6a:13:57:1d:5c:f8:c8:a4:da:
                    40:1a:06:4c:39:ab:35:4e:28:bd:6b:c6:7d:f8:c9:
                    e5:62:e7:77:2b:37:b0:00:12:1c:c0:7e:f1:91:d6:
                    8f:d6:2e:90:2d:79:ff:49:1f:81:8a:ab:f7:fb:48:
                    76:c1:28:15:59:80:29:b1:e0:85:ab:24:ea:03:d1:
                    6b:59:38:db:87:63:fb:15:11:65:64:5f:f1:5b:4c:
                    0e:fc:d0:dc:99:77:97:90:48:55:05:23:92:e6:82:
                    25:2d:68:24:de:23:fa:3a:9a:d2:16:18:21:b4:da:
                    4f:e7:68:8c:5e:28:4c:88:a7:48:db:02:ab:f8:8a:
                    ac:08:46:7e:1e:34:05:03:1e:d2:c3:9c:be:42:18:
                    cd:94:93:28:08:25:19:8b:2c:2a:42:ef:1f:2c:63:
                    ae:60:f2:5f:77:0d:f8:be:5e:09:99:ee:9a:dc:24:
                    cb:fa:ad:87:ad:2d:4d:7d:fe:03:e2:de:98:74:33:
                    17:25:55:2d:a6:57:92:47:a0:01:ac:da:2c:1d:f6:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:33:1A:51:2D:24:58:8E:51:A6:8D:49:B2:C0:43:55:DB:BA:BA:67
            X509v3 Authority Key Identifier:
                keyid:E9:8B:5C:8D:E6:CD:8A:83:09:2F:B5:55:78:38:8B:B5:5D:80:21:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E98B5C8DE6CD8A83092FB55578388BB55D8021A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfdafe56-8434-4bba-b176-35e872c1ac18/0/3130332e31372e3234382e302f32342d3234203d3e20313530393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:cb:93:2c:ca:37:ae:4c:dd:4a:12:6b:ae:cb:08:6d:8a:
         f1:21:20:af:e2:86:92:a9:c0:32:59:2b:02:f9:50:4d:31:dd:
         af:0e:9e:a7:85:05:a1:5f:5f:80:89:a6:63:4b:c2:0c:fa:ec:
         03:46:af:da:e7:b8:38:5d:91:e2:b6:e6:d1:ab:af:c8:9c:ac:
         d4:71:5a:87:c5:a6:3e:a8:bf:a1:c4:be:ea:5d:ed:65:db:d6:
         bc:90:cc:f7:4a:91:1c:24:bc:24:8b:e3:c9:34:4c:11:56:e0:
         b4:78:1d:1d:b7:da:de:95:49:9f:0a:2e:9a:0a:80:cc:7c:0e:
         25:75:ae:d1:cf:17:1f:40:d0:43:b8:7c:18:22:d6:b6:b1:13:
         f2:6c:44:f4:ce:69:8c:0b:4c:fa:77:b3:b2:ae:fc:5e:72:12:
         11:f8:da:63:8e:ae:bb:e9:ac:f0:89:a7:dd:21:d8:f2:fa:8c:
         04:5c:88:b5:d9:69:18:b0:c2:65:c6:3b:89:dd:a7:fe:7a:b5:
         69:c1:70:a3:7c:eb:4b:78:2e:6d:55:e5:25:10:b2:a1:ef:a1:
         1e:67:0b:14:12:6f:68:4d:51:9f:f9:88:12:ed:f6:dc:bc:72:
         09:7b:fd:e3:16:30:3d:a5:b0:74:cb:ff:e0:7a:4c:fe:a2:75:
         cf:7d:49:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org