Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
File:                     3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa (raw, json)
Hash identifier:          DQMgkZLGxyfq2p7h5h8ycprHe7KtMnWybg9FNlhcDtc=
Subject key identifier:   44:42:2F:73:D7:62:5A:7B:C8:1B:19:EF:8F:FE:75:60:26:D1:2C:4E
Certificate issuer:       /CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
Certificate serial:       54415EFED3D0DFED5F632A3061F0D797B9FEEDB2
Authority key identifier: EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa
Signing time:             Sat 02 Mar 2024 03:00:43 +0000
ROA not before:           Sat 02 Mar 2024 02:55:43 +0000
ROA not after:            Sat 01 Mar 2025 03:00:43 +0000
asID:                     137349
IP address blocks:        103.114.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl
                          rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 07:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:41:5e:fe:d3:d0:df:ed:5f:63:2a:30:61:f0:d7:97:b9:fe:ed:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EADA0AEE51F3910B50A065D57D946E3EAFA8BD11
        Validity
            Not Before: Mar  2 02:55:43 2024 GMT
            Not After : Mar  1 03:00:43 2025 GMT
        Subject: CN=44422F73D7625A7BC81B19EF8FFE756026D12C4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:90:93:f2:01:73:31:aa:29:e4:f7:c8:eb:33:
                    79:91:25:79:73:95:71:4f:34:e5:11:b9:2b:fa:1d:
                    69:10:1f:0a:ef:10:be:17:8b:45:d5:7e:b0:a5:1b:
                    41:88:b2:cf:62:69:8b:03:bc:8c:1d:e1:b1:4f:c4:
                    4a:0a:28:77:9f:a1:2f:ae:dd:39:6b:8b:23:3e:4d:
                    f6:13:cf:d4:74:b3:a6:b0:f2:84:a6:a4:50:2f:cf:
                    f6:46:98:6d:e8:da:43:ea:1d:0d:72:68:c7:29:88:
                    9f:be:79:21:b6:17:d6:f1:92:72:11:99:90:ff:64:
                    ad:5b:d1:95:27:d7:c8:4e:d7:21:46:c5:04:59:4c:
                    01:80:4a:de:be:ab:00:ca:12:06:71:b0:2a:a0:26:
                    a3:15:2d:ca:69:ad:c8:0e:cc:68:2a:1f:e8:9f:72:
                    c8:76:d4:b5:b4:c4:b1:b4:78:68:b5:49:52:52:65:
                    d8:64:b3:92:2f:a1:9e:eb:73:f1:c8:4a:3e:59:d5:
                    49:ff:16:7f:98:92:94:33:12:b9:8b:a0:36:bc:55:
                    82:f8:e9:14:57:5c:f3:2f:50:22:ce:59:af:11:f4:
                    c9:d4:22:11:af:ef:a3:8f:08:16:a4:d8:39:94:67:
                    51:17:c1:ae:d1:8c:20:ba:96:ad:42:36:9d:b6:8c:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:42:2F:73:D7:62:5A:7B:C8:1B:19:EF:8F:FE:75:60:26:D1:2C:4E
            X509v3 Authority Key Identifier:
                keyid:EA:DA:0A:EE:51:F3:91:0B:50:A0:65:D5:7D:94:6E:3E:AF:A8:BD:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EADA0AEE51F3910B50A065D57D946E3EAFA8BD11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0962c6e-595a-47c4-aa7c-ef8e77cae642/0/3130332e3131342e35322e302f32342d3234203d3e20313337333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:c2:e6:1c:71:f5:ea:aa:55:a9:ac:07:2d:83:b2:32:99:
         f0:31:32:16:1a:62:9b:78:fe:c4:82:0b:5a:1a:2a:cc:d2:de:
         e3:96:96:ef:39:7e:de:b3:21:ff:5d:d2:0b:85:66:a7:9c:11:
         84:25:41:2c:8c:98:e6:a3:b7:70:8e:e1:df:79:42:44:2f:7e:
         59:82:c8:d8:f9:b3:0c:05:aa:a8:84:ea:65:33:8e:2f:a6:a5:
         26:2b:26:85:ba:c5:58:d4:92:d8:dc:a0:93:c6:48:f7:c5:31:
         fc:84:85:36:a7:43:f2:d6:8c:3c:86:a9:3b:a0:c6:0e:69:32:
         10:ed:7d:d1:39:f6:dc:c9:75:d6:82:b6:a1:3c:08:16:5a:06:
         98:d5:c3:52:fe:e3:81:25:0b:03:19:df:c0:51:36:a1:31:fe:
         b1:0e:df:00:ca:ea:54:1f:53:f3:b5:07:4c:46:55:7d:82:6d:
         d6:b9:99:40:27:bb:25:48:ae:78:11:cc:0d:0b:ff:05:22:38:
         d4:92:8d:be:80:a7:6a:97:be:d6:45:7a:39:fe:ef:8d:84:bb:
         de:d9:7c:fe:d4:f9:c7:3c:0a:4c:02:9b:0a:ff:91:3c:6e:80:
         ec:5c:f3:b4:08:c7:1f:b4:db:19:be:dc:fd:4f:70:a7:d7:5b:
         6d:90:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 05:58:25 2024 by rpki-client on console-ams.rpki-client.org