Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
File:                     3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (raw, json)
Hash identifier:          5F95RZDK27mvn3dTD3C5hpwLTOCgLX1sE5sqanqe6xQ=
Subject key identifier:   77:CA:BE:CB:C4:05:DC:39:6A:73:D9:6F:F1:03:EA:49:EC:81:AF:BC
Certificate issuer:       /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
Certificate serial:       5A669D5E15159F30EA558B1113041C2E343ECEB7
Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa
Signing time:             Wed 29 May 2024 02:00:01 +0000
ROA not before:           Wed 29 May 2024 01:55:01 +0000
ROA not after:            Wed 28 May 2025 02:00:01 +0000
asID:                     150961
IP address blocks:        103.230.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl
                          rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:66:9d:5e:15:15:9f:30:ea:55:8b:11:13:04:1c:2e:34:3e:ce:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A
        Validity
            Not Before: May 29 01:55:01 2024 GMT
            Not After : May 28 02:00:01 2025 GMT
        Subject: CN=77CABECBC405DC396A73D96FF103EA49EC81AFBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:9f:98:1b:4c:54:44:e0:c1:be:5d:41:4d:
                    bf:26:8b:12:24:d9:22:cd:df:59:64:f0:e5:40:50:
                    28:4c:fd:4a:aa:b8:52:70:e8:dd:6d:59:ac:fd:e2:
                    98:16:37:e7:50:b7:fa:5a:b3:c5:00:3a:c7:7b:0c:
                    96:95:1b:31:db:62:db:f1:92:b3:7c:85:dd:df:df:
                    f0:34:04:10:b0:d7:cc:04:82:14:d2:40:04:05:fe:
                    ce:d4:f8:6c:c2:f7:61:67:76:35:76:c3:a9:fe:d7:
                    a0:57:76:8c:06:73:7b:75:2d:7a:b9:8f:8a:3e:49:
                    cc:2b:f5:da:52:bb:00:de:cc:02:5e:bb:89:8e:6f:
                    9d:a0:0d:b7:2e:3f:03:fd:2e:aa:07:bc:b8:ce:2f:
                    ca:af:de:00:1c:a4:07:d0:4b:2e:42:73:da:96:7f:
                    32:14:66:54:91:a4:8f:fa:bb:c4:90:36:4a:bc:61:
                    af:e7:a6:b0:73:f9:f0:fb:6f:1a:f1:f1:12:b4:21:
                    a7:4b:19:7b:30:39:53:eb:d8:ea:11:01:b1:b1:e2:
                    a7:eb:3b:a5:da:60:85:9b:3a:4c:9f:59:a0:b1:2a:
                    3d:72:a7:77:f2:e7:f3:e9:4c:a5:11:48:99:e7:c2:
                    65:68:06:4e:d9:54:93:55:4b:7f:93:c7:6e:03:2a:
                    b1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CA:BE:CB:C4:05:DC:39:6A:73:D9:6F:F1:03:EA:49:EC:81:AF:BC
            X509v3 Authority Key Identifier:
                keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:42:3d:8d:06:5b:98:49:5b:6d:af:60:12:8e:2a:51:19:4d:
         26:23:07:98:3e:2c:bc:1b:fe:0b:cc:43:c4:75:02:b4:fc:8b:
         7f:d0:21:f4:b2:69:18:70:35:25:f2:47:2b:00:1a:c7:84:91:
         10:cb:e9:53:f0:a3:4d:b0:fd:c3:ab:6e:d7:be:b6:d2:9f:d2:
         80:ea:79:20:43:99:16:65:4e:37:df:e3:c6:44:56:93:e9:6c:
         f7:dc:43:50:af:bd:e6:25:b4:c3:2e:57:1b:ef:be:2d:f3:84:
         cd:a8:31:8b:42:da:87:3f:51:2c:6e:3b:5b:06:89:0a:0d:0b:
         e7:ba:c4:90:44:09:d7:14:1e:7c:dc:c8:f6:f6:81:2c:99:39:
         02:88:93:c6:8e:95:8e:70:01:f5:34:81:cb:1d:05:ed:fc:0e:
         8a:f2:ec:74:4c:ba:86:e0:e1:ec:77:6b:fb:3e:af:9b:aa:e8:
         4e:ad:e4:0e:55:60:9c:b6:b1:83:cf:1f:36:06:c0:a9:46:ef:
         9e:be:41:33:bd:df:a6:8b:66:4c:b2:f3:af:29:ea:27:54:15:
         ff:67:12:78:77:6e:2e:b4:95:7d:03:1e:2b:d4:7d:db:41:f5:
         c0:70:c7:3b:74:ab:dc:78:0f:b5:49:4b:15:ce:cf:3b:5e:c3:
         9f:6e:66:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org