Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
File:                     3130332e3135312e39322e302f32332d3234203d3e203435323935.roa (raw, json)
Hash identifier:          3JDp1i7KmRhBmPpe01SA4m6I5uhKv3MHTvB/tFy/FVk=
Subject key identifier:   F5:C6:31:35:0A:02:A3:35:43:3C:2A:C7:A6:F4:C1:06:65:66:A6:8A
Certificate issuer:       /CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
Certificate serial:       4A3740C5BC4D2BA0E197B5AE5F93E4DBC2220DB5
Authority key identifier: F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa
Signing time:             Mon 01 Jul 2024 01:04:55 +0000
ROA not before:           Mon 01 Jul 2024 00:59:55 +0000
ROA not after:            Mon 30 Jun 2025 01:04:55 +0000
asID:                     45295
IP address blocks:        103.151.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl
                          rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:40:c5:bc:4d:2b:a0:e1:97:b5:ae:5f:93:e4:db:c2:22:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F30F14F4AEB6630FF4E270B0729358AEBFA97733
        Validity
            Not Before: Jul  1 00:59:55 2024 GMT
            Not After : Jun 30 01:04:55 2025 GMT
        Subject: CN=F5C631350A02A335433C2AC7A6F4C1066566A68A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:27:bf:8f:79:c3:07:04:9c:a8:d6:c6:44:
                    4d:86:56:1b:68:93:9a:3a:43:3a:4d:1c:d5:b8:11:
                    f4:4a:28:a8:f4:9c:61:d9:c7:94:b6:01:15:14:8f:
                    6e:c0:37:e5:68:f6:07:a6:5f:fb:6d:67:98:69:05:
                    8b:aa:4d:4f:be:7b:cc:a2:3c:17:73:a9:41:04:e1:
                    16:9f:c2:cf:7b:d2:d8:42:5d:5d:09:23:0f:eb:f6:
                    ed:20:3c:65:f1:7e:c1:ce:b3:2a:68:80:d8:e2:05:
                    c0:b7:fd:ab:f3:76:99:e9:2c:e7:f0:c5:78:01:a8:
                    b7:40:51:46:0c:d3:b8:92:2f:73:1b:39:39:3b:cd:
                    9b:cc:c3:7f:bf:57:d8:7d:ef:18:43:e4:ad:b4:c1:
                    db:9c:ec:b7:1b:13:c3:51:96:9c:bf:5e:30:42:5c:
                    4b:b3:c4:23:a9:28:75:c4:6f:5e:95:63:f8:ad:4c:
                    28:82:de:80:d7:88:18:5a:9d:2f:26:ea:bc:6d:41:
                    1d:0c:f5:b7:de:4e:88:b6:5a:b1:37:f0:0d:dc:6b:
                    9c:72:b1:35:ad:a8:49:7a:7d:c4:dd:08:0f:b4:8b:
                    9f:5a:58:61:65:34:9f:22:87:0d:3a:98:28:91:f3:
                    c8:5e:f2:be:e3:d6:8e:48:76:ca:54:7c:b8:71:51:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C6:31:35:0A:02:A3:35:43:3C:2A:C7:A6:F4:C1:06:65:66:A6:8A
            X509v3 Authority Key Identifier:
                keyid:F3:0F:14:F4:AE:B6:63:0F:F4:E2:70:B0:72:93:58:AE:BF:A9:77:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/F30F14F4AEB6630FF4E270B0729358AEBFA97733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F30F14F4AEB6630FF4E270B0729358AEBFA97733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f48a89-90c5-4f5a-8015-36f1196a71c8/0/3130332e3135312e39322e302f32332d3234203d3e203435323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:88:37:33:00:4e:7e:ad:2e:a3:8e:73:75:5b:8d:74:4c:34:
         49:62:f6:78:51:aa:d5:c5:6f:8c:4a:1a:0b:e0:04:a0:61:5d:
         dc:02:4d:27:b9:06:b6:cf:a1:ee:be:9c:cb:cf:45:ba:27:07:
         c3:35:01:49:60:5a:6d:87:25:f9:18:c6:43:3f:4c:df:46:13:
         97:de:0c:8e:2f:52:22:39:1d:af:b3:bb:04:96:44:3f:4e:49:
         bd:03:37:5d:0d:4d:16:be:f1:49:76:0b:1a:00:88:27:35:0e:
         61:14:4c:59:fd:82:62:a9:73:c9:88:00:64:aa:1c:55:9a:6a:
         78:49:34:7a:09:8b:a1:c9:71:5f:0e:71:f3:42:f2:8e:bc:d0:
         15:9f:44:6a:ea:f3:12:6a:56:68:90:63:61:f6:6e:09:0e:a5:
         b7:61:07:b0:b0:85:26:bb:78:74:43:ac:a1:4a:71:7a:bf:2d:
         5b:13:1d:36:f3:90:84:e7:65:0c:8a:e7:aa:f6:4f:b3:3a:6c:
         ab:75:f4:c8:8b:e0:ca:a9:02:28:e8:56:37:a8:62:c8:3b:fc:
         72:d3:0a:6c:55:ba:ad:91:2e:91:36:f5:fb:de:ca:66:1c:c4:
         6a:d5:f2:df:cb:d1:c1:60:08:48:38:c6:5f:54:42:97:65:89:
         76:82:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org