Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa
File:                     3130332e3231302e332e302f32342d3234203d3e20313530393935.roa (raw, json)
Hash identifier:          7jJX4tA0NHHCSnCkhJQuXs74UXPq++JdHUV1H/oU7A0=
Subject key identifier:   D2:CC:60:61:62:F4:5D:1B:05:6D:5C:C0:B9:CA:04:3E:AE:A9:97:C6
Certificate issuer:       /CN=C619643EEB518333DAE2A79933BEB1320C89CA87
Certificate serial:       0E0BA96A0E06E1CDECC92037A188DE31B9EE10FB
Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa
Signing time:             Tue 22 Oct 2024 17:49:00 +0000
ROA not before:           Tue 22 Oct 2024 17:44:00 +0000
ROA not after:            Tue 21 Oct 2025 17:49:00 +0000
asID:                     150995
IP address blocks:        103.210.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl
                          rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:a9:6a:0e:06:e1:cd:ec:c9:20:37:a1:88:de:31:b9:ee:10:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87
        Validity
            Not Before: Oct 22 17:44:00 2024 GMT
            Not After : Oct 21 17:49:00 2025 GMT
        Subject: CN=D2CC606162F45D1B056D5CC0B9CA043EAEA997C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:49:64:16:10:43:3c:fa:cf:ba:6f:1b:5b:
                    83:83:68:1b:57:24:21:98:06:94:34:94:90:3a:55:
                    88:f0:e2:ee:fa:e3:f8:e0:19:a3:b6:10:ff:0b:5b:
                    4e:6f:1d:d5:fd:59:d0:e4:04:e9:9e:2d:85:c7:65:
                    bb:87:de:41:0a:04:6c:2e:8c:51:c5:63:19:01:16:
                    be:77:18:84:bb:57:24:82:1d:20:95:8d:eb:92:a9:
                    73:68:e4:fe:f0:3c:61:67:ab:ac:7a:7b:06:61:af:
                    95:08:78:3e:e8:6f:82:c2:a3:74:f4:47:88:42:7a:
                    e7:89:81:82:96:3b:c5:1e:d8:9b:79:0e:3d:48:f5:
                    b0:db:1f:ff:43:b6:d1:5e:9b:45:e6:de:75:5d:78:
                    51:d8:32:fb:93:d1:c3:87:85:5c:d4:94:e4:07:2e:
                    82:37:b9:9d:87:7e:8b:bf:0c:b0:5f:93:81:36:e7:
                    a8:ca:f2:19:f4:1d:ad:6a:73:5e:cf:41:33:7e:72:
                    db:fd:6a:85:21:73:a5:14:f2:66:04:7d:e7:c2:3b:
                    32:28:ac:f6:1b:d6:0d:90:57:fb:71:72:ce:e0:02:
                    3a:1a:43:d8:2f:6f:2c:97:3a:20:25:e2:01:0a:b9:
                    82:c3:f4:92:b9:ff:9b:49:fd:cc:5d:49:db:b8:a4:
                    49:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CC:60:61:62:F4:5D:1B:05:6D:5C:C0:B9:CA:04:3E:AE:A9:97:C6
            X509v3 Authority Key Identifier:
                keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e332e302f32342d3234203d3e20313530393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:9e:b5:0b:f5:20:e0:9b:b2:fd:5e:fd:c1:e3:a7:4b:3d:
         26:0f:0e:89:2c:3a:61:73:bf:98:24:0a:ed:3b:01:c0:67:b6:
         49:26:5c:95:03:c0:f6:25:62:c2:18:1d:f7:99:6f:86:e1:5a:
         f2:52:50:cd:9c:cf:33:70:59:79:b8:07:94:b6:fa:b8:a7:74:
         98:91:62:59:23:b4:cb:03:0a:c7:57:5c:e5:f5:83:81:77:f2:
         82:3b:9b:9a:0d:13:0c:2c:9b:8c:c9:b4:3a:61:0c:59:44:ed:
         f1:ae:fb:e9:07:44:3f:57:00:5d:af:5b:a2:4c:44:b1:69:e7:
         b0:d6:dd:92:07:4d:bb:c4:23:65:37:f5:d7:70:49:c5:b9:12:
         c4:65:be:6d:87:a3:52:86:3a:32:57:09:45:34:e5:dc:ca:cb:
         9c:69:34:f9:e7:b2:fe:85:40:10:22:3f:ba:54:2d:6b:eb:87:
         b3:08:1e:2f:a4:a5:6b:62:bb:75:d0:9b:7b:1d:04:04:24:1d:
         a9:d2:04:0e:42:bb:81:9f:09:15:2b:1e:e1:53:f8:68:6b:8c:
         8d:64:32:6b:2a:06:4c:90:92:80:ee:91:a7:84:97:cd:bd:b0:
         ea:90:02:9f:1a:8c:78:57:72:af:05:0f:fd:05:ce:d2:ad:5d:
         8d:13:80:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org