Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
File:                     3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          /JeoOta567ZO0GGrF+ormqwjex2nNzbf854eqjfQsIA=
Subject key identifier:   25:1F:AB:17:A8:FE:67:12:BF:5A:35:35:3A:6A:73:8E:03:3F:43:07
Certificate issuer:       /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Certificate serial:       6333C65DBC0100D1ED5DB0A502FA1E26FC02011E
Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa
Signing time:             Mon 04 Mar 2024 04:00:00 +0000
ROA not before:           Mon 04 Mar 2024 03:55:00 +0000
ROA not after:            Mon 03 Mar 2025 04:00:00 +0000
asID:                     58824
IP address blocks:        103.242.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
                          rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 00:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:33:c6:5d:bc:01:00:d1:ed:5d:b0:a5:02:fa:1e:26:fc:02:01:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
        Validity
            Not Before: Mar  4 03:55:00 2024 GMT
            Not After : Mar  3 04:00:00 2025 GMT
        Subject: CN=251FAB17A8FE6712BF5A35353A6A738E033F4307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:1c:3e:fd:98:8f:de:99:ce:bb:6b:67:f1:
                    b6:01:4d:17:31:bd:0b:ac:d0:c8:d4:61:3b:de:f3:
                    ca:4f:1e:e1:04:b8:86:1e:b3:5c:ca:6a:8c:a9:0f:
                    b8:e2:b5:73:c6:b6:c5:4a:c5:6b:f3:ff:b6:9b:d4:
                    65:83:10:05:0c:65:df:38:de:da:3c:6d:19:6c:7e:
                    c0:78:78:01:cb:3c:2c:04:45:88:98:c4:2a:ec:6d:
                    4e:6c:b6:84:70:9a:cc:2b:ac:b6:91:0d:13:77:e2:
                    61:be:0f:dc:18:1a:5b:fd:18:4c:4a:53:ae:b5:2e:
                    e7:d8:cf:d4:80:42:12:b3:97:5d:fd:e4:b1:be:36:
                    17:67:2b:d0:cc:cc:1e:9c:e7:ed:f3:6c:e9:c7:c4:
                    f2:7a:7e:1c:dd:c4:b9:57:f9:ec:13:90:12:ea:09:
                    e5:6e:36:f9:2b:ea:1f:00:cd:82:d0:f0:ce:04:32:
                    22:ff:23:39:a6:c6:35:a3:05:06:62:ec:a7:4a:48:
                    0b:24:5d:34:bf:59:88:97:10:33:8f:da:b2:3e:a6:
                    30:be:7b:dc:07:a0:c0:9b:94:0d:75:6d:b8:5e:02:
                    06:60:e3:92:51:29:17:68:68:9c:00:77:9a:7d:6b:
                    31:f6:b6:57:b7:e3:13:e8:e7:c6:32:e0:cf:e7:00:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1F:AB:17:A8:FE:67:12:BF:5A:35:35:3A:6A:73:8E:03:3F:43:07
            X509v3 Authority Key Identifier:
                keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e3234322e3233332e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fd:20:b9:38:05:92:e1:fc:e4:80:7e:c8:83:ac:f3:b5:b5:
         b8:c1:e5:f6:55:f9:d5:cb:de:08:38:fc:f3:16:54:b3:b3:00:
         73:36:72:94:c7:b7:dd:e4:e8:bd:fe:71:e2:53:bf:a5:64:2f:
         cb:87:ed:23:35:50:e0:de:73:57:e0:13:e7:ff:75:9b:49:a7:
         8b:8c:33:41:63:09:bd:a7:99:56:20:b8:62:b3:5d:84:02:d1:
         3b:c6:f4:a1:6f:5e:9b:4c:af:93:08:e0:19:26:99:6e:81:fb:
         87:32:ec:8d:44:8d:48:29:9f:85:9d:32:4e:7b:6f:7d:75:f1:
         26:3b:d7:1b:75:87:44:15:e4:1b:6b:3f:c0:51:bc:eb:f3:93:
         72:a4:fa:ef:7f:96:0c:4f:3c:ce:2a:ca:f7:42:d3:f0:14:b7:
         41:6b:77:c3:69:08:55:a0:66:03:8d:51:c8:3b:d3:d1:65:dd:
         0a:f1:ba:c2:bd:f2:22:b6:f6:d2:82:92:a0:3c:22:b2:de:38:
         65:b1:b5:7d:ad:7b:96:47:fc:80:65:8d:41:df:1b:7d:15:a3:
         31:b5:66:9b:2e:8d:a1:eb:43:60:3b:4c:30:7c:4d:5e:7c:76:
         1a:e8:00:fa:7f:a5:73:38:50:52:54:47:9e:00:61:ab:e3:5b:
         b9:68:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org