Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
File:                     3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (raw, json)
Hash identifier:          gG6xwUIirhjcvpy+zNGtsuV0x13ESyxtHXf6I5v+w2I=
Subject key identifier:   11:4B:E9:EA:5A:EF:37:49:7A:A8:A3:77:C9:0D:95:65:C2:B3:A5:0E
Certificate issuer:       /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial:       37A55EBE6EFEE613965B9A12D742C88085BCCCDA
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
Signing time:             Mon 31 Jul 2023 00:09:30 +0000
ROA not before:           Mon 31 Jul 2023 00:04:30 +0000
ROA not after:            Mon 29 Jul 2024 00:09:30 +0000
asID:                     58394
IP address blocks:        103.51.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
                          rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a5:5e:be:6e:fe:e6:13:96:5b:9a:12:d7:42:c8:80:85:bc:cc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
        Validity
            Not Before: Jul 31 00:04:30 2023 GMT
            Not After : Jul 29 00:09:30 2024 GMT
        Subject: CN=114BE9EA5AEF37497AA8A377C90D9565C2B3A50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:17:d4:b7:78:79:84:e5:04:0b:c9:24:08:
                    af:8b:0f:e1:af:be:0a:53:f4:7a:cd:a2:e0:5d:4c:
                    56:b3:d5:28:b1:8a:e0:2b:af:98:ec:fc:fb:a8:e0:
                    b4:89:4f:e7:67:b5:6a:97:cb:fc:9c:71:ea:71:0d:
                    8c:73:ac:88:11:7b:7a:f6:5c:00:55:e9:b1:aa:22:
                    31:c4:5a:ae:02:52:48:8f:06:b4:02:38:28:b5:87:
                    a4:1a:ba:34:46:ea:33:ff:7c:25:e6:62:39:e4:12:
                    30:5c:fe:07:08:bc:0e:87:8a:7e:c3:ea:7b:8e:0d:
                    0c:09:fd:cd:5e:c9:a0:33:8e:4c:e9:ba:cc:07:23:
                    64:89:0a:85:27:98:ab:59:9f:9a:0f:93:5d:f8:7e:
                    c3:6f:b5:f7:0d:7f:66:19:8e:f0:fc:e4:67:25:a0:
                    21:99:43:01:5e:3a:1f:11:cc:71:62:0e:5e:51:6d:
                    ed:e5:44:5c:8e:a0:53:a8:a4:b6:8c:3c:fe:69:94:
                    73:32:83:d4:27:2f:1b:5d:6b:f2:d3:69:28:40:5b:
                    e4:e0:fc:e6:a4:92:f4:48:b9:80:ce:f0:c3:fd:05:
                    9b:f0:82:db:bc:2d:9d:d9:e5:7d:33:8b:24:60:36:
                    36:43:6a:38:47:df:9c:ea:70:e3:be:4e:99:4d:23:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4B:E9:EA:5A:EF:37:49:7A:A8:A3:77:C9:0D:95:65:C2:B3:A5:0E
            X509v3 Authority Key Identifier:
                keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:71:83:60:d4:6c:62:1f:89:47:0c:85:4a:28:6f:01:04:b8:
         20:a8:b8:c4:55:e8:4c:8d:0b:b3:d7:24:31:47:5b:24:29:91:
         85:69:fd:67:f9:db:4c:00:f1:d7:fc:96:4f:0f:fa:a1:69:06:
         33:41:2f:ef:df:58:98:a9:49:a0:db:ee:ca:ce:d6:97:07:83:
         ec:18:45:1c:ef:53:01:9f:bd:8a:ec:3f:be:78:02:1d:98:1d:
         eb:52:b8:6f:a6:b7:7f:e6:72:55:cb:46:ec:94:41:99:b5:48:
         11:86:1e:30:5c:c0:2c:3c:e8:c5:fb:92:3e:0b:04:66:51:0a:
         96:df:8f:47:ee:66:a9:46:d3:e9:90:a7:c9:f1:19:69:d2:46:
         72:a4:8d:e7:7a:29:a7:a6:0a:ff:82:0a:d9:0d:f8:80:61:86:
         8c:a5:7f:cc:99:e8:f5:f0:4c:dd:ad:89:6d:f7:4f:a9:9c:c8:
         4e:39:fc:8a:82:6d:20:02:9a:02:29:62:53:b1:3a:dc:b5:d4:
         57:36:2a:be:f0:46:c5:08:a9:c4:f6:1a:95:e0:2e:57:e1:8e:
         7f:f2:66:8a:92:b4:66:84:f1:f2:8c:61:6f:fe:c1:e5:1c:89:
         93:dd:b5:2a:86:27:9e:b2:0a:f7:2b:28:a4:5d:9b:df:89:a2:
         7f:ff:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 21:55:35 2024 by rpki-client on console-ams.rpki-client.org