Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
File:                     3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (raw, json)
Hash identifier:          jcDKty5xLhUXsXPBWl/d9k6sQ156XcHQJTcq45jAOJE=
Subject key identifier:   6A:65:01:52:18:E8:4D:3A:4D:E0:79:67:19:B2:80:87:97:C8:E2:4F
Certificate issuer:       /CN=77629696624E40462330DA2AF610D32809C89E5A
Certificate serial:       7B6370483F8F351888C859FF962400BE20C5469A
Authority key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa
Signing time:             Mon 01 Jul 2024 01:05:26 +0000
ROA not before:           Mon 01 Jul 2024 01:00:26 +0000
ROA not after:            Mon 30 Jun 2025 01:05:26 +0000
asID:                     58394
IP address blocks:        103.51.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl
                          rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:63:70:48:3f:8f:35:18:88:c8:59:ff:96:24:00:be:20:c5:46:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77629696624E40462330DA2AF610D32809C89E5A
        Validity
            Not Before: Jul  1 01:00:26 2024 GMT
            Not After : Jun 30 01:05:26 2025 GMT
        Subject: CN=6A65015218E84D3A4DE0796719B2808797C8E24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:5b:59:f8:f7:ac:0a:b2:25:cb:3b:a2:8c:
                    c3:b5:47:b8:15:7f:8b:92:59:2c:9e:e5:68:07:20:
                    ec:99:90:72:dc:a1:a6:e3:3c:31:74:0d:04:75:90:
                    5f:9a:38:5d:56:30:65:1f:48:13:27:57:6c:d2:9c:
                    da:bb:db:0d:21:0e:51:bb:75:7a:d7:9f:01:1f:a1:
                    82:9a:b8:95:bc:46:0e:8a:02:73:03:39:99:a5:cb:
                    ef:f2:da:67:9a:c5:cd:e4:ec:ca:8f:42:37:88:6d:
                    ad:37:cc:93:21:6c:7f:a9:31:bd:ff:00:36:29:2e:
                    5d:49:9d:62:3f:86:2c:b5:84:9d:50:7e:87:d2:eb:
                    b0:7f:ba:a8:c4:1b:cb:a6:91:6f:b7:89:83:59:2e:
                    d9:27:62:18:8c:32:1e:4f:de:9b:6c:d4:f5:66:5e:
                    b8:f0:41:f5:66:0a:2d:67:52:4e:fe:5b:0b:97:1c:
                    31:51:fb:6d:80:39:a6:b8:7a:07:31:34:f2:96:00:
                    0e:9d:2c:86:22:ba:64:c5:cf:76:61:ea:64:42:56:
                    40:a5:5e:bb:85:50:97:58:b0:d1:8f:b2:3b:bb:5b:
                    a0:ed:19:f0:cc:72:38:af:ae:76:57:7e:09:97:74:
                    d9:ef:57:c7:cd:b5:a2:22:84:06:25:00:99:0a:5e:
                    68:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:65:01:52:18:E8:4D:3A:4D:E0:79:67:19:B2:80:87:97:C8:E2:4F
            X509v3 Authority Key Identifier:
                keyid:77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/3130332e35312e3135382e302f32342d3234203d3e203538333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:25:8a:4a:27:fe:4b:1c:cb:e4:aa:b2:a0:0b:dd:1d:80:
         15:8e:e5:93:87:52:29:a9:81:c9:2b:b7:7f:d4:58:7c:a9:b8:
         13:b4:ac:ae:ce:40:c0:40:a4:72:d5:a2:16:ce:e7:cd:c2:c0:
         8c:a8:0e:ea:8c:29:36:fe:2c:34:5c:da:8d:22:30:b5:ee:85:
         cf:01:8c:d7:51:32:8c:3f:c7:59:a8:0b:08:c7:f8:f7:77:1f:
         45:41:86:a3:4b:32:3f:05:26:11:74:46:e4:64:1d:69:32:71:
         93:40:a2:c8:58:fc:e9:72:6e:8d:67:05:a0:2b:60:7d:78:79:
         61:62:40:ef:91:c4:f2:c0:5b:78:c7:20:f5:11:73:cf:fe:af:
         d6:e0:a8:bb:15:84:be:e8:f4:f0:0e:41:c8:f0:7f:d5:ba:05:
         69:60:63:e0:b8:df:9e:11:cd:e0:15:11:42:e7:bd:37:a3:4e:
         b3:28:be:20:19:a3:66:8c:75:3f:cc:d1:c4:90:d1:c4:a3:2b:
         83:a8:65:e8:60:7d:25:89:3a:21:32:26:cc:bf:31:33:b3:99:
         11:fe:08:b7:48:48:14:8e:05:47:df:5b:9a:33:19:aa:21:a4:
         aa:7c:66:15:7f:3e:62:17:93:0d:77:5b:df:ff:16:43:4a:83:
         24:17:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org