Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
File:                     3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          EC0Efo54E5WYzeAEpQZtHnp/WuQUB99ooIMAM+4LN1s=
Subject key identifier:   75:B4:8C:54:55:CD:42:23:E3:B3:F7:E0:81:B0:35:43:E8:C6:13:21
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       6B95254C6338DA51B961C5D142945BC1580FF4EB
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 01 Jul 2024 01:03:47 +0000
ROA not before:           Mon 01 Jul 2024 00:58:47 +0000
ROA not after:            Mon 30 Jun 2025 01:03:47 +0000
asID:                     131775
IP address blocks:        103.251.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:95:25:4c:63:38:da:51:b9:61:c5:d1:42:94:5b:c1:58:0f:f4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul  1 00:58:47 2024 GMT
            Not After : Jun 30 01:03:47 2025 GMT
        Subject: CN=75B48C5455CD4223E3B3F7E081B03543E8C61321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:3b:b7:3d:3a:79:d1:9d:5c:ec:de:2c:e7:
                    5f:be:e6:c6:0f:a1:f9:bc:44:12:5f:67:a3:bf:bc:
                    73:9a:c4:30:5c:76:9b:44:27:ea:f9:da:01:26:39:
                    91:d6:b2:59:53:0d:46:e5:0a:07:6d:e0:f5:25:8d:
                    8d:b3:77:5c:d8:e2:fd:a6:c7:cb:83:76:ef:ac:7f:
                    56:00:86:0e:a2:24:8e:1c:aa:12:e3:ab:e9:0e:fa:
                    c6:b1:24:e8:12:f7:77:fe:05:ad:48:7e:72:a2:35:
                    1c:21:0b:9f:74:96:df:bd:e1:16:ac:12:9c:62:41:
                    56:7b:86:b2:cd:cc:ad:44:23:1b:58:28:4e:f9:5e:
                    7d:aa:0c:a6:b0:8e:6d:32:99:8a:27:b1:7f:cc:c7:
                    82:32:48:b0:be:12:fa:f6:6c:4a:b6:17:de:a6:65:
                    eb:e8:63:30:d5:7b:b2:cc:4a:c7:78:a2:d6:5d:83:
                    ea:7d:b3:56:9b:0e:9e:1e:f9:3e:da:49:80:38:09:
                    00:10:6c:5e:99:00:09:cf:67:cf:4e:01:f2:eb:0a:
                    2e:bc:93:a4:50:61:95:ff:4e:95:5b:da:40:f1:08:
                    04:37:6e:ac:33:64:5f:47:98:5c:91:6a:4c:6d:2a:
                    94:c8:4b:d5:99:6d:ed:84:01:67:19:2d:81:73:06:
                    0e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B4:8C:54:55:CD:42:23:E3:B3:F7:E0:81:B0:35:43:E8:C6:13:21
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e3235312e34352e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:91:dc:73:3f:a7:47:c1:ba:77:43:28:01:b6:d8:20:22:c1:
         ab:88:3e:cc:37:ba:d6:3e:c0:48:d6:6e:cf:65:67:90:e8:15:
         3d:6b:39:7a:90:7e:ad:3d:59:df:38:97:22:00:03:1a:d9:e2:
         47:03:96:2c:ec:77:e6:f5:ef:74:f7:6b:16:a6:5e:12:53:69:
         07:46:f3:48:65:4f:3d:4e:b7:48:1e:64:f0:2a:a3:3a:3d:af:
         a2:e8:87:96:e3:ea:9b:62:17:dd:62:38:12:02:4e:8c:83:80:
         fc:44:4c:0e:80:c5:da:d9:00:a3:9c:31:d5:10:4e:1c:55:9e:
         46:c0:84:22:5d:0c:4f:82:2e:d7:95:19:03:9e:c5:46:d7:42:
         e1:17:0b:f3:7b:79:4e:27:ad:d6:82:c7:42:2d:4c:5e:86:85:
         35:36:46:32:90:f5:c8:21:a8:2a:24:55:e4:74:66:c2:7b:ec:
         a8:6a:fa:61:93:46:0e:19:f2:e7:74:38:5c:1f:69:c0:65:86:
         d3:7b:e5:72:6e:14:16:01:d3:92:f6:89:6f:e4:0c:d4:08:96:
         99:f6:c8:ed:9e:9a:af:b6:31:c4:51:e1:15:38:d7:64:bb:a6:
         4a:c9:7d:74:b7:76:90:a9:f1:ad:41:8f:90:3c:47:5d:e5:77:
         ae:30:7f:47
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUa5UlTGM42lG5YcXRQpRbwVgP9OswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE
NzZCNTA1NDAeFw0yNDA3MDEwMDU4NDdaFw0yNTA2MzAwMTAzNDdaMDMxMTAvBgNV
BAMTKDc1QjQ4QzU0NTVDRDQyMjNFM0IzRjdFMDgxQjAzNTQzRThDNjEzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jDu3PTp50Z1c7N4s51++5sYP
ofm8RBJfZ6O/vHOaxDBcdptEJ+r52gEmOZHWsllTDUblCgdt4PUljY2zd1zY4v2m
x8uDdu+sf1YAhg6iJI4cqhLjq+kO+saxJOgS93f+Ba1IfnKiNRwhC590lt+94Ras
EpxiQVZ7hrLNzK1EIxtYKE75Xn2qDKawjm0ymYonsX/Mx4IySLC+Evr2bEq2F96m
ZevoYzDVe7LMSsd4otZdg+p9s1abDp4e+T7aSYA4CQAQbF6ZAAnPZ89OAfLrCi68
k6RQYZX/TpVb2kDxCAQ3bqwzZF9HmFyRakxtKpTIS9WZbe2EAWcZLYFzBg6LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUdbSMVFXNQiPjs/fggbA1Q+jGEyEwHwYDVR0j
BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD
Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC
NTA1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h
ZDcxLTczZDJiMGM5ZDhhOS8wLzMxMzAzMzJlMzIzNTMxMmUzNDM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/stMA0GCSqG
SIb3DQEBCwUAA4IBAQA4kdxzP6dHwbp3QygBttggIsGriD7MN7rWPsBI1m7PZWeQ
6BU9azl6kH6tPVnfOJciAAMa2eJHA5Ys7Hfm9e9092sWpl4SU2kHRvNIZU89TrdI
HmTwKqM6Pa+i6IeW4+qbYhfdYjgSAk6Mg4D8REwOgMXa2QCjnDHVEE4cVZ5GwIQi
XQxPgi7XlRkDnsVG10LhFwvze3lOJ63WgsdCLUxehoU1NkYykPXIIagqJFXkdGbC
e+yoavphk0YOGfLndDhcH2nAZYbTe+VybhQWAdOS9olv5AzUCJaZ9sjtnpqvtjHE
UeEVONdku6ZKyX10t3aQqfGtQY+QPEdd5XeuMH9H
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org