Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35372e302f32342d3234203d3e203438343635.roa
File:                     3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          qxcWc4qD+3ccJIfeVzJ32RA5fRp0E0sMsxodgShxi+o=
Subject key identifier:   67:1B:E7:3F:34:7D:D2:14:35:18:76:2D:40:AC:61:11:93:7A:3C:EC
Certificate issuer:       /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Certificate serial:       71A925013476F173FBE515982A7305A3E08D9510
Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35372e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:54:56 +0000
ROA not before:           Mon 15 Jul 2024 02:49:56 +0000
ROA not after:            Mon 14 Jul 2025 02:54:56 +0000
asID:                     48465
IP address blocks:        103.183.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl
                          rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a9:25:01:34:76:f1:73:fb:e5:15:98:2a:73:05:a3:e0:8d:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
        Validity
            Not Before: Jul 15 02:49:56 2024 GMT
            Not After : Jul 14 02:54:56 2025 GMT
        Subject: CN=671BE73F347DD2143518762D40AC6111937A3CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:08:0c:37:67:24:b4:39:7b:7d:c6:3d:be:48:
                    b3:67:84:98:bb:0c:fa:04:4e:2f:0e:17:3c:61:b0:
                    e5:fe:f3:0a:f5:89:07:7e:e0:17:a7:85:bd:a8:7a:
                    aa:cb:5f:24:6b:18:f1:7e:e3:87:fb:a1:5b:ff:93:
                    ad:8f:8a:cc:ca:0f:60:b5:f4:4e:81:52:0e:48:9a:
                    87:4f:4c:aa:b0:23:65:30:64:03:29:af:c6:f6:85:
                    40:b5:f9:e6:53:fe:25:d1:5d:20:58:23:02:12:59:
                    0f:c3:a9:37:13:a9:d7:01:c5:46:74:ab:5a:27:66:
                    18:71:6d:83:87:ba:c0:08:b4:ea:86:6b:64:d4:1a:
                    00:ec:be:53:9c:90:49:15:e4:0c:4f:05:a8:00:9e:
                    82:d6:44:e8:d5:99:5a:df:06:b2:84:bc:fb:d6:43:
                    de:14:18:e8:b1:a5:31:e6:a9:80:69:0f:39:f7:4d:
                    45:20:27:a6:7f:4b:99:03:36:29:e1:5d:61:e8:23:
                    57:f9:18:26:42:7d:07:75:88:db:43:30:0e:54:5e:
                    af:b7:19:c4:91:6d:8c:00:fa:1c:1d:e3:27:bc:93:
                    70:57:64:40:73:8b:23:31:b6:1c:c4:7c:bf:23:6c:
                    2b:74:03:51:ac:d0:95:0c:a8:ba:08:38:26:f7:4b:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:E7:3F:34:7D:D2:14:35:18:76:2D:40:AC:61:11:93:7A:3C:EC
            X509v3 Authority Key Identifier:
                keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35372e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:8c:e8:02:89:c9:50:3b:a2:88:a4:da:07:41:10:47:5e:
         61:65:86:39:f1:e3:23:5c:53:27:d7:9a:56:cf:b4:54:54:ba:
         bb:a8:dc:54:c5:f1:78:d4:ea:56:2f:00:a9:7e:20:90:73:71:
         25:27:44:9d:31:f9:21:dc:85:77:19:8c:46:49:b7:4b:33:26:
         49:75:f0:b3:25:4b:3b:ab:e9:fa:2d:2e:35:50:e6:72:4b:fa:
         11:c7:9d:e7:b6:ed:fe:2c:f2:31:6f:de:e7:b6:b7:44:64:d5:
         72:ab:2e:bf:49:6d:2a:ce:67:e5:d6:10:9d:0b:29:65:a7:55:
         72:d3:0e:35:39:17:60:89:ce:de:11:b6:f3:aa:b9:3c:c6:e8:
         5f:da:df:c1:a1:00:52:6a:66:5a:41:f7:d6:fb:78:8f:ae:be:
         4f:d6:82:64:a8:bb:06:58:85:64:63:4c:0e:21:42:00:58:e7:
         53:12:4a:39:82:ee:4f:14:08:c9:2d:63:f9:fc:89:fd:2f:9a:
         8f:85:e0:87:f4:25:40:25:68:a4:b5:0a:98:1d:ab:c4:02:08:
         e5:99:5e:24:d6:db:4c:fe:0a:9d:e7:bb:a2:e2:b1:b8:fe:22:
         a9:68:40:ab:1c:41:e7:5c:7c:46:4f:df:09:5b:59:94:c2:ee:
         e9:3d:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org