Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
File:                     3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (raw, json)
Hash identifier:          gXpw3eMfP23k+p6oBBXbOqeLLS2Q//wVOEcghT/NEFU=
Subject key identifier:   E8:81:B5:6B:45:0B:D5:EB:7A:61:1D:E4:D1:3F:21:E3:FA:5C:C0:7F
Certificate issuer:       /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
Certificate serial:       24DC8F237DBE223BC61B494A7EB6D91927AF6517
Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
Signing time:             Mon 31 Jul 2023 00:05:43 +0000
ROA not before:           Mon 31 Jul 2023 00:00:43 +0000
ROA not after:            Mon 29 Jul 2024 00:05:43 +0000
asID:                     133819
IP address blocks:        103.51.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl
                          rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 03:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:8f:23:7d:be:22:3b:c6:1b:49:4a:7e:b6:d9:19:27:af:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
        Validity
            Not Before: Jul 31 00:00:43 2023 GMT
            Not After : Jul 29 00:05:43 2024 GMT
        Subject: CN=E881B56B450BD5EB7A611DE4D13F21E3FA5CC07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d0:26:7a:d7:ba:df:87:5b:2e:e0:e9:9c:42:
                    70:c2:e1:6e:56:06:f8:af:80:76:d8:76:5a:64:d1:
                    9b:b0:36:36:b0:98:bf:63:76:a9:34:1b:e4:0c:91:
                    1f:bb:5d:ad:97:a9:fb:1e:bd:01:66:e6:1d:b2:5e:
                    34:fe:2e:ee:4b:85:43:4d:3d:27:62:fe:46:c9:25:
                    c2:7c:0e:79:e4:3b:3e:18:c8:28:3f:23:74:db:df:
                    f0:fc:0d:46:ae:53:68:7c:83:10:5f:94:69:74:ce:
                    d9:13:93:44:1a:df:57:a8:18:9c:71:1f:ba:12:59:
                    ad:ba:1f:b4:ec:f6:d3:d9:a4:89:11:73:44:5e:42:
                    c8:d9:ea:3a:4e:4b:39:c7:65:8f:c8:04:d2:d1:41:
                    2f:8b:dd:1d:a8:df:76:20:36:4c:08:2c:bd:3a:7d:
                    04:43:bd:65:13:9e:51:58:7c:a4:cb:db:68:e4:10:
                    bc:7f:ef:3e:82:dd:e5:72:bb:7c:eb:ef:00:7b:e4:
                    fa:b0:c5:ab:9f:76:b6:d3:1d:db:64:63:01:9b:57:
                    dd:0e:f6:7b:a9:55:5a:4c:b7:5f:4e:3d:d1:6d:3d:
                    c9:87:fc:1b:87:e9:e1:d4:b3:05:b4:ee:ec:b1:07:
                    4d:b9:27:21:34:f2:a6:6b:a2:ec:40:4c:8a:3a:16:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:81:B5:6B:45:0B:D5:EB:7A:61:1D:E4:D1:3F:21:E3:FA:5C:C0:7F
            X509v3 Authority Key Identifier:
                keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:0e:1c:e5:ac:4f:84:2c:c8:b1:c0:97:40:d7:21:7f:42:
         0b:19:dc:e3:90:5f:be:68:69:6f:ad:40:6e:69:c9:39:56:a0:
         7c:ec:b2:e5:94:8c:1c:d6:d8:f1:52:2d:aa:f1:4c:16:34:8d:
         2a:b3:22:f0:6e:8a:74:40:94:fa:56:26:7c:23:67:d7:dc:9e:
         af:d6:b2:a6:b4:87:df:4a:0e:4e:10:2a:38:c8:16:e5:b2:fa:
         f6:2d:6c:ae:75:6b:fa:97:ea:52:60:31:ba:b1:ec:e4:d9:6c:
         e3:fb:3d:f3:23:16:e1:c6:18:73:b2:c3:9e:8d:e5:a8:3a:b1:
         e4:72:b6:80:19:2f:11:ef:f0:67:cd:65:46:69:cd:22:e1:eb:
         e8:67:a4:b3:76:2b:e4:4d:8d:fa:fd:e1:9b:c6:a5:fd:ef:9d:
         2d:6e:50:7b:f3:aa:e6:20:bc:08:ba:8f:b2:f7:07:90:c1:a0:
         7a:a8:90:25:f4:4e:34:28:6d:0a:a8:03:92:31:be:cd:70:24:
         bc:7c:55:15:40:48:dc:c7:3d:32:2a:8e:3c:13:1b:6c:bd:51:
         75:36:40:f1:1d:fe:85:11:0f:2d:44:c0:73:80:ca:e8:62:27:
         4e:29:a7:12:ab:a1:0e:7d:41:c4:8c:87:29:17:15:31:58:bc:
         76:0c:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:12:12 2024 by rpki-client on console-ams.rpki-client.org