Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa
File:                     3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa (raw, json)
Hash identifier:          bCs7/JkneuoyM56q6BBX6m3nEz/bBKjFeBO9FImCfxg=
Subject key identifier:   CE:41:FA:00:71:05:A8:7F:CD:A8:53:F2:85:D3:3D:1F:D1:67:88:78
Certificate issuer:       /CN=F1F25C19AB419E370912452242B8B55038581157
Certificate serial:       3CDB033A1EAD408DD430CC2FDAD67A94F7B1FD8A
Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa
Signing time:             Fri 12 Apr 2024 06:00:00 +0000
ROA not before:           Fri 12 Apr 2024 05:55:00 +0000
ROA not after:            Fri 11 Apr 2025 06:00:00 +0000
asID:                     150483
IP address blocks:        103.54.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
                          rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:db:03:3a:1e:ad:40:8d:d4:30:cc:2f:da:d6:7a:94:f7:b1:fd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F25C19AB419E370912452242B8B55038581157
        Validity
            Not Before: Apr 12 05:55:00 2024 GMT
            Not After : Apr 11 06:00:00 2025 GMT
        Subject: CN=CE41FA007105A87FCDA853F285D33D1FD1678878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:68:47:bc:4b:5f:50:39:d5:6b:2d:59:a3:
                    c0:8d:a0:5c:91:3c:47:6d:48:98:43:af:be:06:55:
                    84:c6:04:f0:ac:d7:7d:10:61:0d:c7:27:13:33:1d:
                    b7:53:19:03:95:16:73:c2:33:6d:0c:c2:f9:67:b5:
                    92:25:bb:fe:d6:52:0e:40:61:72:91:38:cc:33:ac:
                    60:bd:0c:34:d8:da:a3:94:9c:a9:ad:4c:5f:d7:6b:
                    3c:64:a5:d9:d1:a8:50:b7:15:14:9e:80:d2:d3:d2:
                    18:9c:fe:25:33:f4:cc:d9:c8:b8:55:6d:fe:59:40:
                    32:db:d4:53:48:f6:3f:98:25:db:c7:af:e0:a5:d0:
                    79:62:6d:9a:e5:10:97:9c:6f:74:86:30:41:36:5e:
                    54:3f:f8:3e:40:e1:4f:1d:89:8c:c1:18:d8:43:4d:
                    70:33:ef:83:df:ee:01:3e:16:ed:0f:ef:c4:8b:ef:
                    14:0d:7b:d9:45:d6:d8:ae:10:c2:ea:36:b3:6b:fe:
                    13:fb:ab:92:92:93:be:df:36:99:fc:84:ca:d8:d7:
                    44:c4:53:44:39:af:7e:81:b8:b2:b2:e7:33:3d:b7:
                    1b:d6:f0:b8:98:1d:ee:65:09:77:c1:0b:c0:a3:45:
                    a5:97:b9:bd:8e:2f:85:8b:ec:52:bc:93:6a:2b:cd:
                    9a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:41:FA:00:71:05:A8:7F:CD:A8:53:F2:85:D3:3D:1F:D1:67:88:78
            X509v3 Authority Key Identifier:
                keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136392e302f32342d3234203d3e20313530343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e3:54:ca:e3:4a:b6:71:ac:8c:e0:08:c6:f3:2c:bc:f2:cc:
         f3:29:af:65:6e:61:d7:89:1f:5b:f2:b9:a0:c0:4c:e7:0c:34:
         c1:6a:0e:51:d8:c1:58:87:a3:20:4a:4e:6f:8a:89:9a:a5:28:
         63:2c:ba:40:15:3b:5d:ea:e1:2b:94:3a:38:41:c8:b1:bc:8c:
         f4:4a:bc:75:51:72:9e:14:a0:f4:98:45:6c:6d:d5:80:96:b2:
         56:af:34:62:85:7c:be:2b:32:f4:42:0e:88:82:86:f5:b6:5d:
         be:96:93:47:51:f8:66:af:f5:9d:3f:02:c8:88:f7:c1:c2:bb:
         b8:fe:f6:74:7b:d7:6b:0d:6f:a3:4a:57:d9:c1:df:f5:df:7a:
         a7:5a:b2:87:b9:2e:56:38:fc:18:6b:e5:98:3c:86:dc:56:9b:
         cd:e8:18:12:c8:19:b4:ce:9a:71:c2:74:0e:29:a8:55:f2:30:
         59:e9:ca:2f:4b:6b:24:43:f5:ef:66:35:bc:a6:aa:a6:b3:15:
         fe:28:b3:fa:34:99:4f:ba:89:f9:e0:72:df:93:83:be:7b:29:
         04:fe:e1:d1:7e:71:64:d4:85:0e:1a:9c:27:9b:72:50:82:fe:
         ea:41:83:29:e9:4c:cf:de:a7:3a:40:45:7d:2a:6a:b3:8d:ae:
         6e:77:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org