Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa
File:                     3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa (raw, json)
Hash identifier:          19WOcihX3sBNnM0JwVJESitKVCq7qP0/vD2sxBm+0IY=
Subject key identifier:   B5:BB:D4:3D:FD:94:D0:BB:0A:EB:41:3F:71:2A:D5:29:DA:E9:60:1A
Certificate issuer:       /CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
Certificate serial:       51E52CCA41EBE89E5CA235AA758D911803A3BF47
Authority key identifier: B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa
Signing time:             Mon 31 Jul 2023 00:14:28 +0000
ROA not before:           Mon 31 Jul 2023 00:09:28 +0000
ROA not after:            Mon 29 Jul 2024 00:14:28 +0000
asID:                     138059
IP address blocks:        103.121.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl
                          rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 07:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e5:2c:ca:41:eb:e8:9e:5c:a2:35:aa:75:8d:91:18:03:a3:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6847B928C30800282D7BA8E337482DFF4DEC8A5
        Validity
            Not Before: Jul 31 00:09:28 2023 GMT
            Not After : Jul 29 00:14:28 2024 GMT
        Subject: CN=B5BBD43DFD94D0BB0AEB413F712AD529DAE9601A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:55:a7:c6:a7:25:c5:59:da:8d:fb:f1:2c:
                    0d:02:90:74:c5:30:74:d6:10:ef:36:05:bc:21:d5:
                    22:78:8f:fe:84:d3:62:99:89:63:d1:25:b3:ba:9d:
                    c1:0f:4c:e0:e5:4a:e0:14:ca:57:23:e0:21:18:29:
                    02:42:f6:ba:7b:ce:98:f4:69:07:de:c2:ab:96:57:
                    d9:d7:be:99:30:67:62:65:6c:10:23:1c:33:87:e4:
                    a8:39:a1:28:79:dc:65:05:b5:f4:82:ed:3f:55:a6:
                    26:59:8f:a4:13:8b:5c:1f:a4:7c:40:df:24:d6:11:
                    12:6b:6a:00:b7:fc:5b:75:07:91:4a:fd:35:82:6e:
                    ac:5a:0f:f7:d0:a6:8d:6d:8c:69:43:2b:97:46:ff:
                    29:70:96:c2:7a:3c:40:9e:2b:98:39:e0:14:10:30:
                    27:84:59:b9:b8:f7:f7:2a:a9:1b:bb:de:6d:c5:03:
                    8e:f4:4b:05:4d:5c:5c:a7:3f:a7:53:f7:b3:4f:5e:
                    d3:d3:61:53:59:ee:96:bb:fa:7a:b9:f7:33:eb:9e:
                    30:5a:a8:99:73:0f:c1:0c:63:61:32:e6:45:b5:e3:
                    9b:a8:72:e3:34:04:6b:14:4e:0d:0f:36:4d:f9:28:
                    4d:8c:08:1a:80:66:4c:67:b0:73:01:c2:cd:76:7e:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BB:D4:3D:FD:94:D0:BB:0A:EB:41:3F:71:2A:D5:29:DA:E9:60:1A
            X509v3 Authority Key Identifier:
                keyid:B6:84:7B:92:8C:30:80:02:82:D7:BA:8E:33:74:82:DF:F4:DE:C8:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/B6847B928C30800282D7BA8E337482DFF4DEC8A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6847B928C30800282D7BA8E337482DFF4DEC8A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07deded1-d14e-4123-b5c9-c93a5997fc30/0/3130332e3132312e3132332e302f32342d3234203d3e20313338303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:89:9b:c7:bf:2d:a2:18:25:50:c1:4c:cf:db:0a:52:b0:
         a6:e5:f7:a2:4d:dc:8a:46:38:71:5a:68:d5:be:91:b4:d1:30:
         7d:6c:e4:ad:de:a2:8a:d2:4a:eb:c5:73:69:19:7a:3b:49:ca:
         eb:9c:71:4e:b9:4b:c6:b9:74:53:95:48:a1:a2:67:ff:49:36:
         f0:49:45:10:bf:f9:83:0c:3b:fc:de:28:49:6f:07:c0:81:32:
         75:89:4b:f8:81:bb:48:a5:c3:17:a0:ea:6e:9e:be:01:df:f3:
         ef:6e:2d:35:b2:6d:3b:d2:2f:c2:87:39:99:d9:a8:18:5b:ac:
         da:6c:62:58:60:ab:da:9f:41:6d:b1:06:d2:7a:4d:e7:c2:7a:
         4c:89:c7:db:e6:33:ed:9b:82:5f:23:83:69:a2:4c:df:92:8d:
         df:a1:13:13:c2:cc:19:74:eb:43:f9:bd:19:fd:c7:17:fa:45:
         0b:a7:27:d6:51:8e:da:e3:d9:3f:f5:40:23:d9:06:6a:97:0b:
         29:83:68:8d:2a:03:8c:b7:e3:43:9f:fe:db:54:99:91:12:ed:
         e5:09:42:63:a2:a2:9d:73:0e:ac:ea:ec:6c:ca:08:1f:48:69:
         71:cd:0f:1b:f2:07:a9:e0:2d:2d:b1:de:49:25:fe:1b:4d:a0:
         11:6a:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 05:45:39 2024 by rpki-client on console-ams.rpki-client.org