Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32342d3234203d3e203436303535.roa
File:                     3130332e3139382e3132302e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          mymeq3EomE6XIJ+uJzNpuLlFTK3ROB2F1p/8K6InmCo=
Subject key identifier:   47:FC:84:D0:98:28:89:34:EE:0D:9F:14:36:8D:45:0C:D1:60:9B:14
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       3B7FD5E88176B6885E4014DABE9AEE6CF83EB00B
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 09 Aug 2023 09:00:58 +0000
ROA not before:           Wed 09 Aug 2023 08:55:58 +0000
ROA not after:            Wed 07 Aug 2024 09:00:58 +0000
asID:                     46055
IP address blocks:        103.198.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 13:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7f:d5:e8:81:76:b6:88:5e:40:14:da:be:9a:ee:6c:f8:3e:b0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug  9 08:55:58 2023 GMT
            Not After : Aug  7 09:00:58 2024 GMT
        Subject: CN=47FC84D098288934EE0D9F14368D450CD1609B14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:4d:75:6d:04:58:94:4b:43:4f:bc:a6:2e:
                    34:da:9f:11:d9:61:9e:49:a9:78:80:75:ab:46:cf:
                    77:8b:5a:28:24:58:0a:c2:97:1e:32:61:b3:68:14:
                    a6:5e:57:72:14:da:e5:75:2f:4d:c3:30:d8:ff:58:
                    51:d6:17:f6:8f:0f:71:6a:ae:98:f8:3a:5a:82:e7:
                    b7:ba:82:9b:1b:7e:52:53:e0:71:28:83:9c:92:e3:
                    d8:66:3e:1a:fd:4e:d7:cb:41:30:98:06:62:99:87:
                    33:cd:c5:f6:60:11:00:63:f7:96:bc:9e:a8:bb:0d:
                    52:2f:41:f6:fa:39:fd:8a:ae:26:6b:03:3e:99:d8:
                    39:9e:38:12:64:c4:f9:d9:d6:05:31:6c:9f:af:51:
                    b2:38:1f:fa:79:d7:27:a8:fd:74:1f:8b:d7:66:c4:
                    c7:3f:a5:49:ca:0c:7f:3c:68:54:77:00:c7:25:d3:
                    9c:bb:db:f3:1a:53:40:c8:17:41:a8:9d:a1:d1:06:
                    61:71:b1:de:34:6a:47:db:4a:cb:3b:dd:24:72:d3:
                    3d:13:9a:0f:42:11:8b:15:c8:18:40:bd:6d:6c:3a:
                    2f:73:ab:65:9a:45:d9:f9:9f:a2:c7:78:27:a5:e7:
                    af:65:f6:74:c3:16:e8:b4:e8:7d:62:de:ac:0a:3e:
                    ad:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FC:84:D0:98:28:89:34:EE:0D:9F:14:36:8D:45:0C:D1:60:9B:14
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132302e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:9f:0a:5a:22:13:60:2a:7a:fa:9d:f9:f0:90:b0:ce:fe:
         e2:ad:e2:12:d4:70:ee:fb:95:bf:46:1a:16:f7:e0:25:4f:54:
         c9:ce:74:88:b6:55:83:e7:38:40:92:70:7c:38:52:b3:aa:b6:
         45:4a:a8:30:db:31:df:41:e0:cf:cc:85:ea:52:f9:e7:ee:a4:
         3a:57:3f:cd:d1:59:58:c3:75:6e:ef:d3:7a:71:97:62:30:ed:
         2d:07:2a:41:c7:9c:d7:f7:c9:5c:27:b0:fa:90:90:f3:49:07:
         c0:09:4e:4d:2b:f1:90:42:c8:eb:b9:a5:6f:75:a1:76:ed:30:
         f3:c7:31:e5:b2:ea:00:f9:fe:c2:6a:09:7a:32:56:cf:c4:5b:
         f6:89:1a:40:e9:be:56:57:c8:40:ab:3e:70:04:9b:03:73:33:
         ab:db:78:97:30:a0:b9:ec:58:c9:91:13:58:5e:ad:81:9a:0d:
         42:06:e9:43:27:44:d0:10:70:3b:82:04:79:80:c0:79:49:79:
         d4:9e:a9:63:69:7c:6a:e3:b4:55:a2:d4:32:ba:d1:52:32:56:
         2c:e9:95:45:3f:67:ee:79:ed:c1:ef:11:66:74:98:1c:c6:84:
         de:37:e3:1b:48:1f:66:87:f2:eb:e0:cd:28:e7:cd:35:8c:4e:
         24:c2:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:49 2024 by rpki-client on console-ams.rpki-client.org