Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132312e302f32342d3234203d3e203436303535.roa
File:                     3130332e3139382e3132312e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          VAABL+bWNuIvfIzWSTYq36H1x4+F6FBJMYx2zdWrslk=
Subject key identifier:   7E:76:B3:7D:9F:F3:82:1D:19:C3:9F:06:B2:CF:85:ED:EB:CD:D5:B4
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       59AA6EBD6DB30C63B42B196508A8427A6F467F0D
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132312e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 09 Aug 2023 09:00:58 +0000
ROA not before:           Wed 09 Aug 2023 08:55:58 +0000
ROA not after:            Wed 07 Aug 2024 09:00:58 +0000
asID:                     46055
IP address blocks:        103.198.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:aa:6e:bd:6d:b3:0c:63:b4:2b:19:65:08:a8:42:7a:6f:46:7f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug  9 08:55:58 2023 GMT
            Not After : Aug  7 09:00:58 2024 GMT
        Subject: CN=7E76B37D9FF3821D19C39F06B2CF85EDEBCDD5B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:98:0d:64:81:68:76:61:4d:1f:3c:04:c5:
                    f0:22:c0:a1:96:2e:44:d4:95:42:4e:5e:78:59:9d:
                    8a:99:6c:55:75:35:f0:8e:73:1e:6d:61:92:0f:a4:
                    05:5d:87:62:39:75:00:1a:e7:92:92:a9:08:e0:f9:
                    99:9c:a3:ae:80:41:6d:38:b3:9b:42:50:3d:48:8d:
                    05:b0:4b:09:e1:b6:c9:a6:b9:9a:df:b7:c1:23:df:
                    23:d3:8e:df:0b:23:d9:80:bd:33:b2:9e:69:11:ca:
                    d0:b3:34:a1:fb:c4:b5:7c:6a:4f:9b:41:19:65:9f:
                    34:df:a4:b5:8b:a0:17:23:62:3c:e4:b3:29:2a:ca:
                    03:bd:2f:6c:02:91:43:ff:05:1b:63:fa:b1:c3:30:
                    b3:b7:f8:92:a2:84:04:3d:33:49:4d:a5:97:3c:4a:
                    37:92:31:f3:73:ed:82:65:f6:25:ff:cc:1b:a9:d4:
                    a4:7c:a6:85:b9:39:51:68:6e:f8:44:5d:b9:54:bd:
                    df:8e:ef:ec:7b:39:82:9e:a0:f4:40:26:d4:44:17:
                    be:e7:db:5a:95:9c:3e:d4:5b:af:08:98:66:9b:49:
                    21:26:cc:d9:02:08:b5:19:0c:30:70:0c:85:73:b4:
                    e8:1f:eb:b3:f9:d6:28:c1:46:fe:12:53:60:e0:27:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:B3:7D:9F:F3:82:1D:19:C3:9F:06:B2:CF:85:ED:EB:CD:D5:B4
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132312e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ae:8b:72:2a:9e:67:77:5b:c3:8e:4d:06:d8:0e:a3:44:cb:
         1d:71:28:f1:28:28:bb:dc:38:46:d0:7c:9d:c8:51:87:13:ae:
         48:10:73:6e:e9:f3:49:23:bc:9a:74:87:3d:05:fa:de:e6:ea:
         70:0b:ff:d3:17:a6:24:8d:00:1d:84:c5:7a:79:57:8a:cb:ec:
         84:03:dd:4f:db:3d:00:2c:ad:71:da:75:b2:c0:5a:e0:c1:5b:
         a1:c9:e7:d9:62:d5:56:33:55:c6:00:c6:68:68:3f:25:8d:39:
         06:da:18:7a:63:53:3a:9b:f1:9d:e3:50:5d:c0:46:16:c4:f7:
         78:aa:94:8c:c6:84:18:6b:4c:d2:e3:82:3e:9a:e3:b4:75:d1:
         9c:44:31:f2:fa:63:36:bd:9d:79:0a:e8:1f:98:9f:13:d6:9a:
         44:ea:3a:bd:ba:64:c1:b9:e1:ee:55:f4:bf:5b:f7:48:de:75:
         df:f4:e3:59:a6:42:bf:00:a4:aa:33:5d:c5:d9:27:00:49:b5:
         00:d4:34:74:b6:98:a6:83:d3:21:d2:1e:f1:bb:04:6f:e8:78:
         52:77:1d:08:32:42:5e:18:a0:c0:01:10:d7:4c:5b:d7:dd:16:
         ed:14:79:7d:b0:56:f7:8f:0e:01:09:5d:74:dd:e4:a8:ed:fe:
         55:69:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:24:32 2024 by rpki-client on console-fra.rpki-client.org