Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          frcVSY+wnOb5Kg3e/Ynd1pLfwzJ2MdFs/WH4aaCdrE0=
Subject key identifier:   4D:73:FE:CB:53:BF:DE:27:E1:8A:51:76:83:EE:5F:E4:20:AF:E6:BC
Certificate issuer:       /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial:       36122CFCB95793DDD79276D8702F360144873B80
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 17 Sep 2023 10:00:31 +0000
ROA not before:           Sun 17 Sep 2023 09:55:31 +0000
ROA not after:            Sun 15 Sep 2024 10:00:31 +0000
asID:                     17995
IP address blocks:        103.139.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
                          rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:12:2c:fc:b9:57:93:dd:d7:92:76:d8:70:2f:36:01:44:87:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
        Validity
            Not Before: Sep 17 09:55:31 2023 GMT
            Not After : Sep 15 10:00:31 2024 GMT
        Subject: CN=4D73FECB53BFDE27E18A517683EE5FE420AFE6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:ee:3e:28:d3:41:ec:8d:51:b1:05:66:5b:
                    31:fb:84:7c:f4:de:ac:65:79:da:62:52:18:ed:81:
                    5e:16:2d:2d:2a:56:07:08:a4:c3:e7:d2:4e:09:10:
                    ab:49:32:77:7e:5a:2b:99:de:05:7b:6f:22:66:f1:
                    3b:3c:d4:0a:86:f2:47:69:b7:fa:4b:ad:b1:10:41:
                    35:90:8b:02:7c:97:ed:c3:e5:bd:95:b4:07:22:48:
                    e1:fc:1d:1a:1e:72:eb:bf:54:9f:48:04:7e:32:db:
                    cb:54:34:a0:ff:9e:20:d1:f9:61:af:f8:95:ce:ee:
                    f3:53:8d:cf:b8:0f:1f:8c:c8:01:7e:9c:7b:15:5e:
                    84:52:43:8b:f6:75:a9:19:61:b6:17:b9:03:87:cf:
                    70:cd:40:d0:0a:e7:8c:a1:1d:5e:a3:67:7e:13:43:
                    e8:98:02:58:17:80:46:8a:5a:ee:4b:ad:e1:60:e9:
                    a2:28:fc:32:ed:58:b5:36:bf:b5:4c:b9:c7:45:24:
                    27:f6:60:34:2d:cf:e7:62:fd:3a:ad:e0:cb:1c:25:
                    d2:22:18:25:12:a1:49:ad:ee:8b:81:18:fc:42:c3:
                    c8:a2:fe:34:cd:9d:3d:24:58:45:f3:5d:92:40:26:
                    81:ee:26:26:30:3c:a0:35:0f:9d:41:66:8c:9e:12:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:FE:CB:53:BF:DE:27:E1:8A:51:76:83:EE:5F:E4:20:AF:E6:BC
            X509v3 Authority Key Identifier:
                keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:37:7d:38:3c:d4:8c:c9:f1:9f:d9:90:c4:3b:e0:91:91:93:
         d0:05:4c:0a:b6:46:c0:b0:51:2a:77:43:0b:09:d3:b8:e5:06:
         45:dc:4d:b4:c9:fe:89:72:2e:cf:2d:db:96:69:c8:fd:a0:70:
         50:4c:35:67:08:47:9f:66:f8:c5:07:5d:ae:a5:57:44:51:ee:
         f5:51:21:a6:88:c1:b3:0e:af:5a:22:d2:fa:45:5e:06:d0:50:
         da:6e:7f:90:fb:ae:6c:da:b7:2c:52:d4:58:d4:ce:8a:08:54:
         8a:79:c4:23:5c:56:3a:c7:0b:68:e0:63:18:f9:62:db:7e:05:
         03:ae:d1:12:28:c0:66:e1:9a:60:54:62:56:69:e3:93:96:1a:
         81:9d:54:a5:c7:2d:d1:98:06:0d:c6:09:ae:94:34:8d:73:13:
         86:cb:3f:1d:db:ab:4a:d9:00:23:e1:f4:a2:fc:77:8a:fa:89:
         d6:bb:eb:f4:e5:ec:55:15:ca:51:8d:70:7a:02:7a:d0:2d:14:
         e2:a5:14:87:0f:c3:64:b0:37:52:15:f7:4a:49:ca:4c:c3:e6:
         aa:64:1b:9b:1e:60:7a:04:f3:2e:ba:e3:28:25:5c:a5:aa:b1:
         6d:f3:7c:2a:3b:09:ac:0c:f7:29:84:92:18:7d:79:17:c2:9f:
         7c:3a:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:16:24 2024 by rpki-client on console-ams.rpki-client.org