Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa
File:                     3130332e31352e33362e302f32332d3233203d3e203538343939.roa (raw, json)
Hash identifier:          y/6TgHyR65B7kj2F6xnEeuXuZI3rC/j++OCGRd8Jy+I=
Subject key identifier:   50:49:03:BC:55:20:E9:AC:86:01:BA:05:CA:2B:72:8F:69:38:B7:0B
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       675F54BB94B48DC2B5D45D880DDDE72E34E6E37B
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa
Signing time:             Mon 31 Jul 2023 00:03:09 +0000
ROA not before:           Sun 30 Jul 2023 23:58:09 +0000
ROA not after:            Mon 29 Jul 2024 00:03:09 +0000
asID:                     58499
IP address blocks:        103.15.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 17:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5f:54:bb:94:b4:8d:c2:b5:d4:5d:88:0d:dd:e7:2e:34:e6:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jul 30 23:58:09 2023 GMT
            Not After : Jul 29 00:03:09 2024 GMT
        Subject: CN=504903BC5520E9AC8601BA05CA2B728F6938B70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:e9:dc:ec:c1:bf:16:8f:ac:f8:d7:19:6c:
                    8a:32:88:5c:ff:f4:57:c7:8f:a7:59:6e:60:fe:8d:
                    2f:ea:e2:8a:7a:31:18:1c:98:a0:e4:05:be:d1:e1:
                    91:cd:7e:6e:68:dd:76:86:d6:fa:c6:08:0e:a0:06:
                    4d:9f:af:ab:ef:e3:83:62:99:d9:1b:18:d4:68:6e:
                    60:31:b7:84:bd:7e:47:83:24:f8:a4:b0:c0:2a:d4:
                    37:b3:88:e6:68:27:ea:ff:85:10:f1:2b:bf:f3:c2:
                    e9:c8:f5:70:89:30:f1:c1:69:01:9b:62:1c:52:4b:
                    e3:6f:34:d1:e1:53:ca:1e:89:59:a0:0c:8f:19:a7:
                    71:35:ec:f7:ee:73:18:21:50:35:b2:18:75:07:05:
                    31:d7:4b:7c:78:97:5d:71:80:59:55:25:79:d0:a8:
                    d0:69:4f:d0:de:71:f5:4b:74:41:7d:42:da:40:5b:
                    2d:1f:7e:71:33:c3:f8:d1:34:c4:97:91:0b:ee:ff:
                    d5:34:b3:d8:0a:ac:aa:3b:81:8e:00:73:c5:7c:c2:
                    c6:cd:f1:fd:c3:00:f5:d5:a3:09:d9:88:e9:53:1c:
                    4d:07:ed:83:ac:76:50:68:56:1d:44:a4:b7:67:16:
                    94:d1:9b:cc:a4:f1:53:f2:9f:52:df:d9:dc:54:e5:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:49:03:BC:55:20:E9:AC:86:01:BA:05:CA:2B:72:8F:69:38:B7:0B
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33362e302f32332d3233203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:c7:21:0a:a6:26:f6:1b:b9:b4:75:ab:16:9e:45:21:c8:
         25:b7:8a:61:73:db:d5:f3:6a:1a:80:cc:c9:70:8b:56:8e:fe:
         58:e3:da:e3:dc:5e:ee:b6:17:3b:33:b7:bc:03:c2:0f:db:b5:
         07:5f:87:f4:af:10:1f:fb:41:e9:64:f3:54:15:1b:a1:42:a6:
         00:1a:26:1c:2e:4c:ac:31:d3:bc:6d:fe:6a:a0:1e:3e:91:4a:
         7b:f3:4f:5c:07:b1:ed:49:bd:0a:ce:cc:d7:9b:38:ca:ef:82:
         ab:50:0c:5e:3e:f4:06:40:df:c9:dd:c4:ff:9e:64:e9:16:0e:
         9e:52:15:e4:53:5a:f0:25:9e:96:d1:c0:e4:d0:a9:cf:2a:69:
         d9:49:55:94:40:fe:9f:9a:a2:fb:18:a9:f4:35:8e:6a:0b:7e:
         9f:d9:b9:73:4f:67:2f:9d:33:41:d5:1a:ad:8e:16:49:d5:22:
         3b:5c:2a:bf:16:9d:f3:d1:0a:fe:5d:da:4a:26:5f:23:b6:af:
         2b:06:17:c8:ac:f8:7e:89:a3:8a:6b:c1:ea:da:74:ce:72:8a:
         f0:c5:55:26:85:83:76:42:56:db:09:18:0c:30:c1:5e:64:6b:
         1f:c0:81:26:e3:2c:7b:4c:24:c2:b3:ba:8c:b9:70:86:96:48:
         79:cf:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org