Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36312e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          5qV3j7tzQiLSPYHtYqYzib6DB5EhPQX5/DEZocEW34w=
Subject key identifier:   A9:B0:3E:F9:F9:DF:F6:9E:06:C0:F3:D1:B0:89:3E:27:73:8C:46:E8
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       682FFFBEC7E6D19B62B1415BF4BDA4E42EE81BDE
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 31 Jul 2023 00:00:05 +0000
ROA not before:           Sun 30 Jul 2023 23:55:05 +0000
ROA not after:            Mon 29 Jul 2024 00:00:05 +0000
asID:                     38758
IP address blocks:        103.10.61.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Apr 2024 23:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2f:ff:be:c7:e6:d1:9b:62:b1:41:5b:f4:bd:a4:e4:2e:e8:1b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jul 30 23:55:05 2023 GMT
            Not After : Jul 29 00:00:05 2024 GMT
        Subject: CN=A9B03EF9F9DFF69E06C0F3D1B0893E27738C46E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:4d:a4:6c:43:cf:db:75:b8:b5:91:4a:e2:
                    3f:2d:92:8f:74:9b:1f:eb:76:f2:35:89:0e:14:44:
                    bf:57:f4:74:97:6b:8b:0f:ac:a4:8c:5b:63:74:b2:
                    b7:64:cd:50:20:de:7a:36:7b:e8:d5:b7:7c:07:0a:
                    4d:42:6f:cc:10:fa:4c:81:7e:7c:eb:1d:4b:c6:94:
                    6c:14:1b:8e:ae:67:8e:f1:38:51:fb:c8:82:d0:ad:
                    f0:c8:ce:6f:ce:4f:d2:ba:20:7c:2d:2d:a3:a7:93:
                    26:5d:67:b8:12:81:17:58:10:f3:1c:bb:0f:99:e9:
                    36:e7:37:ad:a9:7b:36:73:0e:32:d8:f4:50:71:21:
                    ae:90:81:95:a8:98:37:88:f1:70:0c:b0:b2:73:9d:
                    36:89:de:13:3c:ba:72:35:99:88:25:8d:f8:20:67:
                    a1:ac:7b:1b:92:33:6c:a3:f9:c9:72:4e:2e:4a:02:
                    55:c2:22:f8:91:45:22:47:1e:41:bf:61:a4:6d:a2:
                    2c:33:57:fc:fe:eb:fc:77:32:fe:32:77:c7:09:7e:
                    c6:6a:1d:96:11:65:08:bd:2c:37:5e:8c:75:8d:73:
                    35:35:aa:5b:7c:36:07:9e:4c:9a:03:8e:a4:26:7c:
                    2d:98:fa:4d:b7:57:1e:62:51:b1:bb:82:65:db:b5:
                    53:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:3E:F9:F9:DF:F6:9E:06:C0:F3:D1:B0:89:3E:27:73:8C:46:E8
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36312e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:4e:ea:05:7c:35:52:5e:d4:ee:69:8d:ef:70:8f:e2:3d:
         1e:43:98:b2:9a:cb:dc:93:70:5e:85:f2:c3:9b:df:7b:0b:b8:
         df:44:b0:50:25:e3:ff:57:57:52:4c:fe:b2:16:79:54:e6:8c:
         7f:90:34:1d:64:d7:6b:d1:cf:88:31:7e:63:02:fb:52:df:53:
         f5:f0:d6:32:45:8e:df:d5:20:2b:46:f7:3c:53:b0:9e:4e:18:
         bb:34:ce:c8:f5:f6:5c:30:0f:e2:5b:fd:2c:1b:2b:59:86:c0:
         17:e6:70:22:42:2b:91:b9:00:f1:ad:b5:89:b9:2b:15:1f:4a:
         31:fe:00:6c:c8:38:73:40:39:57:a2:01:59:be:7a:f6:6c:86:
         0c:6f:5d:e2:b8:a2:0c:73:f4:29:9e:34:fa:89:f9:9f:f8:4a:
         c0:86:99:2f:e4:db:c8:63:55:77:78:a5:82:cb:87:93:a4:c6:
         95:6c:9d:b4:d4:04:c2:7f:6b:8c:d5:40:d2:67:ce:02:56:da:
         70:b0:f4:8b:87:ca:da:10:2c:3e:21:18:03:5c:d0:9a:34:39:
         79:53:11:1a:d1:76:8c:de:c8:03:00:b2:b4:15:f6:4c:87:ba:
         6b:bf:b1:77:1d:cd:9c:f8:5f:12:17:44:fd:05:b9:12:df:78:
         d2:e7:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:51 2024 by rpki-client on console-ams.rpki-client.org