Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa
File:                     3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa (raw, json)
Hash identifier:          ovoME7y5elyhapmxlncSqS9QfEByQ1OjqKdTyy15DNg=
Subject key identifier:   07:2A:69:A1:F2:EE:15:43:48:F8:3F:6F:25:E6:B8:45:F1:CD:13:77
Certificate issuer:       /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
Certificate serial:       E4390D63EF3A6B59C64862EE3A3CAE7B3CB27D
Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa
Signing time:             Mon 31 Jul 2023 00:04:41 +0000
ROA not before:           Sun 30 Jul 2023 23:59:41 +0000
ROA not after:            Mon 29 Jul 2024 00:04:41 +0000
asID:                     134648
IP address blocks:        103.208.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl
                          rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 03:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e4:39:0d:63:ef:3a:6b:59:c6:48:62:ee:3a:3c:ae:7b:3c:b2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
        Validity
            Not Before: Jul 30 23:59:41 2023 GMT
            Not After : Jul 29 00:04:41 2024 GMT
        Subject: CN=072A69A1F2EE154348F83F6F25E6B845F1CD1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:09:12:dc:8e:7d:79:7a:64:e9:66:bb:47:
                    26:0b:07:83:55:13:6f:b7:82:92:e8:50:05:b0:2b:
                    34:68:0f:3a:a8:90:ee:c9:49:38:b7:9d:30:74:77:
                    9a:e9:9c:31:58:7d:30:68:00:b6:e1:ba:dc:d0:a3:
                    73:0d:20:ef:f2:c5:e9:7f:52:a1:59:c0:d3:b1:97:
                    10:88:67:97:6c:7d:46:a4:c4:f0:3b:40:b0:c7:0f:
                    98:c8:5e:62:e4:1b:da:5f:2f:39:af:76:91:61:7e:
                    ba:6a:4e:1c:8d:1f:c5:4a:c2:41:ba:34:0d:45:0e:
                    23:b5:8a:3a:98:dc:a0:34:a3:fd:26:8d:96:88:6a:
                    38:98:20:95:a6:24:75:e3:9b:d9:d1:82:a8:19:c9:
                    24:ad:97:8d:4c:7c:d3:b3:95:4b:6e:73:fe:02:0b:
                    dc:6d:d9:2d:59:94:17:01:b8:7b:60:58:9f:93:63:
                    8d:a3:c1:5a:14:54:d9:66:79:d7:29:9b:40:79:1d:
                    ba:f0:51:c1:09:f2:6e:d1:84:18:ae:bf:cf:14:63:
                    d6:2e:63:b3:a5:18:4b:e0:ad:26:f3:54:75:8a:e4:
                    d3:6f:8a:dc:5c:6e:fc:56:bb:92:da:65:ab:9c:46:
                    6b:ab:23:b7:07:68:64:05:33:cf:ee:38:da:31:1b:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:2A:69:A1:F2:EE:15:43:48:F8:3F:6F:25:E6:B8:45:F1:CD:13:77
            X509v3 Authority Key Identifier:
                keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130312e302f32342d3234203d3e20313334363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:74:9f:24:fe:65:f6:4b:d5:75:4e:83:d3:ed:b6:9d:ac:
         17:f0:59:6b:93:31:e7:e6:6d:0f:7e:e2:a0:08:dc:b6:b3:e4:
         8e:03:9e:97:3e:76:64:45:8f:73:21:94:4f:25:0a:ff:1d:3e:
         be:8f:2a:75:a9:39:2f:5a:6c:53:84:f4:64:89:13:28:52:f2:
         f6:46:4e:47:06:53:ae:5d:8d:d8:6a:3e:4f:b2:82:8a:09:18:
         5a:19:a1:93:13:c4:a1:2f:06:51:fd:9a:a2:47:f4:0f:4b:10:
         96:ef:44:3f:2c:ac:9b:9f:b7:b6:35:1a:a8:6e:3d:7d:06:53:
         96:3b:22:f3:84:eb:3a:e7:03:f8:25:08:1a:8a:8e:7d:f6:f4:
         2d:bc:1d:b3:af:5e:90:9e:50:0e:90:8f:35:37:37:8a:08:2c:
         52:4c:91:11:9a:c2:13:da:ba:0e:f5:e4:23:95:cf:6c:89:2f:
         2c:66:5c:a9:7e:9f:5c:e8:a9:6b:03:f1:88:9c:45:33:5e:68:
         ae:e0:68:d4:a8:52:0f:ce:9f:d4:f5:c3:fa:96:8a:fb:4d:91:
         7c:46:df:48:ed:19:2c:67:f3:24:68:d9:af:a9:39:d7:2b:10:
         24:f6:dd:9b:df:92:56:84:41:9c:57:3a:6a:b7:d6:b8:2b:39:
         59:7c:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:33:43 2024 by rpki-client on console-ams.rpki-client.org