Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa
File:                     3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (raw, json)
Hash identifier:          Gyd51aWvCECrbLFTWDuBQ+qibcUQentdAoxkugpbywI=
Subject key identifier:   8B:A3:E0:29:6D:00:65:27:EA:EF:53:52:CF:36:10:17:CA:66:CD:FC
Certificate issuer:       /CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
Certificate serial:       74970343232A119CB91FF7E3505109AA84AD7A6B
Authority key identifier: B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa
Signing time:             Thu 27 Jul 2023 16:00:00 +0000
ROA not before:           Thu 27 Jul 2023 15:55:00 +0000
ROA not after:            Thu 25 Jul 2024 16:00:00 +0000
asID:                     136888
IP address blocks:        103.106.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl
                          rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 10:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:97:03:43:23:2a:11:9c:b9:1f:f7:e3:50:51:09:aa:84:ad:7a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8
        Validity
            Not Before: Jul 27 15:55:00 2023 GMT
            Not After : Jul 25 16:00:00 2024 GMT
        Subject: CN=8BA3E0296D006527EAEF5352CF361017CA66CDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:c1:ea:74:de:07:d4:6a:1f:fe:81:a5:79:
                    28:a1:58:6c:46:6e:df:eb:3c:80:2b:77:bf:dc:07:
                    72:ff:37:5d:0f:9c:20:90:21:4a:59:20:b2:b5:74:
                    6d:b1:1d:db:17:2c:81:c4:56:c6:e9:a3:6e:f6:ab:
                    e8:63:36:81:dc:c3:2c:58:80:fa:95:25:bb:f8:37:
                    1b:bd:d5:77:f5:03:ea:70:21:5a:32:48:5e:d5:50:
                    7d:aa:2e:5d:19:83:95:7a:63:39:b1:79:4c:52:b7:
                    9f:aa:d8:74:43:1e:7d:33:f2:57:ef:46:d4:3a:34:
                    8c:8e:ac:85:af:0c:ff:9a:c4:c1:4e:22:a9:ef:80:
                    90:3d:f3:78:b9:cb:af:99:b8:3d:53:d3:b1:9d:37:
                    3c:2a:54:fd:56:6b:e1:ed:17:86:1b:c7:03:66:d3:
                    c4:6b:be:6b:35:4a:db:94:ba:24:d5:66:ea:b3:73:
                    44:ea:a7:41:7d:98:4e:8f:f1:fa:bb:71:6c:bb:51:
                    5f:1c:bf:3a:fc:e8:d8:0c:21:5b:21:d3:20:4b:aa:
                    24:9b:e9:d9:58:81:df:e4:45:aa:d2:50:d2:60:31:
                    af:d0:48:3c:da:92:17:f9:02:f0:4d:57:01:6e:8c:
                    03:08:7e:cb:3e:a4:1c:bc:d6:6e:b4:11:34:7e:2a:
                    78:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:E0:29:6D:00:65:27:EA:EF:53:52:CF:36:10:17:CA:66:CD:FC
            X509v3 Authority Key Identifier:
                keyid:B2:FA:6D:D6:2C:0D:60:EA:AD:64:F6:B4:71:D2:2D:29:44:32:B7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2FA6DD62C0D60EAAD64F6B471D22D294432B7B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:e3:ff:1f:20:95:66:12:a2:80:4c:be:64:74:8c:8e:45:
         07:c5:4b:cd:b6:7d:2c:b0:42:05:07:b1:fa:18:ef:e4:f6:95:
         fe:08:7c:fe:a4:bb:e2:be:ad:00:3f:df:b0:1d:32:49:5e:30:
         bc:98:b6:48:14:c1:13:51:be:3b:71:02:5f:c4:a5:63:aa:34:
         e3:ba:c2:bf:24:d1:ad:7e:33:8f:22:bf:3c:48:84:56:77:4d:
         8d:e2:92:89:ba:e7:6d:f5:4f:54:16:fd:ba:57:2e:e7:94:d5:
         bd:f9:b6:ec:25:36:67:32:06:d5:dd:09:4b:93:34:a0:08:28:
         12:2a:b8:c7:46:bd:e6:38:ab:79:9c:96:31:13:aa:3c:75:49:
         b5:33:4f:a4:c5:9c:1c:90:2b:dc:3b:87:05:f9:9a:93:28:11:
         d6:55:0c:1a:b6:c4:62:eb:2e:e6:aa:01:f8:b2:3f:dc:f9:01:
         3b:90:4f:e8:5c:fc:4c:7c:46:42:d1:a8:18:ab:e0:e0:99:2c:
         06:3c:53:7c:ce:9c:23:dd:81:d3:58:cb:ba:bf:0b:b8:81:b0:
         6b:1d:00:77:a0:18:8b:3f:c3:7e:30:eb:f6:3e:47:95:f3:fd:
         55:a6:ff:ca:61:2c:7e:8d:31:af:47:19:50:47:bc:ff:d7:c8:
         9e:7c:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 09:40:45 2024 by rpki-client on console-fra.rpki-client.org