Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa
File:                     3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (raw, json)
Hash identifier:          MUEhDDnuGhyNAB6BxXd5jD4KSmLZ1a27tl2qWaqoHtE=
Subject key identifier:   AE:20:DD:E0:2D:B7:30:71:13:59:7D:8E:BA:49:FA:B0:24:85:E6:A8
Certificate issuer:       /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2
Certificate serial:       1CEF0F99542317DBE129CCE12485EA1BB875E785
Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa
Signing time:             Sat 26 Aug 2023 05:00:01 +0000
ROA not before:           Sat 26 Aug 2023 04:55:01 +0000
ROA not after:            Sat 24 Aug 2024 05:00:01 +0000
asID:                     136080
IP address blocks:        103.7.176.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl
                          rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 07:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ef:0f:99:54:23:17:db:e1:29:cc:e1:24:85:ea:1b:b8:75:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2
        Validity
            Not Before: Aug 26 04:55:01 2023 GMT
            Not After : Aug 24 05:00:01 2024 GMT
        Subject: CN=AE20DDE02DB7307113597D8EBA49FAB02485E6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:57:db:1a:05:a0:a5:3c:c5:30:06:43:9d:
                    f4:bd:92:7c:f9:ae:99:fd:66:63:4a:a6:d5:54:d8:
                    15:92:4b:ae:7e:06:6f:1e:4d:7b:bf:a2:c5:40:1b:
                    8e:60:e2:4d:2b:be:23:b0:2c:1e:42:c5:ea:11:6c:
                    23:a3:be:86:ab:12:05:9b:86:d1:88:b9:a6:3a:97:
                    93:c4:eb:0d:ce:2e:a2:e2:75:82:7e:e1:f2:60:4d:
                    f1:03:15:13:d9:43:e0:fa:d1:c3:23:81:49:72:01:
                    83:a3:eb:17:b0:ab:87:66:11:eb:69:5a:ea:12:ef:
                    69:0d:90:60:78:34:b6:11:df:dc:97:57:9d:68:e5:
                    21:96:d5:8c:fb:d1:8c:5c:1d:e0:62:54:8c:91:4b:
                    63:58:ec:da:fd:4a:5e:11:40:53:87:9c:6e:13:da:
                    38:ae:8c:8e:3d:75:fa:aa:5a:d4:bc:1c:07:e5:73:
                    f7:6f:3c:3a:55:88:e7:fe:30:62:85:08:56:0e:96:
                    4e:ed:1a:b0:2a:44:a1:99:5b:00:16:42:f6:62:c1:
                    80:04:53:40:12:26:32:ac:60:ed:94:c4:6b:e6:20:
                    83:0b:3e:3a:b0:26:94:1b:00:a4:b4:31:1a:98:e5:
                    e1:bb:db:71:80:aa:78:53:67:17:2d:fe:c2:b8:b9:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:DD:E0:2D:B7:30:71:13:59:7D:8E:BA:49:FA:B0:24:85:E6:A8
            X509v3 Authority Key Identifier:
                keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e372e3137362e302f32342d3234203d3e20313336303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3a:73:64:a4:82:0e:67:22:da:9a:a0:01:bb:03:ce:71:87:
         3b:9f:c8:9a:ed:eb:e8:a2:a2:5a:ce:78:e1:cf:f2:cb:96:31:
         01:96:70:3b:db:5b:75:83:06:e3:23:f4:df:eb:a6:8f:ce:e7:
         95:39:9b:48:a2:8b:35:44:a9:b3:89:54:7e:cb:c0:5a:1c:a9:
         fa:c9:a1:9f:bc:46:7c:6e:af:83:8e:71:f4:e9:44:07:c9:04:
         c2:87:8b:4b:45:48:73:9a:98:cb:22:07:c1:37:10:7c:05:ab:
         b7:30:37:eb:40:f0:43:95:d8:00:70:ce:d7:2f:ff:23:bf:8e:
         2e:41:54:09:eb:36:75:37:5b:d3:dc:ca:6d:60:e2:3e:40:ac:
         94:45:c3:cf:0d:f6:a0:53:79:55:66:5e:ec:58:ee:eb:5c:67:
         8c:d3:d2:48:0c:c2:93:87:9b:1f:17:8d:22:63:3e:dc:8f:8b:
         89:70:92:47:98:ce:45:8c:4e:90:e6:6b:6e:1a:7f:46:a4:9b:
         0d:c5:b9:27:ca:c3:2a:44:96:c6:a8:c5:78:b7:c4:17:33:17:
         30:1b:c4:c2:3f:fc:1c:a4:d9:df:b4:fb:f2:bd:ba:ca:bc:f1:
         e2:9d:4d:ab:9f:1a:ad:1b:27:24:64:59:cc:a6:dc:37:8e:6c:
         83:0a:08:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:45:35 2024 by rpki-client on console-ams.rpki-client.org