Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa
File:                     3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          vh1Vy4fJRr24DEytfox0FrJ/hRfxisNXHUz6yn+iLVE=
Subject key identifier:   6A:77:5A:7D:84:D8:74:52:F3:FF:D7:3C:2F:87:F6:63:58:55:E4:4A
Certificate issuer:       /CN=47C87696529FAF404AF0E8681AAFA8F224187D59
Certificate serial:       1A90F82A981D4CD40D25D85010D314FD138C14DB
Authority key identifier: 47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 Sep 2023 08:01:02 +0000
ROA not before:           Sun 03 Sep 2023 07:56:02 +0000
ROA not after:            Sun 01 Sep 2024 08:01:02 +0000
asID:                     58369
IP address blocks:        103.136.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl
                          rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:90:f8:2a:98:1d:4c:d4:0d:25:d8:50:10:d3:14:fd:13:8c:14:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C87696529FAF404AF0E8681AAFA8F224187D59
        Validity
            Not Before: Sep  3 07:56:02 2023 GMT
            Not After : Sep  1 08:01:02 2024 GMT
        Subject: CN=6A775A7D84D87452F3FFD73C2F87F6635855E44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:39:a8:3f:ce:06:75:06:2b:ef:ac:ad:7a:
                    8f:e4:38:df:80:71:83:37:e9:58:15:49:f2:ca:9b:
                    5e:af:f4:ab:2c:87:ca:3f:4d:14:18:ef:b0:c6:46:
                    bf:a5:fb:0d:21:cf:cd:25:9f:33:84:bd:08:d3:f7:
                    2f:5e:be:42:9f:da:ef:ae:55:9b:b3:42:57:a9:e2:
                    b1:9e:7d:71:93:2c:b1:17:9f:3a:1f:fa:d6:de:09:
                    c5:0a:f5:72:01:89:5a:44:46:57:9c:0e:52:db:78:
                    8d:d8:91:31:51:cc:11:9e:92:db:07:19:e3:9d:ba:
                    6e:11:ce:66:26:9f:dd:29:a5:35:90:33:70:bf:70:
                    b9:0e:8f:23:06:3a:ac:b9:51:98:a9:a6:f2:78:b3:
                    87:a5:8f:5a:bd:05:cd:f7:5e:ac:8b:25:60:68:bb:
                    e8:e7:65:c5:d6:d6:4d:49:b9:f1:54:51:f5:4c:3e:
                    88:d5:8c:10:43:2a:38:45:17:06:d5:c8:d2:3a:20:
                    ec:17:8c:db:f8:97:c4:1b:9f:2b:35:49:1b:95:2a:
                    81:39:b4:e4:87:27:88:ae:32:d5:5a:7d:63:03:68:
                    a4:48:a5:5e:ac:72:f2:c8:ab:0b:74:f5:86:43:b7:
                    00:44:26:e0:dc:94:80:ab:fa:51:a0:e0:7e:57:f0:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:5A:7D:84:D8:74:52:F3:FF:D7:3C:2F:87:F6:63:58:55:E4:4A
            X509v3 Authority Key Identifier:
                keyid:47:C8:76:96:52:9F:AF:40:4A:F0:E8:68:1A:AF:A8:F2:24:18:7D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/47C87696529FAF404AF0E8681AAFA8F224187D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47C87696529FAF404AF0E8681AAFA8F224187D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f61f04d-18e7-42ff-ae82-d56554f9264c/0/3130332e3133362e3137302e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e3:6c:f2:11:69:3c:a2:37:78:ee:80:f0:58:e7:24:56:cd:
         f4:28:54:92:ff:eb:f2:85:34:10:5e:23:fa:fe:4e:3a:b8:55:
         01:72:da:39:1a:5d:c3:97:52:06:a6:c7:01:c1:56:3b:01:e9:
         b5:01:37:f3:92:cd:d8:2f:c0:72:10:63:d8:15:3d:12:86:f6:
         e2:22:fd:3a:4e:65:37:30:24:1f:75:01:a6:ae:89:93:b1:3d:
         11:93:24:b3:5c:06:bc:76:b8:12:2e:98:a3:86:8d:ab:c2:0e:
         54:af:e7:c1:66:db:46:22:af:b3:c9:97:bd:93:61:84:2c:9f:
         a9:f4:1a:fc:68:8d:6b:fe:4e:28:0b:4b:79:a3:8a:59:83:90:
         49:f6:f5:9e:90:71:0f:aa:60:bc:9c:83:b8:98:ae:46:a3:95:
         ec:20:e0:62:e1:b6:3c:08:c3:1a:f4:d6:f7:29:68:32:e4:e6:
         a5:78:e9:dc:ac:26:e1:d0:0b:64:9f:47:0c:51:6c:88:97:c6:
         27:84:cd:2a:4d:cd:45:ef:e3:6c:67:86:c6:4a:1e:81:e7:5e:
         55:5c:ee:55:e9:4a:12:66:c6:64:3a:d9:4b:9f:90:9a:97:ad:
         83:b3:9f:71:8f:7f:69:fa:eb:06:78:55:c6:a9:7f:30:3c:87:
         6f:cb:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 00:30:53 2024 by rpki-client on console-fra.rpki-client.org