Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa
File:                     3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (raw, json)
Hash identifier:          angLdHTSvgcq/3BM3LCasJPKNy0TiUOjIIoEBiA5Cuw=
Subject key identifier:   21:E9:23:F9:D5:47:17:DC:A7:C3:4F:32:42:6B:A7:CD:A4:D7:0D:7E
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       388B6652504D22A67F92AF8FA5DCF23ADF33EA45
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa
Signing time:             Thu 10 Aug 2023 05:00:01 +0000
ROA not before:           Thu 10 Aug 2023 04:55:01 +0000
ROA not after:            Thu 08 Aug 2024 05:00:01 +0000
asID:                     136865
IP address blocks:        103.102.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 15:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:8b:66:52:50:4d:22:a6:7f:92:af:8f:a5:dc:f2:3a:df:33:ea:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Aug 10 04:55:01 2023 GMT
            Not After : Aug  8 05:00:01 2024 GMT
        Subject: CN=21E923F9D54717DCA7C34F32426BA7CDA4D70D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ad:56:5a:3b:b5:45:fb:cc:5d:91:2e:d3:20:
                    6a:49:91:e2:35:24:ba:72:36:74:5c:b7:44:c4:05:
                    03:33:c0:a5:21:19:bc:90:38:0b:c6:3e:f8:08:65:
                    bb:67:57:8b:0d:bc:5a:55:5b:0d:1a:1f:19:47:0a:
                    ce:9e:11:96:a8:5c:05:50:a5:9d:fa:b1:77:f3:cc:
                    3f:1e:c1:82:e7:d7:71:8a:3f:be:6a:f8:f0:a1:9d:
                    a9:5c:bb:ba:c5:28:9e:25:f5:88:93:ef:33:52:94:
                    55:a4:0f:14:83:39:ff:f4:b4:55:62:18:c6:0d:b8:
                    22:de:7a:78:65:50:7a:af:dc:ad:42:e1:ac:38:a3:
                    5e:05:93:7c:b7:a9:6e:36:07:2c:c0:3d:ee:fa:fe:
                    e7:1d:35:08:43:1f:04:9f:4a:de:0a:b5:58:80:5a:
                    05:e1:3a:46:b9:3d:54:66:42:9f:e6:09:6c:ef:9a:
                    ef:66:7b:dc:ff:c0:26:5c:ac:84:33:1d:45:ae:e7:
                    0e:5b:51:34:c6:68:19:53:58:d5:55:31:0f:a8:c1:
                    c8:c6:5a:31:ea:6c:72:ec:79:15:e0:ae:5a:11:ef:
                    cf:98:fa:67:32:d2:d4:ff:1e:35:fe:4b:ed:a6:71:
                    3a:7b:fc:de:15:c8:9f:15:c8:72:72:fe:fd:a0:cc:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:23:F9:D5:47:17:DC:A7:C3:4F:32:42:6B:A7:CD:A4:D7:0D:7E
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e6:6d:07:5c:78:82:26:6f:b9:84:8f:8a:3b:d7:0d:0f:10:
         b7:f0:a0:83:2c:d2:23:4e:21:4c:8c:2c:f7:f8:ec:8c:2b:0e:
         42:16:a4:af:ba:cc:53:3d:a3:54:de:f1:e7:51:52:d4:11:79:
         eb:82:04:a7:9e:bb:99:cb:fa:3f:7c:d1:81:09:ea:8f:ec:bb:
         33:09:2d:c0:d7:4e:64:5c:90:0f:ca:6b:8e:f3:e2:f1:c1:15:
         82:d1:25:b0:a5:34:a4:88:67:7d:5b:b7:f6:8c:8c:1f:9c:b3:
         90:f9:fb:d2:89:77:18:80:d1:85:e0:e2:d9:4e:56:8d:bc:2a:
         c6:10:03:ff:96:c9:c0:e7:c4:4d:b7:0f:eb:59:61:27:c4:7b:
         16:a1:40:36:09:0c:f9:a7:d9:81:68:04:dc:56:5a:1b:10:d7:
         5e:cc:00:d3:2e:97:1f:65:83:44:b4:86:84:d9:22:98:78:df:
         67:39:16:3f:2e:93:ed:7b:96:5c:4d:1f:24:fe:0d:5e:78:d6:
         2f:c4:4b:b8:62:f8:11:14:03:73:59:d8:b1:fc:02:48:2d:71:
         22:40:d7:1e:ab:9d:ed:32:43:fd:de:3b:7a:78:a0:dc:9e:58:
         76:6e:40:94:29:d1:61:cd:bf:ce:50:a2:ba:86:4b:0b:00:59:
         01:34:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 10:19:38 2024 by rpki-client on console-ams.rpki-client.org