Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa
File:                     3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (raw, json)
Hash identifier:          7I5tliR5h7OEcnHXK6tQ6ziubN/hd9SolY4yvZXoZRM=
Subject key identifier:   78:77:FA:DA:CF:7B:7C:8A:00:5C:33:18:8B:CE:21:D3:19:A1:B8:19
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       20797E43F872B5CCE86539B2CEEE2BEE718D3B3D
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa
Signing time:             Tue 19 Dec 2023 04:00:01 +0000
ROA not before:           Tue 19 Dec 2023 03:55:01 +0000
ROA not after:            Tue 17 Dec 2024 04:00:01 +0000
asID:                     137331
IP address blocks:        103.102.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 12:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:79:7e:43:f8:72:b5:cc:e8:65:39:b2:ce:ee:2b:ee:71:8d:3b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Dec 19 03:55:01 2023 GMT
            Not After : Dec 17 04:00:01 2024 GMT
        Subject: CN=7877FADACF7B7C8A005C33188BCE21D319A1B819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:bd:ef:7a:06:d4:9e:9a:73:09:a4:1e:18:
                    3b:19:ac:ea:1b:24:a6:3d:6e:b4:26:8e:47:52:78:
                    80:8c:ab:9f:d6:0f:b5:83:94:1a:12:bf:d9:a0:d5:
                    a6:75:b5:4a:92:83:60:8b:93:a4:f6:99:b0:87:62:
                    a2:a1:d2:1c:26:cb:4f:87:4b:42:49:1a:f3:10:47:
                    f2:f8:42:6e:b3:25:b2:ba:1a:dc:85:ec:e7:ec:dd:
                    57:e7:ff:af:61:8c:7f:d7:2f:74:1f:c9:25:9b:6e:
                    53:ca:8b:81:9b:8c:97:0e:15:c6:1d:87:f8:0d:eb:
                    95:34:1c:d3:9a:cf:ad:cb:74:27:1f:87:ef:5c:22:
                    ab:54:0e:19:0a:7a:d5:3f:76:20:19:8c:81:4a:43:
                    ea:f9:07:1e:a9:24:56:e4:0b:84:8a:fd:03:1c:f4:
                    e5:07:01:4f:e5:6c:e3:08:11:27:64:04:6f:84:e8:
                    1f:04:f8:bf:f4:5f:a0:cd:7b:30:4c:d9:12:9e:40:
                    d1:4e:2b:9b:56:f2:14:2a:e0:1f:32:07:b8:78:95:
                    51:76:06:c8:3c:f9:c8:c4:dc:e9:31:d5:52:96:2c:
                    b6:3b:59:f1:18:cf:63:5a:26:1f:3c:60:4d:75:f0:
                    ab:3d:d2:61:2d:cf:1b:61:38:cc:13:29:ba:a2:24:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:77:FA:DA:CF:7B:7C:8A:00:5C:33:18:8B:CE:21:D3:19:A1:B8:19
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:ca:ec:64:ff:ba:77:61:da:c9:fa:cf:28:cb:c7:47:09:
         67:f8:7c:94:0c:50:f9:aa:59:5c:05:00:1b:74:4e:02:a5:8e:
         40:8a:b4:ef:d8:00:7d:14:8b:82:25:5b:7c:74:54:ae:ed:06:
         80:9d:9d:1c:c6:c9:bf:68:05:ae:a6:1d:d1:7a:1c:08:ce:71:
         19:cc:42:d4:26:dc:41:8d:16:59:2b:ac:45:5a:89:8d:d4:c4:
         6b:cd:16:65:b4:4c:00:6a:2e:04:19:a4:f9:eb:dc:d6:8f:4e:
         59:03:85:e1:d9:db:eb:7a:5b:03:78:8f:03:1c:7a:f7:c7:dc:
         32:26:78:d7:28:f3:cd:e2:85:c6:b3:c0:e5:99:64:d8:f6:aa:
         02:a7:89:c8:bb:52:83:1a:eb:8a:2b:e4:1e:23:04:d2:74:5c:
         49:6b:3d:7b:25:d4:e0:76:f0:1e:e1:37:a7:28:cb:d4:b1:0c:
         a6:58:5d:7e:12:e8:bb:30:37:b7:99:ae:7c:b7:45:e9:10:61:
         f0:81:c6:82:a3:a7:d3:53:76:0b:dc:36:d0:8d:aa:bb:41:c9:
         6c:b7:6a:5b:7e:ad:43:93:c5:0e:30:e6:85:05:9c:92:7c:0c:
         f7:5d:02:f0:a8:37:be:d1:89:0b:14:16:6f:86:aa:22:7b:19:
         36:60:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:40 2024 by rpki-client on console-fra.rpki-client.org