Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa
File:                     3130332e35362e39322e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          9Q/rNo40jp7SA4QXSldYqrq13V3KciaCTtfluLqMOYM=
Subject key identifier:   8A:95:00:14:77:63:2D:B6:3C:A2:06:F9:5F:53:AB:3F:A4:72:D8:02
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       62862530566D1DDF1154C08DF1A8CF8E31421A08
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa
Signing time:             Wed 20 Dec 2023 10:01:23 +0000
ROA not before:           Wed 20 Dec 2023 09:56:23 +0000
ROA not after:            Wed 18 Dec 2024 10:01:23 +0000
asID:                     58477
IP address blocks:        103.56.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl
                          rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 09:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:86:25:30:56:6d:1d:df:11:54:c0:8d:f1:a8:cf:8e:31:42:1a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Dec 20 09:56:23 2023 GMT
            Not After : Dec 18 10:01:23 2024 GMT
        Subject: CN=8A95001477632DB63CA206F95F53AB3FA472D802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:48:4c:42:82:fb:50:88:bf:49:95:de:16:
                    73:a3:80:e0:28:2d:bc:fc:03:b7:dc:5c:90:7d:4a:
                    e7:5d:17:62:2d:ee:0b:b9:c0:e4:f2:d3:5a:49:2e:
                    fc:b2:e4:62:9b:65:c7:7f:f5:d4:46:06:0e:47:46:
                    c4:b4:3e:62:60:ea:3b:6f:c2:f7:45:ef:22:c6:bb:
                    ac:86:33:24:33:9d:10:bb:61:ba:43:fa:74:1a:e8:
                    20:b3:1b:5d:da:84:fd:e9:03:60:7f:12:a8:e7:5f:
                    20:a3:cb:7b:53:b3:2d:09:24:1b:33:88:f7:39:81:
                    c5:ef:c1:2a:88:4f:72:4f:42:c6:85:61:b5:7a:f4:
                    35:32:45:ec:15:eb:61:b6:37:2c:4f:79:b1:76:8a:
                    d6:6a:28:ef:de:8d:d8:32:df:3a:82:1e:cd:26:0f:
                    9c:cb:56:60:4d:bc:07:1f:8c:59:b5:2f:ed:08:3c:
                    f2:de:aa:72:d3:43:40:db:6c:a1:16:86:e4:03:bd:
                    8c:31:30:a9:2c:27:ad:99:4f:ea:67:6c:84:10:2d:
                    e6:d8:48:4d:d0:1c:3b:16:46:9b:5f:e5:36:3c:c5:
                    5b:ce:76:65:10:56:a7:f7:ca:9f:f6:0c:7f:76:99:
                    f0:23:25:a5:6f:22:8d:a7:83:e6:4d:8d:ae:16:d5:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:00:14:77:63:2D:B6:3C:A2:06:F9:5F:53:AB:3F:A4:72:D8:02
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:1a:3b:d4:4e:74:dc:a1:07:88:be:13:90:9c:43:7d:d6:58:
         5a:b4:28:15:8b:73:9f:f8:5d:29:0c:b7:ad:d5:a6:1b:4c:d3:
         a8:ae:b9:8b:8c:3f:a5:71:aa:61:a6:04:ed:19:58:48:d1:be:
         99:15:1e:19:f6:1d:7b:10:a9:ec:e4:5a:27:39:6b:00:49:1e:
         40:e9:36:a1:df:7e:06:b4:5a:4e:f6:f6:2d:10:fa:0f:d8:ad:
         b8:37:31:16:31:62:5d:ce:e7:aa:0e:1c:e8:5e:70:b6:4d:cd:
         21:e9:35:2f:e8:b7:b5:42:07:8c:9a:e8:31:79:e1:06:a1:b7:
         29:33:fc:af:e8:1c:f2:26:2e:60:fb:54:f1:4b:9c:76:d0:a8:
         fe:7a:92:55:3f:ef:37:ea:03:21:25:f2:bf:ce:fd:c1:0b:14:
         ad:40:f0:13:dc:32:5e:f3:97:08:ed:96:dc:f7:e2:32:71:81:
         5f:d2:3b:ff:c4:88:8e:bf:2c:e5:ce:3a:bb:a5:2b:00:7a:92:
         11:3b:bd:c4:32:d5:7e:d1:65:b7:90:28:b1:43:3e:f2:6e:53:
         d9:4a:0e:a0:5d:3e:c6:cc:34:e6:1d:e9:b7:f5:25:3f:46:e0:
         cb:28:ac:5d:cf:35:28:82:86:f5:a2:74:18:cf:9f:64:af:94:
         f7:ce:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:12:27 2024 by rpki-client on console-ams.rpki-client.org