Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
File:                     3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier:          Bby0xkG9xWa7b0mZmHZcgRfs5Ah4kVGh+6tmlg4qiTQ=
Subject key identifier:   95:C0:5B:74:56:6D:C7:8A:1C:FF:9B:E4:C8:FF:40:0A:F4:64:9B:4E
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       2143EEDB00ADAB2D8E648363E7BC4714270797FC
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
Signing time:             Mon 31 Jul 2023 00:07:17 +0000
ROA not before:           Mon 31 Jul 2023 00:02:17 +0000
ROA not after:            Mon 29 Jul 2024 00:07:17 +0000
asID:                     136088
IP address blocks:        103.87.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:43:ee:db:00:ad:ab:2d:8e:64:83:63:e7:bc:47:14:27:07:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul 31 00:02:17 2023 GMT
            Not After : Jul 29 00:07:17 2024 GMT
        Subject: CN=95C05B74566DC78A1CFF9BE4C8FF400AF4649B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:66:50:61:14:21:72:0c:51:22:e5:37:36:
                    6a:b9:11:55:ef:6f:7c:34:7c:ad:f1:2a:5b:6c:c0:
                    c4:86:eb:c3:8e:4e:c8:8e:73:a0:da:d6:f3:9e:55:
                    81:18:f5:1b:5e:3b:45:26:ee:87:89:73:a3:6e:12:
                    85:f4:20:db:2f:ba:82:fc:34:99:4d:63:9a:58:e3:
                    31:4c:10:2d:5d:e2:56:89:9d:a6:bd:68:f2:b4:41:
                    f7:e9:7f:b2:8b:f2:de:7e:8d:ff:28:65:3e:e3:96:
                    f9:2f:57:8c:0b:6a:09:c4:27:f6:29:3d:26:08:5a:
                    1a:0d:9d:5a:a0:c3:5d:47:c9:df:81:ab:c7:ea:f4:
                    79:4d:86:52:66:18:08:d6:93:26:c2:36:05:17:1e:
                    43:b7:53:77:63:9f:e0:81:25:5e:e1:f1:57:82:86:
                    15:76:9a:f7:12:30:29:5f:71:8a:b1:88:7f:21:9f:
                    e2:5c:f8:78:03:39:dd:c3:dc:65:e6:1d:9d:60:05:
                    2b:17:19:2c:e5:3a:4f:a8:1a:1e:a8:c5:ce:d4:ea:
                    96:6d:84:ff:a1:9e:a1:17:c8:3b:3b:1c:4d:77:35:
                    a7:5e:9e:85:83:25:b6:cb:96:80:47:77:46:30:ee:
                    44:ae:38:26:eb:ca:37:86:85:62:12:76:83:6b:d6:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:5B:74:56:6D:C7:8A:1C:FF:9B:E4:C8:FF:40:0A:F4:64:9B:4E
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:2f:8f:f4:a6:ed:64:56:5e:5e:25:81:7c:70:f6:be:37:cd:
         c9:ae:9e:20:5f:95:20:22:f3:a7:bb:e3:94:85:db:99:70:30:
         a6:1a:e0:12:df:b7:db:8f:6a:6a:32:82:75:c2:40:7c:fd:7f:
         9e:9f:c7:cf:58:39:2f:8b:89:d8:b3:ad:a9:0f:b6:c1:61:08:
         b3:2d:f5:01:cd:de:17:92:61:11:fd:1f:1f:68:6e:5b:be:1d:
         0a:97:ad:36:88:ea:91:fc:52:2e:47:d8:f5:b3:04:4a:89:5c:
         e4:cb:c5:0c:e5:a3:1f:50:94:ca:ab:45:64:21:40:90:92:68:
         99:97:4a:dd:bf:8b:f7:7b:1f:8c:e9:f2:63:41:05:5b:87:cc:
         29:fd:eb:31:f1:df:69:c5:7f:ae:c2:04:36:7d:1d:e1:a1:5c:
         61:95:03:8f:e7:d9:b6:7f:dd:63:32:1c:cb:be:3d:2b:52:db:
         45:dd:95:b2:42:40:b8:df:df:da:6c:08:77:3f:ce:4e:83:72:
         09:6c:15:93:7e:28:2b:3e:25:f2:53:39:39:18:57:07:39:d6:
         cf:32:bb:67:59:bb:7c:6e:3b:0c:9b:1a:80:9d:25:8f:83:f6:
         a1:18:5e:a8:98:15:19:33:8a:ca:6c:c4:db:29:cd:0d:2e:6e:
         4a:d1:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 22:58:34 2024 by rpki-client on console-ams.rpki-client.org