Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
File:                     3130332e31382e32382e302f32322d3234203d3e203435373036.roa (raw, json)
Hash identifier:          60zaoi3ZYkNWBLdpNil6IZpeLx2nl3Rr6aTtV8haHHc=
Subject key identifier:   60:57:0C:80:CE:21:9B:33:8B:A3:10:37:13:5E:67:7C:E8:09:1C:27
Certificate issuer:       /CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
Certificate serial:       5C4EA2D7044BC1EC97C82415CF6700FF6BD20750
Authority key identifier: 49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa
Signing time:             Fri 04 Aug 2023 03:00:00 +0000
ROA not before:           Fri 04 Aug 2023 02:55:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     45706
IP address blocks:        103.18.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl
                          rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4e:a2:d7:04:4b:c1:ec:97:c8:24:15:cf:67:00:ff:6b:d2:07:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490B3FBCC6F0FC65785096A153DC87BC5057ACE5
        Validity
            Not Before: Aug  4 02:55:00 2023 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=60570C80CE219B338BA31037135E677CE8091C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:8f:dc:60:7a:67:c8:9a:e8:7d:b4:87:de:
                    87:e5:32:5d:03:13:59:f9:ee:ef:87:d8:3d:ea:5a:
                    11:c9:e9:fe:04:11:fd:4d:dc:04:9a:84:49:cb:b0:
                    17:8d:61:db:ac:0a:bc:5c:c3:dc:53:b7:bd:57:cc:
                    0a:e0:30:cd:99:2b:8a:7d:d5:15:bb:55:d4:6e:d1:
                    bb:4c:84:a1:e0:af:09:d5:4d:de:b4:85:97:01:94:
                    13:3e:fd:f8:70:6d:41:f2:c3:14:2a:f7:3e:49:9a:
                    3f:ab:1d:d7:48:d7:bb:fd:b8:4b:bc:7b:fc:99:c8:
                    6f:42:fe:10:9d:6f:d8:a2:f0:21:a3:cc:d5:b7:26:
                    83:60:cb:77:05:f2:99:a2:38:02:d4:05:c1:26:9d:
                    b1:ed:3b:1d:84:56:63:aa:42:33:fc:0c:c8:4e:3e:
                    10:0f:7b:10:18:cc:1f:b4:bb:8f:a9:37:6c:27:c8:
                    28:a2:65:69:b9:24:12:3a:38:cd:a0:91:87:5f:ce:
                    1d:3f:e1:f0:f8:9a:d0:36:62:3a:a5:47:b8:4d:72:
                    22:06:ec:14:ef:97:45:8b:4d:d6:6e:46:ef:a4:68:
                    fe:a6:fc:8d:12:51:8f:f2:33:ce:3b:a6:9a:94:59:
                    18:51:b3:47:a5:8f:a9:92:f9:1b:d0:6d:f6:d9:a7:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:57:0C:80:CE:21:9B:33:8B:A3:10:37:13:5E:67:7C:E8:09:1C:27
            X509v3 Authority Key Identifier:
                keyid:49:0B:3F:BC:C6:F0:FC:65:78:50:96:A1:53:DC:87:BC:50:57:AC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/490B3FBCC6F0FC65785096A153DC87BC5057ACE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77cd68f4-69a5-475f-aee4-3ef4b8d302dd/0/3130332e31382e32382e302f32322d3234203d3e203435373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:b1:ab:6f:d3:a3:b8:ac:e9:ab:8e:a8:57:a8:b1:dd:ef:b2:
         d1:27:3d:a6:e1:3f:0c:46:9a:54:11:96:3b:ff:25:db:a4:c5:
         58:b7:db:d5:ae:f7:db:8a:7c:c1:d1:c0:67:7b:b2:84:40:a4:
         95:17:5b:f8:dd:2e:33:01:30:71:ea:1f:55:99:dd:ef:67:49:
         0e:c7:5c:2c:b1:48:e9:c5:74:14:8b:fb:87:85:73:0e:6b:1d:
         67:04:ed:7c:49:0b:a8:d1:29:0c:ad:4b:8c:20:39:62:1a:06:
         8d:e8:b2:c6:4a:93:09:27:3e:03:64:11:cc:c8:cc:7b:a5:d5:
         70:57:c3:d0:e7:a9:7a:59:6c:a9:6f:99:06:0d:90:49:b4:2f:
         5b:23:b0:4c:ca:7f:7e:58:00:2f:f8:ab:4b:65:18:a0:3d:3c:
         01:c4:ae:2a:88:3a:72:70:5a:b4:25:ba:30:50:78:12:f7:52:
         0a:cf:a8:f7:3e:e2:3b:06:72:3b:c8:7e:93:96:7f:74:a7:d6:
         56:02:7e:40:5b:43:8c:49:9e:88:50:08:da:3d:0e:e5:64:9a:
         ec:e5:67:2c:c9:8f:50:93:97:d6:2f:ec:71:4e:65:27:41:67:
         e0:4f:37:8d:7f:77:79:aa:5c:86:1b:f7:60:67:23:9a:66:92:
         a7:2e:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:34:54 2024 by rpki-client on console-ams.rpki-client.org