Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
File:                     3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (raw, json)
Hash identifier:          8HFhdwlPHxzp4lAQHAM1qRXH3Rf0GEFaR9+wvM9sZow=
Subject key identifier:   17:1A:F4:E9:2D:4F:BF:66:8C:CE:E6:A9:7C:81:5E:2E:88:BE:B2:95
Certificate issuer:       /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial:       35617AC0E37632C63B3868913A0E9A4699B05E29
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa
Signing time:             Thu 12 Oct 2023 02:51:12 +0000
ROA not before:           Thu 12 Oct 2023 02:46:12 +0000
ROA not after:            Thu 10 Oct 2024 02:51:12 +0000
asID:                     139956
IP address blocks:        103.142.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
                          rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:61:7a:c0:e3:76:32:c6:3b:38:68:91:3a:0e:9a:46:99:b0:5e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
        Validity
            Not Before: Oct 12 02:46:12 2023 GMT
            Not After : Oct 10 02:51:12 2024 GMT
        Subject: CN=171AF4E92D4FBF668CCEE6A97C815E2E88BEB295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:f5:ba:9c:d0:d2:89:f4:83:43:c5:55:ca:
                    e0:07:ab:8d:d1:bc:bc:59:92:86:fd:01:78:57:a6:
                    9f:4c:ae:ba:1c:ec:5f:cd:da:cf:52:34:ce:60:85:
                    a6:4b:e7:8c:10:4b:c4:54:1c:da:19:b1:73:32:33:
                    3c:64:ee:b6:20:2d:96:62:7c:df:24:f1:8e:95:36:
                    f7:c6:c0:74:56:44:b6:5f:ff:a9:15:97:22:4a:aa:
                    56:49:43:a6:66:72:88:47:d0:6a:49:f2:27:6e:c4:
                    c4:10:6b:2d:38:09:35:89:1a:9a:76:92:f4:24:d9:
                    49:bf:2f:89:34:07:59:59:ce:b6:2d:40:44:59:4d:
                    50:28:d6:22:c5:79:11:d0:f1:76:c0:f4:9a:fb:48:
                    85:e8:24:fe:6f:a2:29:00:99:86:0c:16:f5:57:9c:
                    67:1a:d0:25:e9:34:5e:5d:3e:3d:95:1c:a0:06:bd:
                    fd:44:a8:c3:30:51:57:f1:fe:a8:5f:d1:ca:23:4c:
                    5e:8c:e8:98:58:c9:f1:58:6d:9f:d2:f7:81:16:8f:
                    c2:bb:25:37:b2:e1:80:26:e3:ff:94:63:84:79:55:
                    ee:87:33:ff:3d:5d:91:49:ee:37:94:94:94:f3:f1:
                    e5:f5:d5:a8:91:f5:71:ab:8a:57:10:db:16:13:4c:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1A:F4:E9:2D:4F:BF:66:8C:CE:E6:A9:7C:81:5E:2E:88:BE:B2:95
            X509v3 Authority Key Identifier:
                keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:20:8e:09:62:db:37:de:74:63:35:d7:c2:f0:f5:92:f1:93:
         2a:7f:f8:69:ad:f6:35:13:9a:d5:c7:55:8d:d7:3d:b7:0e:76:
         d4:2e:bd:47:33:ee:37:9c:09:a8:66:54:0a:32:ec:af:ba:cd:
         8c:f6:59:cd:b3:96:8a:13:c3:f0:96:10:e5:d9:8a:7a:46:f3:
         eb:85:94:dd:be:b7:40:f0:e1:06:5d:67:d1:ef:7c:4c:bf:da:
         65:47:15:af:a7:87:11:c0:c3:b5:90:d6:a5:1a:23:79:4a:b1:
         a0:2f:a9:14:e5:23:60:94:c7:8b:3d:20:eb:90:88:65:b8:17:
         52:89:43:51:6b:e7:a5:1b:8b:c8:e4:f0:7d:a5:c8:9d:c3:76:
         4d:6c:7e:bb:4f:25:f1:c0:b6:9b:2f:12:d6:a4:64:4c:00:cc:
         e7:e0:08:30:5b:13:55:5b:6e:65:47:b1:07:76:41:57:7a:a7:
         57:94:7f:0c:e7:fb:91:1f:38:2c:fc:04:96:e3:3c:97:62:ab:
         3f:a4:ce:02:d7:2b:2a:63:3d:78:85:96:8d:24:f6:92:fc:b2:
         80:9a:64:0a:6b:5b:43:71:3d:3b:cb:f2:82:bc:b7:c2:fe:4f:
         d9:dd:10:7a:17:bb:c0:9e:0f:b6:2c:eb:2f:de:0b:30:bf:e7:
         07:bb:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:09:49 2024 by rpki-client on console-ams.rpki-client.org