Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
File:                     3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (raw, json)
Hash identifier:          52rhvmOxqCD96luZ7kdJOILejr/v2dKRLtV7p1Aq7mA=
Subject key identifier:   D6:5A:6F:30:45:53:2D:5F:D0:12:C6:8F:77:62:C5:9B:A9:E9:C9:43
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       571BF1D1D6727B2F57C7CF242F793495FB1BDB8A
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
Signing time:             Mon 31 Jul 2023 00:05:48 +0000
ROA not before:           Mon 31 Jul 2023 00:00:48 +0000
ROA not after:            Mon 29 Jul 2024 00:05:48 +0000
asID:                     138100
IP address blocks:        103.125.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:f1:d1:d6:72:7b:2f:57:c7:cf:24:2f:79:34:95:fb:1b:db:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jul 31 00:00:48 2023 GMT
            Not After : Jul 29 00:05:48 2024 GMT
        Subject: CN=D65A6F3045532D5FD012C68F7762C59BA9E9C943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:67:12:53:86:c1:ba:fd:5e:cd:b8:c7:53:
                    72:4d:08:e6:ff:79:12:a0:94:2d:3e:71:ce:da:fe:
                    19:09:f0:2f:0b:13:1b:98:fc:a7:f8:62:07:71:98:
                    e4:67:b6:f2:98:82:66:12:54:89:92:ff:a2:af:a8:
                    a0:51:bf:bd:bd:63:ab:b8:b3:fb:b4:66:e0:85:1c:
                    ea:6f:38:ff:11:5b:64:9d:79:b3:cf:58:07:ba:69:
                    ec:c3:ee:60:ad:a4:a9:91:59:46:dc:e9:15:7d:1f:
                    2d:23:03:2d:2d:38:a0:8f:3f:e0:40:7f:93:f2:81:
                    55:9f:ea:70:28:44:c2:42:8f:bc:9a:e2:2c:9f:21:
                    19:da:27:ac:0c:25:29:d1:47:14:8f:2d:b4:0a:e9:
                    a1:3d:93:28:9d:2f:82:89:7b:28:6a:2f:7d:a3:b0:
                    26:74:ff:da:51:00:c2:f5:97:57:62:6c:3a:96:0f:
                    a1:86:49:0a:67:7a:ee:1f:21:33:c9:4e:4c:98:74:
                    fc:c1:59:08:a0:d3:fe:a7:74:d1:64:c0:b1:1c:f8:
                    58:96:35:dc:88:60:00:e4:da:22:b1:7b:be:69:ca:
                    54:32:57:34:23:3b:d4:5d:4d:41:16:d1:9a:74:52:
                    f3:c4:2f:df:9a:40:ff:48:3c:a1:4b:45:21:5f:a5:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:6F:30:45:53:2D:5F:D0:12:C6:8F:77:62:C5:9B:A9:E9:C9:43
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:48:bd:18:90:62:13:5d:48:b6:0e:10:47:b3:89:fb:23:
         86:7f:a0:a6:c9:53:ce:3d:42:b9:3c:89:e3:64:bf:a0:c0:48:
         67:0f:c4:56:51:93:29:a2:61:6f:80:13:e9:be:90:f4:49:c6:
         dd:7c:50:ee:ce:c2:e5:c2:18:78:fa:0f:6c:21:37:6e:14:9a:
         3c:f3:fd:db:f7:03:2e:79:42:09:d2:1b:53:6b:2c:5e:41:2f:
         eb:28:23:7b:f5:bc:ac:ea:83:9e:c9:74:0f:c0:5f:43:8b:e6:
         13:18:4c:b4:71:da:bb:f5:46:ab:91:2d:23:1d:da:78:93:92:
         94:ef:09:4c:7d:1e:97:05:10:98:9e:cc:88:96:2a:f6:b9:3a:
         07:d8:c5:83:10:22:e4:65:45:40:4b:d5:4c:d7:c9:a5:64:7a:
         dd:ca:b6:ae:f7:f3:eb:3e:93:a8:59:39:81:f9:dd:04:ad:55:
         90:12:34:6c:de:8b:a2:dd:49:f1:db:ba:cf:5a:23:01:e0:44:
         5c:d6:fb:7b:28:d8:a3:7d:f9:bd:82:ab:9b:e9:94:e0:ac:9c:
         3f:4c:d9:c1:ed:a5:8a:a8:09:f6:9f:1f:65:f7:9b:cc:60:73:
         7b:b1:01:c6:76:33:84:e8:cd:8c:ef:10:cf:fc:e9:5b:ea:12:
         2b:17:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:10 2024 by rpki-client on console-ams.rpki-client.org