Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa
File:                     3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa (raw, json)
Hash identifier:          /XmE8GqQpOofiu/l+W6MdNdpbFm8RCI0jSOUrN0XIw8=
Subject key identifier:   5C:9E:91:98:4C:E2:58:33:D6:8B:0E:35:F6:8A:72:88:62:E5:5E:ED
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       503425ABE0D17DF6E7D07D7137CD140A674F71DA
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa
Signing time:             Mon 31 Jul 2023 00:05:48 +0000
ROA not before:           Mon 31 Jul 2023 00:00:48 +0000
ROA not after:            Mon 29 Jul 2024 00:05:48 +0000
asID:                     138100
IP address blocks:        103.125.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:34:25:ab:e0:d1:7d:f6:e7:d0:7d:71:37:cd:14:0a:67:4f:71:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jul 31 00:00:48 2023 GMT
            Not After : Jul 29 00:05:48 2024 GMT
        Subject: CN=5C9E91984CE25833D68B0E35F68A728862E55EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:5d:a7:09:c0:0d:1f:c4:b9:79:57:15:39:
                    ab:3f:f2:38:81:65:6c:47:71:d3:57:83:c5:a7:3b:
                    1c:f1:eb:a9:f1:22:0c:cf:71:1b:17:a0:83:1d:f2:
                    5b:5f:bf:52:93:09:d0:16:c7:68:36:4d:59:e4:43:
                    e7:8f:94:db:7c:1d:2c:ae:74:1b:4e:45:80:63:b8:
                    f0:ca:49:0e:13:91:c0:69:52:ba:aa:b2:b2:bd:3c:
                    d0:0b:2d:b9:0c:78:a4:1e:64:43:a5:6c:24:40:c5:
                    c2:d3:86:81:99:e9:2d:1b:66:68:fb:92:ca:54:f9:
                    90:62:5a:17:17:f9:2e:5c:0c:0d:24:00:53:79:11:
                    9a:c4:59:dd:11:56:8e:f8:90:1c:dd:36:d9:8d:a1:
                    1c:b7:a5:e5:9c:7f:b9:df:7b:35:e8:37:7e:ef:81:
                    f6:46:85:af:7e:b3:62:4e:19:39:79:42:5f:ca:63:
                    d2:4b:db:c8:83:bd:67:09:8f:75:e7:76:bd:03:1c:
                    27:69:3b:29:1f:79:da:6e:d2:eb:e9:67:f2:da:82:
                    3e:ee:14:d5:a1:98:a4:88:06:b8:e3:44:e5:c1:b8:
                    52:9a:8f:b0:5e:67:58:0f:08:be:b0:43:61:a6:f9:
                    94:02:7a:cb:56:88:41:33:96:9f:25:38:32:9d:eb:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9E:91:98:4C:E2:58:33:D6:8B:0E:35:F6:8A:72:88:62:E5:5E:ED
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130352e302f32342d3234203d3e20313338313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d2:42:64:1f:c0:40:62:89:33:18:7e:86:b9:81:74:7e:ca:
         e3:40:29:8b:db:5f:46:41:de:f5:00:1f:af:5a:99:8f:f4:1c:
         1c:12:26:30:a4:5d:ca:dd:82:bb:b8:68:f8:77:7e:77:81:dd:
         9a:b5:38:06:4a:ed:51:f8:15:f1:ca:cd:5e:4b:cc:e7:6e:45:
         80:71:1a:f9:d3:23:03:7c:e6:5e:99:74:c3:d6:63:ce:bd:5c:
         46:94:da:14:fb:b6:b1:d3:19:fb:2f:44:40:fa:ac:97:aa:f6:
         16:c7:ea:b8:4f:db:47:ac:31:e9:88:99:ec:34:a9:86:c2:31:
         47:b4:f9:a4:96:88:00:af:47:51:05:f7:66:35:d3:e9:88:e3:
         79:89:58:25:d7:16:a5:b7:8c:6d:4d:9c:41:50:d7:fc:47:61:
         92:80:cf:6c:68:9c:18:ef:aa:d8:e5:2d:99:b8:19:4c:41:a3:
         9a:1a:c1:5c:79:71:29:a4:af:8f:a0:da:97:98:91:ba:d4:8f:
         38:59:cf:52:41:cc:31:4b:8c:34:f2:48:af:b0:d8:59:6d:84:
         89:c7:ef:6c:e1:ac:38:a6:36:5c:ea:2d:f6:af:67:9f:09:03:
         d5:0f:06:6f:de:f4:24:93:61:e8:32:6d:68:8b:69:f0:d2:ad:
         01:4c:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:10 2024 by rpki-client on console-ams.rpki-client.org