Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa
File:                     3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (raw, json)
Hash identifier:          l6S7ekaCFeYGjR1SnMPplYolzKgkU16zZlB4elURTUY=
Subject key identifier:   05:60:47:24:F5:66:C6:EB:9A:3A:F2:21:A8:54:1C:CD:0E:35:A8:C3
Certificate issuer:       /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial:       28445AD478E05130550A5410757128385C79A175
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa
Signing time:             Mon 31 Jul 2023 00:03:17 +0000
ROA not before:           Sun 30 Jul 2023 23:58:17 +0000
ROA not after:            Mon 29 Jul 2024 00:03:17 +0000
asID:                     138113
IP address blocks:        103.126.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
                          rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 15:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:44:5a:d4:78:e0:51:30:55:0a:54:10:75:71:28:38:5c:79:a1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
        Validity
            Not Before: Jul 30 23:58:17 2023 GMT
            Not After : Jul 29 00:03:17 2024 GMT
        Subject: CN=05604724F566C6EB9A3AF221A8541CCD0E35A8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:92:3f:77:dd:b9:56:e7:b7:ca:29:ff:cc:
                    96:96:e3:b8:bb:c6:b9:fe:8f:59:51:4d:62:63:f0:
                    3a:42:b3:ef:be:99:65:b9:c5:ec:ef:23:ce:f4:26:
                    8d:cf:f1:bb:eb:d4:c7:fe:5c:50:ca:66:e7:f6:c7:
                    36:58:be:a2:7e:af:4d:78:32:1e:34:3e:fd:48:2e:
                    1d:50:20:2d:6c:1e:8e:e9:6c:7d:ef:3c:73:b2:cb:
                    9e:d3:84:7d:8c:b1:33:b2:23:16:4d:a4:d3:11:30:
                    13:ab:9c:2c:f1:43:07:ab:a6:8e:98:17:eb:76:c5:
                    2b:93:1b:a2:e9:09:0f:b2:27:f1:af:c1:4e:2f:00:
                    3c:69:6b:f9:80:57:76:1a:f0:bf:2d:d3:89:22:0f:
                    3b:25:49:36:21:91:ac:27:0e:27:f1:a3:c1:de:43:
                    06:51:cf:88:da:5c:6d:5c:46:8a:c4:51:96:74:3d:
                    9c:98:1f:7d:31:4a:af:b0:9c:f5:3d:38:03:80:3e:
                    43:3b:28:77:99:e9:24:31:0e:f0:4b:3d:1d:49:6a:
                    bb:e9:e2:85:4c:d7:d6:ef:2f:d5:e1:1c:49:a6:db:
                    0b:63:ae:41:fc:ee:7e:6c:1e:c3:0d:d2:d5:1e:ca:
                    3e:6a:4d:8a:f8:77:4a:c7:fd:90:f2:e4:f7:62:6e:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:60:47:24:F5:66:C6:EB:9A:3A:F2:21:A8:54:1C:CD:0E:35:A8:C3
            X509v3 Authority Key Identifier:
                keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:25:37:88:8c:6b:b3:88:6f:3d:cc:a4:14:ce:47:f3:07:ab:
         35:95:2c:e9:74:22:f6:fa:32:43:aa:27:f7:c9:46:37:c5:00:
         21:26:68:af:c2:5b:cd:4b:5c:6b:39:e4:5e:fc:8d:ae:eb:c3:
         0c:b5:d9:9a:92:4d:72:1e:8f:99:3a:90:cf:87:1c:79:ab:c2:
         77:e4:48:9c:be:f2:74:01:6e:d7:b9:2d:29:03:96:c8:14:af:
         d4:e7:06:c8:2d:a6:6a:5b:3b:cd:f4:b1:05:6c:72:b0:4b:e0:
         f2:01:ab:ee:6d:43:ef:f9:67:6c:c3:fe:a8:36:f5:55:31:94:
         9a:28:f8:d3:1b:a0:76:8c:89:f5:93:11:fd:31:dc:80:5f:32:
         30:53:49:02:0c:0e:8c:61:ee:64:fe:67:a5:97:fe:7b:d9:be:
         63:d3:3b:d3:89:09:ce:a9:7a:af:84:21:2b:88:37:a8:53:80:
         4f:f1:1f:5e:c1:11:62:24:1f:2e:d7:1a:78:bb:d5:ef:8a:39:
         f7:96:e3:ef:47:1d:c7:1b:3d:00:c0:30:6c:72:29:18:77:a7:
         96:7d:c8:2c:3c:3e:99:f0:ac:2c:22:a8:0f:59:87:92:b0:8a:
         0f:bb:a3:f8:e7:a9:12:a5:59:3e:89:99:5f:90:fd:3e:44:a4:
         58:88:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 08:00:19 2024 by rpki-client on console-ams.rpki-client.org