Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa
File:                     3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (raw, json)
Hash identifier:          xmt+A4bLBuKOdD4dviM6s0qu1j+ylxINDSy/aubpxOM=
Subject key identifier:   90:17:F1:CF:89:28:16:25:E8:C3:3D:46:C4:7C:0F:19:99:18:7A:80
Certificate issuer:       /CN=8CFA88063D5C0A51C1D737A5170338865A245358
Certificate serial:       6FC01771D45EF1C109B5D3CA994C79DC91B50364
Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa
Signing time:             Mon 31 Jul 2023 00:03:16 +0000
ROA not before:           Sun 30 Jul 2023 23:58:16 +0000
ROA not after:            Mon 29 Jul 2024 00:03:16 +0000
asID:                     138113
IP address blocks:        103.126.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl
                          rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c0:17:71:d4:5e:f1:c1:09:b5:d3:ca:99:4c:79:dc:91:b5:03:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358
        Validity
            Not Before: Jul 30 23:58:16 2023 GMT
            Not After : Jul 29 00:03:16 2024 GMT
        Subject: CN=9017F1CF89281625E8C33D46C47C0F1999187A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:d3:9a:6f:d6:f4:40:8b:ee:65:a8:2b:e4:
                    ff:df:8d:89:c1:a2:7b:1b:1c:b9:6d:18:49:6d:bd:
                    58:d4:f0:34:10:c7:e8:07:5d:b7:0e:54:8b:bb:1f:
                    e4:2d:46:90:4a:22:b6:17:a7:2b:9b:7e:4f:38:a8:
                    5c:43:ae:c9:19:6a:78:0e:d2:91:ff:19:0e:23:1b:
                    7b:d0:42:7f:1d:e8:b8:5b:31:04:97:73:17:4c:ef:
                    c0:66:03:3a:30:64:00:73:77:fb:3f:68:a7:24:d2:
                    6a:4d:7f:17:a7:8e:4a:f5:28:7e:21:16:35:f8:b3:
                    c4:d6:f2:b4:e0:ee:6e:6d:c0:fb:52:52:07:57:ac:
                    b0:ba:d0:ec:25:08:88:96:15:6e:13:a2:61:34:b9:
                    4e:d3:8f:0b:7c:4b:9c:8f:ed:60:90:c7:db:58:aa:
                    10:fa:42:3c:b5:da:39:31:13:2d:20:47:14:58:1b:
                    62:1d:0c:49:59:64:32:06:97:0c:d6:df:ad:b8:f2:
                    f8:78:1f:1d:dd:c8:a4:50:51:b1:6d:74:57:55:b3:
                    5d:6b:fe:8a:93:b5:a0:e7:fa:1e:a3:96:8d:74:0c:
                    0a:ac:a9:ae:d7:bb:95:87:e9:df:c2:51:d1:79:e6:
                    fc:51:f9:ca:a8:11:9c:f3:b6:c9:f8:8e:26:cd:8e:
                    03:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:17:F1:CF:89:28:16:25:E8:C3:3D:46:C4:7C:0F:19:99:18:7A:80
            X509v3 Authority Key Identifier:
                keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:0a:2a:57:8d:5b:5d:8f:a7:95:61:d6:5f:ee:96:91:b0:0c:
         e5:b7:e5:90:6f:9b:89:9e:ac:40:dc:18:09:2d:f8:a6:c7:26:
         74:4d:42:b6:19:da:c5:db:dd:cd:7d:8f:27:bc:c6:cf:5a:91:
         14:6c:a6:e0:a7:d7:cb:80:a8:52:fe:5a:a8:a3:00:b6:12:c0:
         89:32:94:99:7c:c1:ec:cb:0c:f6:0d:13:93:a7:dc:e1:d2:df:
         6a:7e:22:f5:e4:72:05:ac:00:3a:14:91:df:3f:a3:07:3b:0e:
         38:4e:d4:62:92:f3:43:d7:f5:0e:87:7d:c6:d4:6b:93:a6:c6:
         6b:97:f4:a4:b4:48:96:d0:02:af:76:d0:5e:b3:ee:ee:c9:d5:
         50:1f:f7:c7:4c:a5:86:db:f7:17:6b:e2:aa:03:a9:b4:31:be:
         79:94:25:fc:ff:0b:02:20:1f:02:73:d3:77:62:de:a1:6d:13:
         d2:13:70:78:44:71:7d:3d:ec:fd:96:70:11:23:34:4a:5f:e2:
         f6:4a:03:d4:16:97:f1:56:52:41:53:5c:86:01:cb:be:24:2f:
         e1:ff:bb:43:27:78:ed:47:f0:e7:3e:64:6c:31:b0:39:99:c1:
         a3:d3:b1:b8:45:65:b2:b0:a5:45:9a:16:5d:e8:0e:c7:dc:38:
         9e:b2:36:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:07 2024 by rpki-client on console-fra.rpki-client.org