Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa
File:                     3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa (raw, json)
Hash identifier:          jjtGLiGYhthCgYEl8CAEWMlpk/77XBaG9QDwpzipvb4=
Subject key identifier:   74:A4:A9:DB:0D:B3:D3:90:8E:EF:07:C8:14:23:0F:BE:89:2F:7A:C3
Certificate issuer:       /CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
Certificate serial:       417CA17DDD41A76AF98CEF681052F26EB3FF13A8
Authority key identifier: 9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa
Signing time:             Mon 31 Jul 2023 00:13:38 +0000
ROA not before:           Mon 31 Jul 2023 00:08:38 +0000
ROA not after:            Mon 29 Jul 2024 00:13:38 +0000
asID:                     137325
IP address blocks:        103.111.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl
                          rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 18:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7c:a1:7d:dd:41:a7:6a:f9:8c:ef:68:10:52:f2:6e:b3:ff:13:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CA6DB3A7AC14D26875264793FB5D488BCF01F45
        Validity
            Not Before: Jul 31 00:08:38 2023 GMT
            Not After : Jul 29 00:13:38 2024 GMT
        Subject: CN=74A4A9DB0DB3D3908EEF07C814230FBE892F7AC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:0f:15:2f:85:28:b6:51:d7:4f:1a:5f:d7:
                    c7:c7:ef:14:78:14:90:ff:c9:81:3c:6d:c3:93:52:
                    57:c5:f9:f3:f1:36:15:6c:36:97:83:94:ad:e2:26:
                    ac:0c:56:b7:43:08:14:41:61:fe:00:6e:33:79:90:
                    2a:d0:17:f8:d5:1a:45:99:46:19:6f:ce:5f:cc:87:
                    ae:2d:56:82:54:99:b4:e7:0c:bd:74:7d:22:53:6e:
                    6f:9f:94:d0:85:f4:0e:90:5a:16:5c:71:3a:16:55:
                    21:7b:3e:7b:4d:ad:3d:29:65:8e:a3:d8:4a:27:23:
                    67:ba:3f:97:0c:0e:fd:46:c7:2a:80:41:e0:d0:2f:
                    ee:cf:c0:23:d2:26:49:5c:a2:32:93:6e:32:76:ca:
                    0d:3d:e4:dc:08:af:97:61:89:bf:82:cf:f1:85:a3:
                    9e:17:48:c6:f7:db:d4:5f:d8:88:b3:1e:ea:5d:61:
                    3b:f7:5e:4d:2c:8f:b5:84:b9:12:af:34:ff:0e:e1:
                    cc:bd:ac:fc:92:fd:9d:b1:55:f0:ab:9b:f4:43:a7:
                    73:f7:81:40:cf:92:b5:4c:c1:9e:2f:2f:80:d4:67:
                    06:1f:91:88:1e:e9:d5:02:9b:93:4e:64:fd:6c:47:
                    e9:2b:d9:df:1b:39:1b:b3:c0:d3:a5:a9:a8:6e:a9:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A4:A9:DB:0D:B3:D3:90:8E:EF:07:C8:14:23:0F:BE:89:2F:7A:C3
            X509v3 Authority Key Identifier:
                keyid:9C:A6:DB:3A:7A:C1:4D:26:87:52:64:79:3F:B5:D4:88:BC:F0:1F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CA6DB3A7AC14D26875264793FB5D488BCF01F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90652bc6-8bb6-4f26-88b1-380dac18e268/0/3130332e3131312e3231372e302f32342d3234203d3e20313337333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:54:ff:a5:6e:f9:85:ef:50:f8:43:b2:f3:ba:43:2a:87:e3:
         39:04:83:5e:f2:15:fb:eb:11:72:cc:33:d6:26:e1:a7:d9:fc:
         03:36:20:c4:f7:48:2d:a5:b5:45:7b:45:3f:c4:36:da:bf:bc:
         1f:6b:58:68:b6:e8:23:a5:59:1b:db:f0:50:45:cd:81:fb:bb:
         03:d1:e0:a7:ce:fc:fa:4c:97:79:25:e0:20:d0:b3:bc:07:98:
         1c:35:5d:a8:11:26:ce:4c:c0:6c:48:8d:23:13:b0:b8:ac:b1:
         6e:2b:e2:9a:ae:77:fc:39:d0:2d:6f:0c:c9:3f:6e:e8:8a:c9:
         91:92:48:1c:21:12:20:6a:7f:8e:19:e4:ab:6a:f3:84:0d:6b:
         12:17:38:df:d9:b7:5f:7e:4f:94:5a:f6:f9:4a:7e:87:0d:7c:
         6f:0f:86:b9:dc:76:a7:32:4b:ec:1a:64:15:23:aa:3f:b3:3a:
         56:10:d2:86:71:d7:d8:55:bf:1f:97:fe:44:5a:27:10:09:15:
         b4:e1:9d:b1:61:df:85:e4:06:ef:c2:2e:3c:11:f4:5d:9e:98:
         05:e2:f6:03:92:7e:13:a2:5d:12:8a:82:5d:bc:66:8a:76:c2:
         bb:9d:ae:e0:0b:0d:fe:e9:98:df:57:18:18:ef:f5:71:e6:e1:
         46:5f:7b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:06:40 2024 by rpki-client on console-fra.rpki-client.org