Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
File:                     3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa (raw, json)
Hash identifier:          xlQEc7JlyT3ZUMA5NVkIbOhgP9f5RcyMscr102/e71o=
Subject key identifier:   03:44:E2:4F:F9:CD:2E:AA:9F:9B:00:62:BE:7F:6B:D6:48:C3:80:95
Certificate issuer:       /CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
Certificate serial:       4B3C180A211D4455F88444C3E9238ECB33D2F610
Authority key identifier: E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa
Signing time:             Mon 31 Jul 2023 00:07:23 +0000
ROA not before:           Mon 31 Jul 2023 00:02:23 +0000
ROA not after:            Mon 29 Jul 2024 00:07:23 +0000
asID:                     138079
IP address blocks:        103.130.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl
                          rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:18:0a:21:1d:44:55:f8:84:44:c3:e9:23:8e:cb:33:d2:f6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52
        Validity
            Not Before: Jul 31 00:02:23 2023 GMT
            Not After : Jul 29 00:07:23 2024 GMT
        Subject: CN=0344E24FF9CD2EAA9F9B0062BE7F6BD648C38095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:bc:32:d3:e9:6d:ca:7f:82:78:be:2d:04:
                    d3:2c:1c:bf:b7:8d:57:ed:f4:d1:e6:28:13:a1:ff:
                    94:a0:cd:c1:5f:3e:89:52:5c:c7:e4:61:20:f1:48:
                    01:66:a8:c5:fd:e2:e2:1c:3c:b1:5e:76:30:ed:7d:
                    c7:8e:bd:a9:c5:28:ec:6d:da:3a:d9:fa:4f:c3:75:
                    b4:71:1d:8e:6f:96:06:f9:32:02:6e:67:4c:a6:74:
                    21:69:f2:4e:4f:9a:92:0b:56:00:53:da:c0:99:42:
                    e9:82:c7:f6:bb:11:2a:77:01:d9:a0:9c:48:00:5c:
                    a2:eb:99:ae:03:b1:cc:ec:cc:f2:4c:2c:e4:73:1a:
                    16:24:47:8c:36:39:56:90:1c:80:de:f0:b4:26:a5:
                    6c:ba:3e:38:23:13:60:d1:b1:9e:73:a5:ec:47:51:
                    d6:0d:f1:34:40:1d:3a:7e:6c:97:a4:35:47:6d:a5:
                    39:3b:62:b2:9b:d1:49:c0:c8:b8:18:e5:f0:78:14:
                    9e:3f:96:39:a8:78:1f:24:f4:3c:c9:23:96:2f:6b:
                    c4:76:17:ec:54:99:5a:01:e5:10:47:e2:c8:16:ce:
                    f0:2d:4b:a7:fd:b7:fd:4b:ea:58:f7:44:d2:18:d5:
                    1c:31:4f:a6:25:ec:d4:40:d7:7f:36:53:a1:11:d0:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:44:E2:4F:F9:CD:2E:AA:9F:9B:00:62:BE:7F:6B:D6:48:C3:80:95
            X509v3 Authority Key Identifier:
                keyid:E1:7A:5E:B9:41:56:DE:23:FC:DC:8F:29:B2:10:FC:DE:DC:F0:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17A5EB94156DE23FCDC8F29B210FCDEDCF08F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/912a3f28-8273-4dd5-87fc-1ef00acac9b6/0/3130332e3133302e36322e302f32342d3234203d3e20313338303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:bf:af:53:64:59:96:d0:b2:3c:8e:f6:31:b9:c7:5e:d4:3d:
         cf:12:5f:97:d0:93:e0:0d:06:0d:ff:24:35:5e:9f:5b:12:31:
         6a:6c:ef:b9:de:c5:fd:97:c8:01:e1:4e:29:ea:0a:7a:6e:90:
         83:80:23:03:c0:e4:dd:4a:79:eb:a3:55:ae:b8:4c:02:30:54:
         62:a1:0b:e8:07:7d:22:73:9d:90:89:a9:82:8e:fb:e4:9c:13:
         29:b7:48:c5:60:d1:0e:e2:ee:b3:d6:b7:4a:6c:67:67:24:d0:
         bb:a1:f0:35:0b:ec:f6:5d:e2:b9:3f:89:67:b7:ad:47:a2:f6:
         c4:39:af:9f:eb:08:b7:d0:6f:c3:4f:12:c5:57:d0:f4:24:a2:
         a0:2f:f4:7c:73:a2:15:75:d5:b3:b0:24:bb:14:4f:c6:d9:e8:
         20:39:7c:bc:3c:9b:e6:66:95:cb:43:5a:d7:97:85:aa:1e:b4:
         e1:9a:ac:5b:0d:09:ff:fc:22:e7:7a:01:8b:e3:d5:5e:03:eb:
         bb:78:c9:18:09:cd:0a:f7:ca:44:11:d8:24:2a:80:05:b6:ae:
         23:09:c0:c9:02:2f:4a:75:fe:c2:d0:52:61:e9:68:ec:42:3a:
         9d:9a:a7:9f:eb:4f:67:05:92:0c:97:60:0e:bb:d0:6c:ad:b8:
         ef:47:c2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 12:29:10 2024 by rpki-client on console-fra.rpki-client.org