Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa
File:                     3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (raw, json)
Hash identifier:          ErKkW0Op+NCVig/xvd2sNQM/Nt80klee5k4EKLTP2dA=
Subject key identifier:   57:8C:3B:94:E7:ED:C7:F4:D8:18:F4:3E:A6:C2:61:CC:5C:0C:86:17
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       1599C496041CEA148B3CD589AF8E765E2DC2218A
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa
Signing time:             Mon 31 Jul 2023 00:13:33 +0000
ROA not before:           Mon 31 Jul 2023 00:08:33 +0000
ROA not after:            Mon 29 Jul 2024 00:13:33 +0000
asID:                     63872
IP address blocks:        103.127.144.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 09:21:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:99:c4:96:04:1c:ea:14:8b:3c:d5:89:af:8e:76:5e:2d:c2:21:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul 31 00:08:33 2023 GMT
            Not After : Jul 29 00:13:33 2024 GMT
        Subject: CN=578C3B94E7EDC7F4D818F43EA6C261CC5C0C8617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:53:1a:33:88:f6:dd:15:0b:cb:b0:69:ea:
                    c3:4b:70:13:b0:ed:88:dd:a9:4a:db:37:38:80:4c:
                    b6:58:0c:05:0e:c9:2d:08:48:2b:f3:d0:bd:c0:7e:
                    d1:ac:04:2d:26:a2:fa:72:01:0c:5a:3a:6c:d0:4f:
                    08:cc:2a:5c:60:01:4a:f9:7e:bf:3c:5a:96:eb:0e:
                    b0:ed:58:ee:82:34:5d:c8:53:71:6c:ff:d4:53:65:
                    6d:73:f5:e3:25:fc:58:73:6d:40:f9:b2:97:e7:00:
                    48:86:21:97:bd:37:01:a8:73:c4:c2:18:3f:2f:c6:
                    7d:ed:cf:51:37:fb:0e:b2:01:9f:b6:75:25:fe:b7:
                    7b:9d:bb:a0:ef:6d:77:b1:bd:b9:f0:5d:03:98:40:
                    e5:5c:49:a1:4e:f2:d2:27:a9:43:9b:e0:eb:a8:71:
                    0a:23:36:c7:84:e8:5b:bd:bb:e9:e3:de:55:6c:89:
                    f9:6f:3a:72:2e:6b:ff:81:64:7b:12:fc:d0:0b:0a:
                    c6:cf:4b:81:57:be:6e:c5:1c:67:e8:9b:a1:8b:5a:
                    33:a3:35:d9:00:7c:0b:d2:91:7c:60:29:ef:bb:dc:
                    11:2a:f4:37:18:a2:f9:59:87:b9:02:3a:4b:aa:81:
                    cf:fb:3a:c7:f6:6a:5b:ff:04:7e:f6:85:aa:64:1b:
                    5f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:3B:94:E7:ED:C7:F4:D8:18:F4:3E:A6:C2:61:CC:5C:0C:86:17
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:58:65:50:89:d5:18:e6:24:9a:f0:0c:43:0d:1f:25:36:
         66:59:a2:c4:ed:77:0b:f6:7c:b9:9d:7e:38:99:ad:80:e2:7a:
         0c:71:f8:53:f3:3a:3f:71:9c:ca:a6:e8:d9:1a:7b:37:2b:e8:
         44:24:be:93:2f:07:08:c8:a8:d5:85:76:2b:86:31:7c:b5:d8:
         50:ca:8c:66:3a:be:50:18:d3:88:e9:9f:ec:f2:0f:0a:49:d4:
         6a:bf:b6:7c:80:66:d0:0e:58:c4:54:a7:b1:48:3f:1d:5e:e7:
         f8:6a:88:a4:81:fc:55:28:b0:47:f7:0a:12:52:47:1b:f4:49:
         70:25:54:f9:c3:fc:7a:d0:b8:77:33:5c:2c:f8:6f:68:7a:1b:
         cb:dd:9f:c3:ed:d6:86:ce:9c:f7:65:3e:de:d9:af:a6:55:bc:
         a2:5b:a1:2a:d0:66:08:30:1c:29:d5:01:bc:34:ce:6e:0c:b5:
         6c:25:ff:9a:8c:ac:2c:75:3b:7e:e0:0e:ce:ca:b7:73:32:eb:
         75:06:d4:52:61:8c:f1:61:bd:3e:d5:7b:ea:fd:d7:ba:ec:0f:
         88:a2:75:6b:0c:0e:b6:13:48:52:d1:04:92:45:52:43:2b:32:
         4e:00:48:d5:a6:84:ae:50:6d:6b:6f:8f:81:16:da:93:16:3a:
         ac:24:a4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:36:12 2024 by rpki-client on console-fra.rpki-client.org