Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
File:                     3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          qHJoSFcwWIicEL1jBd2OeLAZTilENbCC7wrXnZlj//s=
Subject key identifier:   82:CC:D7:EA:9A:9E:AA:22:31:6F:84:11:AE:1D:01:46:7D:95:80:CE
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       6446F1D5906A675FD672753241FA91222B057A2E
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 31 Jul 2023 00:13:33 +0000
ROA not before:           Mon 31 Jul 2023 00:08:33 +0000
ROA not after:            Mon 29 Jul 2024 00:13:33 +0000
asID:                     63872
IP address blocks:        103.127.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 17:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:46:f1:d5:90:6a:67:5f:d6:72:75:32:41:fa:91:22:2b:05:7a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul 31 00:08:33 2023 GMT
            Not After : Jul 29 00:13:33 2024 GMT
        Subject: CN=82CCD7EA9A9EAA22316F8411AE1D01467D9580CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:63:8a:c4:b1:da:22:86:7d:b5:53:35:95:
                    38:09:a6:42:20:20:06:a1:8e:16:89:d2:44:50:9d:
                    be:ba:c5:d6:e5:ad:d9:2f:85:8b:48:32:83:b1:bd:
                    c7:f3:b2:11:f3:bb:7c:6f:52:7e:79:40:84:16:12:
                    18:3f:23:e6:06:5c:17:d8:c6:2e:5d:a7:16:1d:2f:
                    4a:bf:2e:9e:85:ad:88:2f:01:13:38:e1:ba:18:48:
                    b0:16:e4:3d:7c:e4:20:d7:49:33:e4:62:e4:34:13:
                    45:96:b6:7f:7d:05:32:63:b2:13:94:0b:17:c5:44:
                    8e:0d:46:b1:ba:57:70:9c:be:e2:cf:5e:87:60:6c:
                    fa:cb:3a:d4:a3:78:ba:c8:5a:62:5f:23:97:91:ad:
                    3e:e9:f4:18:59:26:7e:0c:af:21:55:58:a2:c8:96:
                    34:6c:36:22:64:56:ff:63:77:00:fc:fa:df:5d:f8:
                    af:60:eb:08:3e:ca:d9:ae:01:c4:ad:cf:e8:df:c2:
                    31:e1:4a:85:27:b7:84:a5:16:5c:06:fd:a1:73:4d:
                    59:54:ee:b8:7e:3f:4d:4b:8d:c5:31:7e:7b:44:4c:
                    fc:ae:c7:05:af:39:2d:a0:df:e6:34:c6:19:0f:9a:
                    2d:bf:82:0a:c0:da:27:ab:fe:2e:13:e5:60:8e:ec:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:D7:EA:9A:9E:AA:22:31:6F:84:11:AE:1D:01:46:7D:95:80:CE
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:0d:79:1c:54:e5:7b:e3:06:23:0e:5a:55:17:73:13:34:06:
         ab:73:5e:6f:a2:38:3f:90:f5:25:df:de:57:c4:c8:d2:26:0f:
         93:56:34:78:90:d2:5e:16:1c:22:49:f1:bb:14:a7:e2:bc:e1:
         51:e4:eb:da:56:b7:1a:44:81:7b:34:d1:92:78:95:16:83:69:
         25:90:92:80:e9:ed:6b:fb:e0:10:67:39:26:d1:e2:5e:2c:3f:
         3d:ec:2d:78:f1:9d:72:15:0d:b0:32:c4:11:36:bc:04:8e:b3:
         34:5a:4a:7a:c4:24:db:9f:7b:72:a5:6f:e1:1f:66:17:d4:13:
         80:fc:14:76:ef:d3:93:cb:e2:21:5c:be:40:9e:92:d1:83:e9:
         3a:dd:e8:28:47:08:a7:a2:8a:36:5b:f8:f6:ed:35:8e:25:d0:
         24:44:ea:90:85:d9:cc:f2:1a:35:eb:3d:ef:e3:3e:d3:2a:0a:
         c9:13:82:ef:20:88:f4:99:20:b9:3f:9f:6b:45:e2:6c:e0:89:
         23:8f:f9:7f:5e:34:a2:a8:e5:64:81:37:8e:c0:f4:b7:1b:5b:
         75:9c:19:7e:c8:75:34:cf:f9:26:89:9b:74:24:01:4a:0d:04:
         2d:6c:fc:39:aa:50:f9:3c:cc:66:64:77:9a:f4:fe:32:cb:56:
         46:e5:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org