Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
File:                     3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (raw, json)
Hash identifier:          iLj+B002q0TpDHmcMTvzZVWM5Q1HzgiNr+abtN0gA84=
Subject key identifier:   34:82:E0:90:A7:BE:4D:93:59:7B:7E:F7:EB:DF:56:0F:08:64:20:1F
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       6141A03C7AC909203BE42717C647CD57F313A091
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
Signing time:             Mon 31 Jul 2023 00:02:37 +0000
ROA not before:           Sun 30 Jul 2023 23:57:37 +0000
ROA not after:            Mon 29 Jul 2024 00:02:37 +0000
asID:                     136868
IP address blocks:        103.105.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 11:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:41:a0:3c:7a:c9:09:20:3b:e4:27:17:c6:47:cd:57:f3:13:a0:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul 30 23:57:37 2023 GMT
            Not After : Jul 29 00:02:37 2024 GMT
        Subject: CN=3482E090A7BE4D93597B7EF7EBDF560F0864201F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b3:d2:b4:60:fb:86:ef:f7:1f:ae:97:61:ab:
                    39:d8:e2:06:a4:26:aa:08:a7:33:fc:c4:b2:f1:23:
                    1a:26:d1:30:5b:2d:2e:50:0e:9d:62:f9:ba:1f:9d:
                    62:58:2f:21:a2:63:df:e6:88:38:88:f7:59:4d:e9:
                    65:b6:9c:90:da:72:be:65:9d:f0:9a:22:70:9a:b7:
                    b0:96:67:04:ff:af:08:71:5e:e1:8b:81:a1:6a:49:
                    51:60:67:be:44:e7:64:08:77:1b:87:7e:29:fe:0e:
                    bb:1c:52:29:b0:2a:b3:d1:ad:fe:c1:7b:48:e1:1d:
                    6e:9b:63:9d:27:f1:76:b6:10:c4:53:85:ee:f1:2a:
                    9a:b5:c3:e5:a5:56:05:01:85:df:7a:6d:4a:f9:c2:
                    53:ee:fe:2a:5b:73:1e:1f:54:f1:d3:8d:f0:56:72:
                    80:75:be:68:02:65:05:14:ac:64:a7:d9:9e:89:94:
                    d3:8b:19:03:87:95:3d:be:ff:ae:5e:62:80:fa:dc:
                    73:ab:8a:26:e7:d4:ce:bd:99:41:64:db:a9:f4:4e:
                    a1:fe:df:61:2e:dc:9a:6f:d8:83:ea:85:96:58:5c:
                    c3:0b:05:5d:1e:51:ab:3a:f6:96:d0:af:a5:62:89:
                    d5:ad:1b:17:8e:7f:93:35:c2:fa:79:1a:3a:0c:79:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:82:E0:90:A7:BE:4D:93:59:7B:7E:F7:EB:DF:56:0F:08:64:20:1F
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:7b:aa:42:74:8a:17:d5:cd:d6:d3:3b:28:a8:5e:51:15:
         3f:1a:ad:a2:1d:1e:70:9f:10:87:f5:f9:98:47:ab:b2:3d:11:
         73:f7:9f:bc:8c:66:98:c0:dd:9f:e3:c5:97:46:d3:96:e9:3f:
         e9:03:c7:19:fc:54:52:9e:cb:c9:c0:13:68:59:08:58:81:82:
         02:96:44:21:87:9e:a5:d0:1a:49:a4:4c:eb:5b:2c:40:e3:92:
         75:9b:1b:50:f1:d9:1a:65:2e:15:4a:e0:5c:a8:e8:11:cf:1f:
         0f:af:b2:57:b2:33:e9:40:b8:a3:a5:7d:17:05:ed:9d:10:89:
         43:96:da:ff:ab:fa:9b:5b:0d:8d:29:c1:57:75:29:94:47:bf:
         31:53:61:a8:a8:f8:73:0d:00:82:ca:bb:a9:52:f7:ab:5a:73:
         e3:e6:33:0f:88:7d:45:c2:68:03:c2:4c:24:44:58:f9:4c:e1:
         80:9b:6c:55:5a:92:c3:67:08:af:02:07:1c:b8:da:bf:8a:1f:
         11:6c:4f:79:e2:85:92:23:52:ee:05:c6:fb:ca:c6:ab:b4:a9:
         eb:e5:fb:28:7f:53:f4:c9:ab:70:4a:1e:be:b0:c1:d8:47:5e:
         00:95:ef:df:57:0a:6d:cd:33:b6:db:0a:9d:51:ff:59:ca:a1:
         71:f5:16:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:38:50 2024 by rpki-client on console-ams.rpki-client.org