Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa
File:                     3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (raw, json)
Hash identifier:          AKtA26vq7h2a3jeAwY5/yv0kADbxyirKE94Y//9llH4=
Subject key identifier:   74:F4:63:6B:86:06:E3:45:B5:01:F7:36:A2:BE:A1:80:39:AB:C3:AB
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       054BB840115AF5EAA3DF86EFBF990A077D0907CB
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa
Signing time:             Mon 31 Jul 2023 00:02:36 +0000
ROA not before:           Sun 30 Jul 2023 23:57:36 +0000
ROA not after:            Mon 29 Jul 2024 00:02:36 +0000
asID:                     136868
IP address blocks:        103.105.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 20:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4b:b8:40:11:5a:f5:ea:a3:df:86:ef:bf:99:0a:07:7d:09:07:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul 30 23:57:36 2023 GMT
            Not After : Jul 29 00:02:36 2024 GMT
        Subject: CN=74F4636B8606E345B501F736A2BEA18039ABC3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:1f:13:49:e8:c6:be:a7:7b:ee:7c:16:76:
                    a7:6a:7f:04:4b:8c:c3:e2:12:6e:b4:48:01:80:25:
                    d1:85:bb:33:08:2d:72:d8:e8:c3:03:2b:49:40:a0:
                    84:48:f1:a5:4e:75:2e:78:fd:42:c7:0a:c6:4f:44:
                    55:53:5e:8f:a7:ad:36:f7:ae:b2:4c:ab:a2:6e:b9:
                    fc:29:77:44:f1:6c:a0:76:0a:69:5a:71:73:6b:94:
                    46:29:0c:63:34:10:81:b6:79:52:b6:b9:1c:80:b4:
                    74:81:f0:1f:30:9d:24:b9:78:01:7c:e0:d9:6b:42:
                    20:ba:70:e6:ee:6f:15:c7:02:7d:bc:a8:bb:6b:eb:
                    80:6e:49:7c:b0:ae:bb:02:c7:86:48:07:62:99:76:
                    99:77:da:75:60:cc:9b:74:2f:0f:36:84:69:9e:94:
                    17:27:84:f9:57:6b:fb:1e:5e:72:eb:67:6f:b4:88:
                    7e:8e:0b:64:3e:52:6f:f6:98:33:a5:fa:b1:7a:60:
                    a5:c5:da:2a:81:25:9f:e5:d9:b6:46:25:29:55:f5:
                    44:46:7f:5b:b4:ca:61:28:75:e1:da:b0:60:c6:29:
                    8b:04:64:f1:ea:2e:e8:0c:8c:16:19:46:b8:b6:19:
                    d2:4b:c0:2a:d2:a1:14:c4:10:7b:ab:51:05:bd:cb:
                    ac:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F4:63:6B:86:06:E3:45:B5:01:F7:36:A2:BE:A1:80:39:AB:C3:AB
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:e5:58:ed:91:ba:ee:a9:4a:36:3e:19:5a:04:ae:00:5b:
         91:60:3b:83:e7:ba:60:61:3e:91:6b:31:15:68:ef:c4:a0:22:
         3b:e9:f2:5e:b1:bb:cc:9f:51:dc:db:3a:a1:25:df:7d:a5:c0:
         59:99:c6:95:92:fb:e7:12:b4:ea:a5:99:12:ea:6f:f8:7a:0c:
         e0:3b:d7:29:7d:0a:4f:b1:7e:b6:c6:37:43:06:05:7f:90:93:
         13:5d:10:da:4a:fe:be:f7:b1:37:7a:c0:01:ef:f8:d7:7d:fb:
         bc:ed:f3:7f:1f:9f:11:44:98:4f:76:13:dc:ea:a7:ff:1b:cb:
         53:8f:2a:0c:85:38:69:56:9e:66:07:08:28:72:5b:1f:3a:21:
         ff:46:63:95:19:b3:3a:17:9b:b5:d9:b3:99:60:d5:ab:ec:b1:
         d3:32:09:4c:a5:96:a4:aa:0a:c1:a8:cd:99:d7:50:40:03:2e:
         e1:d8:ba:98:e8:22:5a:2a:77:48:79:8f:cb:88:34:da:38:ad:
         6e:d7:51:f7:a9:5c:49:30:82:cf:f4:c7:12:ac:43:04:d0:a9:
         5d:e6:3f:dd:c1:46:20:bc:05:20:ce:36:b4:55:3a:76:89:9b:
         a7:a4:44:5f:87:65:cf:01:c0:0b:8a:a0:d4:67:5c:ae:78:46:
         f9:81:2e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 21:39:54 2024 by rpki-client on console-ams.rpki-client.org