Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa
File:                     3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (raw, json)
Hash identifier:          07ReJGyIK53JeV+YbLu8rBqyx9+F8Oi7yrJ4HQHFxiY=
Subject key identifier:   D7:E6:95:E3:07:56:04:F8:82:64:F5:0D:89:6E:AA:AA:F1:C3:4C:41
Certificate issuer:       /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial:       3F8DF3CB6F4A6C1B442409957B2D354C92BCF3F7
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa
Signing time:             Sat 12 Aug 2023 12:00:01 +0000
ROA not before:           Sat 12 Aug 2023 11:55:01 +0000
ROA not after:            Sat 10 Aug 2024 12:00:01 +0000
asID:                     136856
IP address blocks:        103.102.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
                          rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 19:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8d:f3:cb:6f:4a:6c:1b:44:24:09:95:7b:2d:35:4c:92:bc:f3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
        Validity
            Not Before: Aug 12 11:55:01 2023 GMT
            Not After : Aug 10 12:00:01 2024 GMT
        Subject: CN=D7E695E3075604F88264F50D896EAAAAF1C34C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:72:39:b3:c5:d9:dd:93:ef:dd:f8:5e:23:be:
                    94:d6:e8:13:7a:36:43:46:51:42:1d:1c:d6:4a:da:
                    e0:d4:55:b6:34:64:62:0e:f9:f7:d8:c1:40:1f:fb:
                    5f:82:5d:c8:e0:56:51:ba:31:1a:6f:99:e2:bf:1f:
                    52:84:b6:86:fc:c4:ce:08:7a:96:20:a8:33:77:a4:
                    61:1d:2e:56:f8:40:a5:64:58:8f:7c:42:30:2c:0e:
                    5e:12:fa:9a:51:02:79:3c:01:d6:d5:e4:2b:6b:b5:
                    6a:7d:dd:c9:d0:1d:7e:56:6e:00:d8:0a:df:80:e1:
                    5d:62:b1:32:0f:c9:3f:17:4a:6d:43:4d:f3:11:d8:
                    2b:2f:5c:1e:00:79:4f:8b:20:13:37:33:78:1f:ff:
                    05:f9:b5:6d:7b:48:93:7b:4f:bf:a7:48:5c:af:6e:
                    94:29:39:71:6a:50:2d:b5:9f:5d:84:86:06:a7:09:
                    67:53:d5:e2:e9:16:e4:44:d6:9e:2b:6f:93:93:05:
                    65:a8:2e:00:84:c3:41:f9:b4:34:dc:ed:67:c6:f5:
                    72:ae:4c:cb:17:d7:09:35:b2:b6:01:78:9b:a8:05:
                    9c:d4:ad:30:6f:06:a8:cb:ea:c7:8f:a5:3d:4b:df:
                    dc:ca:e0:0e:da:42:8b:99:a0:09:70:44:d0:0c:67:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E6:95:E3:07:56:04:F8:82:64:F5:0D:89:6E:AA:AA:F1:C3:4C:41
            X509v3 Authority Key Identifier:
                keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:6c:d4:3a:ff:64:a0:d4:ca:84:6b:e2:c3:db:8d:19:bb:2f:
         9d:22:13:42:3f:0d:f4:5f:8c:6d:29:d4:9d:29:7d:97:eb:63:
         a2:90:e6:5d:f9:05:f5:66:7b:06:4a:6a:ee:39:2f:91:fc:89:
         e0:cd:02:f3:a5:8d:e0:6f:c0:aa:e7:85:d5:cd:93:61:29:68:
         2b:17:df:bc:65:77:a3:7c:70:ed:9b:e2:cb:06:1c:9f:75:39:
         ba:6e:85:4c:fb:8b:e4:25:0a:af:de:5d:61:bb:c5:ec:9c:ee:
         d1:13:e9:40:3e:ed:22:16:d7:67:2e:d6:01:ab:b7:44:b4:e2:
         ec:53:40:9d:12:b0:37:b5:9b:88:da:34:6c:6e:13:3c:bc:42:
         35:5f:95:fa:87:ce:01:f3:98:29:30:17:fb:6c:9c:ed:fa:cd:
         0f:ee:b5:63:c4:28:d5:c2:f8:3a:dd:80:7e:ec:a6:53:d9:3c:
         1b:fb:c4:e8:1b:42:43:43:4b:d2:80:b0:f0:3f:fd:29:78:d9:
         f5:a4:64:9c:d8:06:6a:70:36:d5:41:f2:c5:3a:71:71:6c:b6:
         30:df:ca:a3:11:88:ff:6c:0f:a7:b1:ce:f4:2b:f3:de:5d:ad:
         13:8f:60:e2:34:2e:f3:e4:cc:8c:fe:55:c0:a1:1d:87:13:84:
         74:40:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:29 2024 by rpki-client on console-ams.rpki-client.org