Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
File:                     3130332e3133302e352e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier:          fmoI1HFgztzDRsEc5mN2GAAG3YhfUNM5jRBOnGxUJUo=
Subject key identifier:   A6:AA:3E:C1:60:16:ED:18:E2:7B:B3:05:4F:04:99:74:4D:E4:8B:D7
Certificate issuer:       /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial:       075D98EEE26D1B12B7C6F950AEDA09B78918F28B
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa
Signing time:             Fri 18 Aug 2023 14:00:01 +0000
ROA not before:           Fri 18 Aug 2023 13:55:01 +0000
ROA not after:            Fri 16 Aug 2024 14:00:01 +0000
asID:                     138093
IP address blocks:        103.130.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
                          rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:98:ee:e2:6d:1b:12:b7:c6:f9:50:ae:da:09:b7:89:18:f2:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Validity
            Not Before: Aug 18 13:55:01 2023 GMT
            Not After : Aug 16 14:00:01 2024 GMT
        Subject: CN=A6AA3EC16016ED18E27BB3054F0499744DE48BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:66:d6:a7:c1:2e:e9:85:f1:79:f3:31:51:
                    ca:bd:78:92:d0:7f:b9:79:98:09:71:95:06:53:1c:
                    3b:a8:21:74:56:a5:9f:78:4c:14:c5:81:be:66:1e:
                    49:05:6b:60:7c:4e:04:36:db:a0:ed:0e:c6:78:4f:
                    f8:46:76:81:8f:e5:6c:0a:e9:fc:10:b4:ff:50:4b:
                    62:db:7f:f9:1d:d6:57:02:94:e5:56:af:3a:59:ad:
                    21:c5:7e:e5:b1:b0:6a:ba:76:2f:0d:0f:5d:c5:b1:
                    01:e2:f0:01:76:f4:75:cd:79:a1:c9:3a:b3:0d:02:
                    54:ee:b9:9c:02:ac:f1:05:29:80:34:62:7b:c0:4e:
                    cc:85:53:22:fc:cc:3d:33:30:70:0f:e6:61:75:df:
                    ca:72:40:89:26:08:8c:f3:8c:3c:ef:14:19:8a:69:
                    fd:47:d4:33:e4:f7:92:c0:bd:72:d3:e3:09:91:a0:
                    c7:7a:d7:62:08:57:b7:54:17:c8:e1:a4:b5:3c:6a:
                    76:10:75:ab:62:f4:bd:5b:58:f8:b1:d1:30:74:12:
                    82:29:ca:3b:e8:bd:55:b8:ba:38:03:0b:61:52:98:
                    b9:e5:8c:7e:1e:f9:2d:88:13:04:3b:06:75:4a:b5:
                    71:03:86:48:f4:68:f0:37:1f:a3:df:17:3e:5d:68:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AA:3E:C1:60:16:ED:18:E2:7B:B3:05:4F:04:99:74:4D:E4:8B:D7
            X509v3 Authority Key Identifier:
                keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e352e302f32342d3234203d3e20313338303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a6:c3:17:81:b2:a6:56:e7:45:e8:dc:2c:8e:f3:e8:d5:2f:
         d7:6d:9e:24:b8:ab:21:5d:ac:f0:32:d3:68:80:60:c0:ed:9b:
         ef:61:48:a1:88:06:54:cb:64:41:12:4c:d9:84:7d:6e:56:0c:
         be:e1:98:f8:4c:14:39:ae:75:65:f7:21:61:6e:fd:77:f4:3a:
         15:ff:4e:50:31:20:57:54:1c:68:e8:88:47:a3:6c:cc:cf:cc:
         d6:75:26:88:49:05:bb:16:2f:e2:35:b5:94:92:62:51:57:66:
         12:ec:86:52:f2:de:a8:c0:25:f8:91:ab:25:f2:00:b3:1e:3d:
         23:e4:b9:2f:ad:21:8c:d9:9a:2b:e0:a5:53:cf:e7:ef:25:33:
         5f:db:43:41:fd:ff:6f:44:c2:6b:07:c8:47:2b:90:a7:3f:3c:
         d6:b0:53:d3:c4:d5:cc:ec:9f:e0:fc:0b:6d:8b:51:6d:cb:65:
         6f:da:a0:54:99:b5:28:e9:c2:f7:ab:00:04:26:60:dd:cd:46:
         38:68:6c:2f:c0:83:4f:a6:d4:cf:31:11:c0:e8:88:2e:d2:1a:
         e0:c0:a4:75:8e:15:80:77:30:c8:a8:33:d9:95:4d:3a:af:df:
         59:9e:b0:9d:2c:1e:3d:4d:99:0a:9c:52:1a:59:3d:7e:15:67:
         7e:0d:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:16 2024 by rpki-client on console-ams.rpki-client.org