Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          XWu3ZiYjuc2CEU8v3TS/tbomeGAJnu54CNotVi+bfA8=
Subject key identifier:   63:0E:9B:61:81:43:68:34:AE:0F:BB:47:57:83:8F:BC:40:FD:9D:2F
Certificate issuer:       /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90
Certificate serial:       65ED014028DFA9B7B4D69E2A6601F333FC8EF384
Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 08:01:46 +0000
ROA not before:           Fri 01 Sep 2023 07:56:46 +0000
ROA not after:            Fri 30 Aug 2024 08:01:46 +0000
asID:                     17995
IP address blocks:        103.164.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl
                          rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 14:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ed:01:40:28:df:a9:b7:b4:d6:9e:2a:66:01:f3:33:fc:8e:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90
        Validity
            Not Before: Sep  1 07:56:46 2023 GMT
            Not After : Aug 30 08:01:46 2024 GMT
        Subject: CN=630E9B6181436834AE0FBB4757838FBC40FD9D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:5a:61:aa:71:1c:0c:a9:e2:b6:b9:cd:9c:
                    88:0b:44:d1:51:2b:b2:c4:b7:41:39:e4:b0:b6:db:
                    e3:52:31:d9:1a:37:27:8a:ad:30:16:18:4a:2b:ea:
                    40:fa:26:3a:a1:f0:11:bd:be:a2:d3:6f:ad:46:d0:
                    f0:db:26:49:25:d6:6e:dd:1f:8c:a7:72:66:da:6a:
                    e7:0c:89:c0:82:44:c2:f4:c8:6b:7c:57:7c:fe:32:
                    07:9f:5a:0a:86:e5:dd:25:1b:4c:60:89:63:51:71:
                    02:54:f1:d5:0e:59:0d:17:9e:04:61:6b:47:23:22:
                    ed:4b:0b:6d:a2:e9:98:97:df:05:17:ba:e3:57:91:
                    f6:bb:f9:e7:c5:8f:4a:76:87:c6:be:f9:b6:9b:f5:
                    8a:e5:6a:06:c9:45:01:19:55:38:12:6e:3a:92:1d:
                    df:c6:b5:e2:6a:35:5c:29:a4:c0:a3:fa:75:e7:23:
                    07:7c:db:28:ad:48:6d:89:d4:e0:1b:cd:a2:b9:71:
                    2b:f7:fd:69:bf:6f:02:d5:a7:3e:61:d6:25:2b:ae:
                    c8:2b:e5:05:ee:84:3e:58:75:be:89:c2:47:a2:5a:
                    3b:6b:01:89:fd:8c:3e:a6:57:41:69:c0:35:02:a0:
                    89:f2:34:19:9c:c7:6b:f1:a0:49:b1:3b:16:b5:81:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:9B:61:81:43:68:34:AE:0F:BB:47:57:83:8F:BC:40:FD:9D:2F
            X509v3 Authority Key Identifier:
                keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:3c:41:d3:af:28:37:5b:85:d6:3a:80:71:78:98:e4:f5:f8:
         5c:95:ab:77:e7:0f:39:a5:bb:14:80:73:e9:df:e9:ea:6b:d1:
         ea:ed:4e:ce:2b:98:99:fa:96:34:56:40:aa:b6:20:64:2a:81:
         6d:a3:6b:c3:84:c1:15:1e:90:11:6a:4c:15:b5:44:5b:3b:3b:
         35:1b:5a:1f:82:9c:49:7c:94:31:83:e7:4e:c6:25:8d:4a:a6:
         f0:e7:73:c6:52:18:84:1e:72:8e:7e:5f:ea:4f:e8:04:25:aa:
         6f:b6:f4:a0:7e:0a:de:32:5b:bd:8b:25:d2:78:ce:e9:8e:30:
         93:ee:f4:59:87:33:b0:03:55:47:76:19:03:3a:0b:49:0c:ba:
         76:6c:fd:1b:9e:eb:f4:d2:89:a0:93:ef:27:a4:c1:4b:92:b8:
         d8:d1:ba:89:de:59:ee:c2:65:23:be:5f:f1:56:c6:43:04:a4:
         71:c0:2e:4a:46:39:16:48:b6:7c:9a:f3:e3:fa:f3:7e:c5:11:
         0e:9a:a3:79:bc:1c:bf:40:5a:d7:ec:90:db:f9:98:5c:5a:53:
         f1:89:90:1d:e2:b1:57:7a:66:71:f8:4f:05:7d:53:2a:87:37:
         8c:19:2a:eb:c9:08:f6:b2:0d:5c:1b:87:7d:0d:22:f4:74:7f:
         19:7b:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:12:39 2024 by rpki-client on console-ams.rpki-client.org