Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          PM0XzlqfKHrJo5fsScqSm+UbRhPRyxLoTVNJ4UYVTQs=
Subject key identifier:   87:8A:F0:84:9F:13:E8:8E:5C:92:5F:CF:26:6A:DF:8D:71:74:9E:18
Certificate issuer:       /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial:       4A6B77E0CCADE31F46EB49215CBD82D36E9DA0B5
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 05:02:02 +0000
ROA not before:           Wed 03 Jan 2024 04:57:02 +0000
ROA not after:            Wed 01 Jan 2025 05:02:02 +0000
asID:                     135478
IP address blocks:        103.121.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
                          rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6b:77:e0:cc:ad:e3:1f:46:eb:49:21:5c:bd:82:d3:6e:9d:a0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
        Validity
            Not Before: Jan  3 04:57:02 2024 GMT
            Not After : Jan  1 05:02:02 2025 GMT
        Subject: CN=878AF0849F13E88E5C925FCF266ADF8D71749E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:f2:f2:c8:22:08:56:4b:1d:ad:d8:3b:be:
                    68:f7:a8:63:d4:c9:5d:b8:73:58:2d:8d:1a:48:78:
                    9f:85:ff:f0:d5:44:dc:8a:c5:14:47:c5:d4:43:e0:
                    ce:3d:1f:7c:10:fe:57:ca:74:a5:ed:1a:3b:ce:41:
                    3b:5f:29:21:48:b1:2e:d9:4b:be:28:2f:77:ee:be:
                    fb:c1:0f:f3:14:8c:9f:17:ff:7e:c3:eb:95:8b:7f:
                    2c:e8:c6:81:b7:5f:a5:9e:ce:fa:10:7f:16:fa:27:
                    66:fa:ff:9f:a0:46:5a:71:ff:73:63:f6:c7:d6:48:
                    25:c9:77:d5:b2:c3:8b:5a:3e:4a:09:33:d5:02:b3:
                    e3:d7:c5:90:25:ef:d9:25:89:17:1c:e9:b2:25:eb:
                    d3:21:a2:1a:ba:a6:34:6d:27:56:e2:4c:01:e9:6a:
                    56:ea:0a:0d:ac:4c:88:1a:27:82:b5:62:ee:23:ae:
                    fe:d3:72:3b:cb:55:80:c1:0b:3b:38:a8:01:11:b0:
                    6a:33:fa:ba:05:7e:3b:61:70:6b:9d:d4:f3:b7:4a:
                    6e:f0:10:21:85:4b:a4:c6:2e:2a:b9:ad:87:d2:5f:
                    2a:e1:17:c0:55:2d:9e:fa:48:d0:10:80:f9:b9:6b:
                    30:ee:9b:6c:2d:74:bc:30:d2:e3:54:9b:a1:df:65:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:F0:84:9F:13:E8:8E:5C:92:5F:CF:26:6A:DF:8D:71:74:9E:18
            X509v3 Authority Key Identifier:
                keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130302e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:64:8d:14:12:99:62:f7:b0:19:2e:84:54:a6:3e:63:ba:
         48:2f:35:a5:7a:a0:44:ec:b7:b2:6e:ca:67:93:02:7a:3c:23:
         b3:df:f9:72:d5:bc:f0:93:8a:1f:c2:20:70:9e:52:cb:35:df:
         60:53:1e:53:50:db:5c:e7:ad:4c:02:5f:0b:50:48:25:f3:e2:
         7f:cd:2b:32:7c:cd:54:77:5c:7c:bf:ee:fe:cd:f6:67:90:ec:
         05:dd:2a:ae:1d:c8:f1:5a:59:b3:19:e6:f9:53:52:95:18:79:
         5d:48:70:cc:de:de:19:8b:c7:b3:15:e3:75:66:a2:3c:76:a5:
         ff:c7:d8:43:12:77:52:ee:51:1e:2d:d0:91:6e:01:88:66:a6:
         d0:67:51:9d:b3:83:1e:b9:2d:b3:2a:dc:95:cb:94:e3:b1:12:
         8b:80:dc:59:0e:9c:39:78:06:13:9a:b6:93:8d:eb:4f:6a:2d:
         22:a3:40:50:0b:09:61:04:85:42:d5:20:ac:b1:e4:3d:56:3f:
         00:78:2b:ca:24:23:54:32:a2:a5:2d:8b:b8:50:8a:67:1f:9b:
         35:e6:3c:5a:ae:44:70:98:e7:03:24:b4:ac:1d:b7:4b:ac:a1:
         cc:76:db:1b:2e:4a:db:64:00:5d:c7:92:87:1a:e1:1c:49:ff:
         64:bc:c2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:47 2024 by rpki-client on console-fra.rpki-client.org