Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier:          TXCQJNx4ui4FHRXm/gUgAufnsTpR9/jVEDpBxOZ2SPQ=
Subject key identifier:   EF:4C:E2:09:98:53:16:27:C5:1F:DD:E8:78:50:58:F2:F3:22:85:E8
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       0645093305DEA650B53913C679761AA578613A6F
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
Signing time:             Tue 08 Aug 2023 10:00:00 +0000
ROA not before:           Tue 08 Aug 2023 09:55:00 +0000
ROA not after:            Tue 06 Aug 2024 10:00:00 +0000
asID:                     141621
IP address blocks:        103.161.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:45:09:33:05:de:a6:50:b5:39:13:c6:79:76:1a:a5:78:61:3a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Aug  8 09:55:00 2023 GMT
            Not After : Aug  6 10:00:00 2024 GMT
        Subject: CN=EF4CE20998531627C51FDDE8785058F2F32285E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:54:8c:88:ea:4a:c4:63:e6:a5:71:a2:90:
                    ed:6b:43:24:ab:6b:2e:eb:36:60:56:86:fe:22:40:
                    f7:c2:91:da:95:64:22:14:2c:85:3e:88:a8:5e:83:
                    c0:d3:aa:95:43:18:a4:bc:10:9f:9b:24:9f:7f:88:
                    1a:32:14:1d:db:1f:de:10:a3:33:cc:79:58:76:f1:
                    45:46:85:eb:66:36:f7:4a:6e:30:e4:a8:21:62:90:
                    27:79:8f:4b:37:a3:79:df:d8:d7:47:72:38:b4:ce:
                    45:ad:3c:9c:4a:a3:8e:5f:20:ad:48:a9:77:7c:ed:
                    5d:57:8a:4e:a8:54:ec:d4:99:ba:07:e6:5f:ac:24:
                    ce:c1:a9:cc:40:0e:d6:51:e3:88:32:9b:a5:9a:a9:
                    df:8f:25:8c:28:3c:90:51:10:82:9b:c4:24:79:fa:
                    05:dc:43:58:1e:dd:d0:16:ac:ba:c3:2c:1a:32:a2:
                    9a:50:6b:5d:1b:76:28:60:40:b2:b9:40:83:bd:5b:
                    a6:23:68:3a:c8:b9:b2:f9:f5:37:bb:4e:e6:77:29:
                    a1:6c:65:d0:14:58:5f:d4:ab:f9:6c:aa:f1:e8:d7:
                    e4:80:9e:5d:16:ef:7d:8c:33:e1:e6:aa:bb:7c:1a:
                    06:99:0f:2d:2c:6b:4d:eb:bb:2f:55:d8:4b:32:15:
                    15:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4C:E2:09:98:53:16:27:C5:1F:DD:E8:78:50:58:F2:F3:22:85:E8
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:0a:6a:89:1e:f5:a4:4e:63:0c:39:6f:b6:1c:41:d7:cc:b2:
         c3:2a:2d:a8:00:1f:b4:9e:ca:ac:b7:55:11:24:40:0d:71:19:
         7c:96:44:ed:e9:56:45:16:b7:bb:33:a6:9d:64:ed:4e:44:d2:
         f0:90:81:59:91:a6:83:31:de:ea:b0:f6:88:7f:3f:1b:4d:c7:
         5f:58:f9:23:cf:c8:5a:87:b3:fc:93:bb:49:11:d6:f3:52:d2:
         2f:ea:2f:8e:03:c1:50:79:89:72:b2:bf:b9:c5:ed:27:e4:b6:
         92:09:64:ed:8f:91:53:04:ac:d7:22:86:8f:b8:35:1d:76:0f:
         ca:fc:bc:c6:b7:87:88:fc:04:ae:06:0e:95:9e:dd:a0:e6:99:
         8c:4a:96:c8:fa:26:64:12:a2:88:52:d3:37:34:96:71:48:e9:
         34:06:15:28:0a:3d:0b:78:af:c9:76:55:e6:9c:02:43:8c:66:
         67:66:4e:06:8d:4e:95:ff:08:33:75:56:2b:e6:10:63:29:a6:
         2c:af:42:3a:01:25:a1:78:4e:40:f8:7f:15:17:87:d3:00:e6:
         b7:be:e5:35:24:e0:53:3c:2e:f9:07:8d:42:77:9b:91:b6:e6:
         69:01:d2:86:86:3b:0c:3a:8a:a8:00:13:81:6f:3a:c8:fe:5d:
         66:86:d2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:18 2024 by rpki-client on console-fra.rpki-client.org