Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa
File:                     3130332e36312e3234382e302f32322d3232203d3e2034373837.roa (raw, json)
Hash identifier:          Nq/fv0EK8Ft8LEQ1ySULA2rKkDYy+IqDIKqQP1lEgPQ=
Subject key identifier:   C9:A7:E3:03:C3:2C:C7:91:E8:57:9E:0D:D3:AB:EE:85:FD:10:5D:72
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       7075BE3075C63C0739A9ADCDCD6B99DD36A4D0A6
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa
Signing time:             Mon 31 Jul 2023 00:02:21 +0000
ROA not before:           Sun 30 Jul 2023 23:57:21 +0000
ROA not after:            Mon 29 Jul 2024 00:02:21 +0000
asID:                     4787
IP address blocks:        103.61.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:75:be:30:75:c6:3c:07:39:a9:ad:cd:cd:6b:99:dd:36:a4:d0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:21 2023 GMT
            Not After : Jul 29 00:02:21 2024 GMT
        Subject: CN=C9A7E303C32CC791E8579E0DD3ABEE85FD105D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:8c:36:93:d0:05:14:1d:77:06:47:10:93:
                    90:b6:81:37:92:a8:ab:ff:5b:49:32:fa:04:31:5f:
                    d2:a9:5b:ca:b3:d1:5c:bd:5b:2c:64:f1:bc:ee:91:
                    3e:c2:f8:be:b6:8e:82:51:8c:5e:11:5f:1d:e3:f4:
                    ae:99:b3:94:a4:e1:6d:86:b8:13:bf:e8:bf:4b:d1:
                    ca:88:14:6c:c3:9d:2b:fb:e2:f9:34:f6:1e:e4:c2:
                    2a:91:a8:63:e5:cc:7b:69:02:9f:8c:52:6c:72:46:
                    ed:75:43:d5:e2:6e:f2:f4:eb:b7:0a:84:d3:7b:22:
                    6a:77:67:65:91:f9:99:a7:44:5e:30:f1:ed:c4:bb:
                    73:aa:89:38:f5:fd:e9:80:1f:c8:5f:44:30:ff:75:
                    46:fb:2f:0f:31:69:c4:94:d5:7c:7c:6d:00:0d:a1:
                    2a:aa:e8:d3:1e:37:ea:df:a9:09:f4:58:c7:bc:32:
                    db:13:3e:de:21:0e:89:bc:bf:da:7b:cd:35:9b:e7:
                    c3:c4:40:c9:38:55:ba:5b:02:03:ef:a8:fa:ae:e8:
                    c5:6a:bb:28:ab:14:51:a9:15:db:40:1c:07:52:69:
                    1c:d2:b1:53:d4:a6:d6:92:91:31:23:f8:be:2c:d4:
                    a7:32:aa:fa:85:c1:e8:5f:85:58:26:99:97:28:45:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:E3:03:C3:2C:C7:91:E8:57:9E:0D:D3:AB:EE:85:FD:10:5D:72
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3232203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:c0:f7:7f:62:f3:1d:eb:6f:71:90:ab:ea:36:e9:0f:b8:1d:
         7a:a7:89:c8:4e:57:83:f2:13:cc:5c:dd:35:26:d4:d4:66:31:
         de:63:ee:1f:6c:55:4c:35:7e:11:dd:7c:1b:1d:45:2b:b3:92:
         af:15:0f:bf:78:e6:7a:ee:22:6d:37:63:93:1e:46:aa:c8:20:
         fc:08:a7:e7:6a:83:7f:f6:cb:cc:8e:de:15:46:07:78:40:5e:
         ef:45:ee:51:07:47:65:8f:7f:fe:61:fc:60:fe:5a:e2:69:84:
         7b:0f:c6:5b:47:f9:64:8c:bb:ee:16:d7:ca:a1:fc:ef:27:9d:
         8a:25:70:32:f8:1e:c7:65:6e:3e:6d:14:b6:7e:57:3b:16:88:
         db:64:ff:2d:4b:be:97:83:f9:3c:b3:09:cc:8d:3a:42:2d:74:
         c4:06:61:83:d8:21:19:f7:e1:0f:62:f4:65:42:10:ff:00:19:
         a1:b0:5f:90:7a:26:7b:14:cf:1b:f1:62:f5:1a:8f:89:d9:db:
         68:2b:8e:a6:c4:6a:6b:72:df:2d:f4:05:d6:b4:ad:75:c9:2f:
         1f:4b:fb:89:f9:72:11:49:ce:91:a1:f5:d4:f8:d5:3b:68:8b:
         2c:0e:19:b6:30:f5:72:d5:ec:3c:78:2a:07:bc:f4:77:0f:34:
         8d:54:5a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org