Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37372e302f32342d3234203d3e203435373031.roa
File:                     3130332e38392e37372e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier:          a12GPLLv3TF6ktsY+TJPYFE3XXLFlbUu6bOe9YR8GR0=
Subject key identifier:   FB:1A:E8:2B:22:62:9A:8D:9F:FE:81:4E:62:CC:39:C4:B8:86:F3:3A
Certificate issuer:       /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Certificate serial:       1DA6E75673EB8656C2E8BF89FB7A0BB912DF5499
Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37372e302f32342d3234203d3e203435373031.roa
Signing time:             Thu 16 Nov 2023 06:00:01 +0000
ROA not before:           Thu 16 Nov 2023 05:55:01 +0000
ROA not after:            Thu 14 Nov 2024 06:00:01 +0000
asID:                     45701
IP address blocks:        103.89.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl
                          rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a6:e7:56:73:eb:86:56:c2:e8:bf:89:fb:7a:0b:b9:12:df:54:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
        Validity
            Not Before: Nov 16 05:55:01 2023 GMT
            Not After : Nov 14 06:00:01 2024 GMT
        Subject: CN=FB1AE82B22629A8D9FFE814E62CC39C4B886F33A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:cd:2a:db:5f:53:b8:d6:a3:95:96:f4:c2:
                    7a:25:e6:7c:31:c0:4d:3d:fe:b6:0e:93:7e:f3:6d:
                    65:bc:94:0b:08:cc:9d:5f:6a:b7:f6:42:84:bf:15:
                    69:0e:9b:9b:7f:90:7f:6e:3b:f9:39:78:53:3d:da:
                    a0:2d:f3:1e:06:9f:ba:e5:79:e0:8e:bd:18:94:b6:
                    b2:32:61:c6:30:9f:a1:8a:98:12:ed:a1:e1:ca:8d:
                    84:fa:a1:67:7b:1f:ef:91:0b:0f:cc:c1:6d:e5:05:
                    ed:77:86:69:ce:50:c6:96:49:b7:62:92:5b:45:1b:
                    c3:c8:34:4c:1d:ba:bf:f2:f3:24:6a:8e:11:26:80:
                    28:9c:d9:4d:43:fc:80:7e:0c:6c:00:93:0d:48:53:
                    ea:8e:72:7a:53:8d:7e:c0:b0:5a:b0:54:e0:cb:61:
                    58:5e:d7:ac:db:be:32:2f:c8:aa:c1:bb:0d:28:f5:
                    4c:d4:23:f8:3d:95:2b:ca:cc:b4:62:68:1d:bf:76:
                    77:6e:82:1d:97:81:16:81:45:e3:24:88:54:fe:8e:
                    f7:f1:2a:43:fd:82:12:fe:ac:61:6d:03:25:ce:2e:
                    5c:3a:a8:93:26:ce:41:f3:ee:d0:6a:df:85:9f:6a:
                    a3:68:d5:a1:f0:f5:3e:e9:8a:53:57:ae:51:75:78:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1A:E8:2B:22:62:9A:8D:9F:FE:81:4E:62:CC:39:C4:B8:86:F3:3A
            X509v3 Authority Key Identifier:
                keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37372e302f32342d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:d3:a5:b7:a3:b5:54:58:72:a8:cf:0c:76:bf:7e:58:80:
         6d:fe:32:ae:0f:44:fb:f5:36:64:25:78:28:8c:a3:70:5f:26:
         de:cd:1b:72:39:b0:12:ab:87:ac:06:cf:f2:74:24:dd:a7:45:
         5a:d1:21:5f:70:45:54:12:af:d1:5a:01:1d:fd:d5:34:4c:41:
         63:f7:cf:38:d4:59:13:85:1c:ef:ba:cd:cf:3b:19:ff:dd:c8:
         a4:ba:cd:f8:30:81:4f:5d:20:fd:27:9e:cd:18:21:b1:a1:84:
         0f:8c:1a:61:6d:99:c8:7d:5a:d0:1a:a1:7d:d5:5c:1c:cf:e6:
         f1:ed:1d:17:2a:0a:3e:59:a3:06:5a:04:27:77:c5:e1:f7:35:
         17:65:49:8f:65:85:33:73:28:e8:dc:da:39:b6:29:00:5b:88:
         60:6e:c3:12:ae:01:7f:f2:a3:14:c8:ce:2f:a7:c0:3c:7a:0c:
         41:6d:7f:b5:76:c7:29:97:92:bf:e5:2d:78:f0:43:da:f6:78:
         bf:a8:e5:dc:0e:1d:25:4e:df:c8:91:53:fb:ff:85:f9:93:04:
         4a:9a:96:b4:2e:bc:db:17:35:bc:84:bd:1b:9c:46:14:c6:d7:
         7e:27:78:70:38:8f:89:32:c2:25:4f:98:69:74:b8:96:8d:5f:
         6c:30:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:40:25 2024 by rpki-client on console-ams.rpki-client.org