Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          2KmWtkv80rA1OLuZFSok8d15SpMVe1eEAj9OESOJrEs=
Subject key identifier:   68:C4:CD:FC:85:A6:B0:4A:15:AC:1A:74:41:55:5F:03:11:11:44:3E
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       7B77B90D70C9A10392C6E122B97C8B32119FAB99
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:09:40 +0000
ROA not before:           Mon 31 Jul 2023 00:04:40 +0000
ROA not after:            Mon 29 Jul 2024 00:09:40 +0000
asID:                     63497
IP address blocks:        103.134.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:77:b9:0d:70:c9:a1:03:92:c6:e1:22:b9:7c:8b:32:11:9f:ab:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jul 31 00:04:40 2023 GMT
            Not After : Jul 29 00:09:40 2024 GMT
        Subject: CN=68C4CDFC85A6B04A15AC1A7441555F031111443E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:57:fc:14:c3:7c:ce:dc:42:62:3a:fd:98:
                    2f:25:e7:6d:a4:16:7e:1a:3c:92:e2:7d:7f:4d:de:
                    8f:ff:f5:84:8e:e4:96:b7:c2:a2:36:1f:80:31:a4:
                    1f:42:d3:3f:ac:e9:9d:ab:c8:df:ff:e2:84:c9:62:
                    f2:de:78:4d:30:e9:fd:73:a7:55:ac:44:aa:6b:fa:
                    06:ad:7e:f2:aa:6e:3f:db:6c:f8:cc:81:a7:0f:0a:
                    c7:76:40:50:c6:8e:b6:94:88:90:83:58:92:e7:8b:
                    a6:2d:f1:be:c8:28:06:f6:4d:6b:9c:43:bb:ba:54:
                    ef:58:44:23:8e:18:13:36:76:84:8a:dd:98:79:f5:
                    c6:d2:6e:27:08:73:d6:52:bf:10:e1:81:78:5d:3d:
                    c6:e1:51:f5:9e:f5:d1:bf:c0:ed:84:27:fa:18:0b:
                    c6:0d:85:3d:a8:f5:98:1a:c4:f7:18:cc:3f:e8:cc:
                    8b:3c:16:ba:96:8c:8a:2b:44:3d:83:4f:36:c8:56:
                    f6:2b:40:b4:bc:70:b1:05:36:70:b6:92:88:8d:c9:
                    a2:f9:9f:1a:90:cd:df:bf:25:fb:c4:8d:04:e2:84:
                    92:bc:d9:69:8f:fa:88:73:3a:81:c8:9c:71:8b:86:
                    97:31:7e:eb:58:da:b7:9e:88:6a:ec:0e:b9:a4:32:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C4:CD:FC:85:A6:B0:4A:15:AC:1A:74:41:55:5F:03:11:11:44:3E
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130352e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:69:c5:8d:22:e2:e1:00:8d:ce:dc:14:08:8d:df:12:ac:e1:
         9b:a1:50:f4:55:5a:d9:90:87:c1:fd:de:c5:d7:e3:d7:9b:6a:
         96:ee:d5:c2:1a:33:d0:97:eb:d4:91:d0:5e:e2:33:a8:86:77:
         cc:0e:16:e5:21:85:80:47:70:51:1b:70:6a:7c:8b:68:a1:e3:
         9a:59:d0:d8:5e:50:d6:5d:1b:68:d1:40:31:2b:a3:c5:d0:fe:
         aa:d5:59:8f:f8:37:54:f3:67:13:58:9b:fa:94:7a:d3:57:3a:
         ff:63:66:bf:fa:10:4c:48:2d:ff:de:98:59:ed:54:f6:d6:61:
         aa:3c:37:90:82:70:3e:0f:dc:58:60:df:e4:55:53:b5:ee:32:
         66:36:1a:93:64:49:c7:1a:f0:21:a5:23:c0:ec:ae:d2:9b:d5:
         bc:9b:bf:d6:02:98:dc:60:5d:90:4d:7c:2b:44:0f:d1:62:48:
         18:e0:bd:5c:e1:77:79:e3:22:08:37:4e:16:be:95:51:3c:1d:
         6a:da:b7:21:a3:22:aa:bc:2f:2d:da:fa:26:4d:ef:da:ff:ad:
         e9:c6:e3:d0:ad:1e:44:d0:07:c7:fd:72:68:42:0b:af:c7:74:
         5d:11:de:45:aa:bb:7c:2f:c7:90:90:86:e8:6e:a4:27:6c:10:
         ad:39:a0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:54:58 2024 by rpki-client on console-fra.rpki-client.org