Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa
File:                     3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier:          uw3+Nfy0IlLb9GZPjusXdg4AwrKeaWxbkeGBeWVd1a4=
Subject key identifier:   10:7D:41:A0:A7:76:0A:E0:C3:0E:66:CB:1F:FE:29:01:B3:5D:62:A7
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       62F50E46629574E9008CEA1A2CEB90449C49245A
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:09:40 +0000
ROA not before:           Mon 31 Jul 2023 00:04:40 +0000
ROA not after:            Mon 29 Jul 2024 00:09:40 +0000
asID:                     63497
IP address blocks:        103.134.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f5:0e:46:62:95:74:e9:00:8c:ea:1a:2c:eb:90:44:9c:49:24:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jul 31 00:04:40 2023 GMT
            Not After : Jul 29 00:09:40 2024 GMT
        Subject: CN=107D41A0A7760AE0C30E66CB1FFE2901B35D62A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:29:ef:f4:1a:80:e9:80:d8:75:4b:b3:fe:
                    68:41:9d:e2:51:3e:64:3b:88:42:df:bf:3e:14:20:
                    04:64:10:4c:e7:46:07:e3:93:c4:b6:db:ae:11:7a:
                    3a:76:26:d4:da:8f:66:32:33:ea:7d:09:6f:f2:14:
                    23:ef:61:8e:96:82:78:16:67:22:88:d5:f9:14:17:
                    3c:13:48:fd:d9:b2:36:1e:30:c6:95:7e:45:82:73:
                    18:93:74:3e:ff:ab:3b:00:4a:4e:72:b6:81:31:65:
                    cb:7e:cb:f3:b7:5d:20:54:fa:a5:04:5f:aa:fa:73:
                    d3:80:d7:87:bc:fd:20:8e:c1:20:cf:da:74:8c:d5:
                    c0:53:d9:8b:78:2f:b1:70:de:e2:0b:d8:e6:1a:48:
                    d9:54:1d:14:7d:51:c1:c7:c3:f2:62:7b:c4:74:ae:
                    e6:77:ed:58:c6:3b:7e:bf:7a:af:85:49:9a:b5:ba:
                    b4:cd:b4:ae:45:8f:03:6c:26:ff:64:d1:fa:f6:21:
                    86:f0:e7:01:98:ef:67:19:60:ce:a3:4a:6a:ed:10:
                    8c:f8:87:23:d9:4a:a0:28:54:b6:2c:75:6a:ee:49:
                    f2:f1:20:88:2c:ec:81:10:b1:e8:80:a2:a1:99:63:
                    f5:65:7c:c5:8a:c2:5c:b3:d5:58:09:2a:d9:90:a0:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:41:A0:A7:76:0A:E0:C3:0E:66:CB:1F:FE:29:01:B3:5D:62:A7
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32332d3233203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:0e:20:43:ab:e6:4a:63:25:57:50:15:e8:da:a3:3f:53:
         27:62:1a:83:38:d5:a5:29:cc:6f:1c:46:03:01:50:cc:d1:82:
         f6:11:56:d3:75:dc:bf:ab:47:04:a0:38:fe:5d:6b:ed:54:14:
         c3:93:af:e8:07:c9:cd:e3:12:13:9a:ab:0c:c6:a8:43:23:2b:
         75:29:3d:da:46:88:d3:68:09:a3:bf:31:8d:d4:da:dc:c0:d6:
         57:a8:9b:36:18:ae:d7:ed:97:fe:5a:7d:32:8b:93:aa:cb:15:
         55:57:8a:d2:93:25:c5:c3:f8:ea:cc:d6:4d:b8:67:32:0a:17:
         08:89:5d:91:c7:ab:fb:d2:f1:9a:ce:3a:fd:26:74:7b:bb:7b:
         0d:c8:73:54:c6:81:c1:77:e5:25:18:ef:18:29:a8:34:59:c0:
         14:b6:5e:c5:bc:f0:2c:89:99:95:ee:1a:83:f5:f8:c7:83:bc:
         cd:6d:2b:e0:40:84:f4:ea:f5:ae:be:ef:0d:c4:ca:26:75:de:
         23:ac:cb:83:d4:30:c1:42:2c:84:09:da:88:93:81:d8:80:04:
         55:d1:e8:0e:51:de:7b:ad:4c:e4:bf:c6:96:50:73:6b:f8:38:
         40:46:74:f8:76:af:14:5d:e5:ea:8f:3f:05:c8:b7:56:32:3b:
         92:cd:08:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:54:58 2024 by rpki-client on console-fra.rpki-client.org