Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          s6GAGbGUvqZLM/6214feEg7eJwNelt3g8gTRbV2YnF8=
Subject key identifier:   82:A8:71:E9:CB:52:C2:F5:95:74:54:0D:91:54:B6:C9:AD:A9:EC:AB
Certificate issuer:       /CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
Certificate serial:       0388B4CEFDC55ABD5B49A16D9A86CA5D4D1C14D3
Authority key identifier: 95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:09:40 +0000
ROA not before:           Mon 31 Jul 2023 00:04:40 +0000
ROA not after:            Mon 29 Jul 2024 00:09:40 +0000
asID:                     63497
IP address blocks:        103.134.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl
                          rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:88:b4:ce:fd:c5:5a:bd:5b:49:a1:6d:9a:86:ca:5d:4d:1c:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95E800EBFF64709892CB5741D9EDC75EE74E2A6D
        Validity
            Not Before: Jul 31 00:04:40 2023 GMT
            Not After : Jul 29 00:09:40 2024 GMT
        Subject: CN=82A871E9CB52C2F59574540D9154B6C9ADA9ECAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:f5:d2:39:64:65:57:9c:64:a1:29:b9:fd:
                    42:d2:f8:5c:8e:4b:ee:a4:ee:c7:a3:2d:6b:3a:11:
                    16:4e:a5:c2:0f:6d:30:04:b7:cc:7c:2f:22:c6:a3:
                    35:38:9d:3d:02:be:dd:30:f3:07:53:d2:eb:19:cf:
                    04:7c:a3:44:07:38:4c:c6:86:44:6c:d5:ed:72:ef:
                    16:1c:6d:c8:01:b0:ba:8d:6b:3c:14:a7:6f:3e:77:
                    ef:f1:76:b2:7f:67:bf:ff:6b:89:07:94:a2:b6:04:
                    29:3b:ec:93:55:b5:bd:d2:ca:32:38:7b:51:d1:4b:
                    3b:cf:de:fe:90:4c:f8:b4:2f:71:d3:6b:22:c7:f9:
                    a7:35:45:e1:4d:aa:34:bc:6b:66:27:af:4e:56:84:
                    a7:5f:67:72:b3:6f:54:bc:ea:c2:81:cb:bc:1d:32:
                    ca:94:34:78:56:45:79:43:03:29:15:bb:ca:24:28:
                    a7:86:cc:5a:6e:e6:72:fe:e9:d4:0b:d2:27:b7:d9:
                    80:be:03:0c:a4:ab:ed:ac:fb:cd:e1:4a:97:65:41:
                    0a:81:b1:ef:88:2a:29:3d:b1:ae:e0:91:be:91:d9:
                    fe:8c:aa:95:21:ee:fb:e8:e4:4a:7f:e7:3a:63:71:
                    12:24:a0:98:12:c1:68:91:dc:be:6c:8e:67:62:b6:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A8:71:E9:CB:52:C2:F5:95:74:54:0D:91:54:B6:C9:AD:A9:EC:AB
            X509v3 Authority Key Identifier:
                keyid:95:E8:00:EB:FF:64:70:98:92:CB:57:41:D9:ED:C7:5E:E7:4E:2A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95E800EBFF64709892CB5741D9EDC75EE74E2A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:16:46:a3:b7:26:a6:73:89:39:f5:1f:ec:95:af:d0:1f:72:
         5a:3e:e9:a6:ec:05:41:37:a9:c4:37:ae:5a:c7:d5:a9:d4:d3:
         42:f2:38:7b:81:1d:71:00:5a:e2:be:7b:86:26:c3:5e:89:54:
         5f:7f:82:6c:0a:26:03:43:c2:09:52:da:f4:f8:dc:13:d7:d4:
         3b:33:64:4f:0b:8b:53:db:96:73:b5:4f:3b:ff:73:bc:39:ec:
         19:d0:ae:0d:0a:98:31:fe:32:31:31:eb:76:4f:89:f8:26:b2:
         51:ce:ab:44:df:b1:24:01:fa:3b:dd:e6:7e:28:c1:31:0f:4c:
         7d:bd:e3:d8:a6:8f:e6:c8:ca:78:ff:5e:c3:a5:f8:04:df:dc:
         b7:a5:83:b0:9a:07:e8:05:04:eb:ec:9c:76:39:9f:37:d5:a7:
         04:b0:d4:44:c1:8a:cd:0a:1d:11:a9:40:bb:0f:35:0a:08:15:
         c6:9c:6c:8b:f7:9d:22:50:00:76:a6:e5:2f:ce:08:36:9e:b7:
         ed:32:d4:10:18:e3:ae:65:a7:0f:9d:27:23:ad:ff:c2:99:a9:
         73:45:52:6d:43:6e:a0:30:17:6d:b8:32:95:5a:55:82:0f:62:
         9c:63:b9:10:47:b9:86:ee:5a:95:71:85:a8:9f:d1:90:a1:ad:
         fe:fa:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:49 2024 by rpki-client on console-ams.rpki-client.org