Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa
File:                     3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (raw, json)
Hash identifier:          Ewq1v4ZwxesrmJuu5MmdIZlmBhkXCQ1KFzaSlu1f3ks=
Subject key identifier:   6B:80:6E:AB:BC:1C:E6:2E:11:06:03:19:5A:8E:4F:D3:07:29:BD:C6
Certificate issuer:       /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Certificate serial:       792015A46AE3493FAA832FF296AC022E71D75EB5
Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa
Signing time:             Wed 20 Mar 2024 10:02:09 +0000
ROA not before:           Wed 20 Mar 2024 09:57:09 +0000
ROA not after:            Wed 19 Mar 2025 10:02:09 +0000
asID:                     132641
IP address blocks:        103.83.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl
                          rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:20:15:a4:6a:e3:49:3f:aa:83:2f:f2:96:ac:02:2e:71:d7:5e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
        Validity
            Not Before: Mar 20 09:57:09 2024 GMT
            Not After : Mar 19 10:02:09 2025 GMT
        Subject: CN=6B806EABBC1CE62E110603195A8E4FD30729BDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:09:fd:bb:c2:3a:95:fc:4f:a7:25:e5:c9:45:
                    87:c4:90:83:d9:fb:ff:88:e6:98:86:89:91:49:dc:
                    cd:e8:51:a6:db:75:93:21:72:7c:94:43:19:40:54:
                    48:68:cf:c1:f0:4c:28:df:cf:31:d2:48:85:85:64:
                    53:11:20:6c:63:fe:c5:c2:62:2d:96:55:6e:41:ef:
                    f0:3d:0d:29:ce:fd:06:87:f1:be:fc:7c:3f:b2:e4:
                    38:34:2b:ad:fe:63:03:81:91:73:0c:94:80:4e:db:
                    b6:bd:a2:e1:b9:0a:4e:cb:32:b1:e7:f7:db:4c:eb:
                    25:43:cc:dd:80:d9:09:2b:de:5d:a7:ef:13:65:78:
                    01:02:de:df:ba:50:64:84:12:77:40:99:c1:40:15:
                    e8:ca:a4:47:da:b7:8d:c8:4e:31:ce:dc:c8:0a:1a:
                    c1:eb:3d:bb:8f:fb:1f:b0:b8:97:5a:1e:ae:f6:fd:
                    75:8a:3b:97:da:fe:37:09:50:ca:b0:08:93:2c:e9:
                    76:99:94:73:80:76:35:21:6c:fb:3b:f3:4b:6e:41:
                    95:39:99:e6:63:49:3a:db:af:99:5a:0b:41:8f:a8:
                    95:52:6f:6e:7d:4a:52:f4:99:5e:9e:8c:9f:ff:44:
                    3c:ec:60:24:ec:a2:a6:d0:32:1b:d7:ea:66:ae:80:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:6E:AB:BC:1C:E6:2E:11:06:03:19:5A:8E:4F:D3:07:29:BD:C6
            X509v3 Authority Key Identifier:
                keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:82:15:f1:02:49:99:49:4d:c5:44:d9:f0:10:aa:83:a5:
         e2:9c:40:1c:ae:82:17:d0:cc:40:16:cc:c7:3d:d0:83:e3:83:
         e3:b2:4c:ec:3e:68:a4:d7:0a:9a:30:3f:46:ed:0a:46:30:df:
         d8:e4:a1:a0:7b:52:0a:5c:98:85:b3:1a:3c:54:1a:30:94:30:
         7c:c6:da:5a:b9:80:e8:b4:99:a6:b8:a7:34:76:22:84:3e:00:
         23:03:4f:8a:24:fd:44:d2:d2:7a:49:22:0d:4c:bc:4b:ed:34:
         a6:14:ed:70:1a:56:f5:53:9b:99:83:27:dc:da:09:68:46:80:
         ea:a9:ff:4a:87:d0:1f:a5:d1:91:67:c0:f8:4c:f5:77:12:f3:
         da:14:be:3c:6a:a0:c0:eb:c8:1f:47:70:87:7c:35:8e:85:01:
         2e:4c:a7:cc:e7:5f:15:b9:3e:b7:b3:82:a3:79:b3:82:fd:c7:
         9c:9a:f3:2b:00:dc:cb:b4:89:29:5e:46:e0:11:30:f9:8c:ef:
         4f:82:d7:f5:62:fe:ce:88:94:4f:a4:95:24:3b:42:f3:14:29:
         27:26:71:93:3d:30:aa:5c:e1:6d:a1:a7:ac:d0:a3:93:5d:6e:
         98:e8:54:ff:cd:a0:3c:92:a9:67:71:af:46:e2:cd:21:48:12:
         99:e9:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:55:59 2024 by rpki-client on console-fra.rpki-client.org