Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          qBp/ooDacqbPw6/2irSCWz5XSRw5GoW73mT46clbJkU=
Subject key identifier:   73:D0:99:4D:C5:F5:04:18:0B:D4:ED:C7:0D:53:54:68:7D:15:EC:3C
Certificate issuer:       /CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
Certificate serial:       27BCEADDCAEB23C522CA844F35A972662B7B0AA9
Authority key identifier: 51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa
Signing time:             Sat 09 Sep 2023 04:00:01 +0000
ROA not before:           Sat 09 Sep 2023 03:55:01 +0000
ROA not after:            Sat 07 Sep 2024 04:00:01 +0000
asID:                     131111
IP address blocks:        103.175.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl
                          rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 14:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:ea:dd:ca:eb:23:c5:22:ca:84:4f:35:a9:72:66:2b:7b:0a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=510FD91435B7E93052B386D2A1ABB0125A05B1B7
        Validity
            Not Before: Sep  9 03:55:01 2023 GMT
            Not After : Sep  7 04:00:01 2024 GMT
        Subject: CN=73D0994DC5F504180BD4EDC70D5354687D15EC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:32:4e:d5:4a:5c:24:17:37:d9:84:cd:86:
                    67:b1:7c:0b:fd:41:1c:1e:c9:07:9c:6b:96:82:fd:
                    74:28:1e:b9:34:39:77:84:3f:4b:68:ec:67:42:b7:
                    74:b6:b0:0d:bf:e0:8f:74:8d:69:0d:2d:03:65:50:
                    87:bd:08:a7:a7:52:94:4c:54:64:54:9d:69:30:62:
                    f2:ec:16:9b:3b:63:9b:d3:f6:cb:3c:cf:cf:40:71:
                    db:f3:90:3a:5f:31:fb:cc:9c:80:55:ae:17:d8:34:
                    54:06:4b:3b:ea:b4:87:06:d6:ea:fb:a1:b4:1e:f1:
                    1d:52:37:12:93:85:3e:42:68:f6:31:14:db:a2:a4:
                    d3:d9:7d:12:ff:a1:df:5f:aa:16:29:a0:56:d3:0b:
                    a6:9c:c4:72:a0:4c:de:6b:3d:c4:d6:ee:c8:98:4f:
                    f3:b2:ab:0b:e2:5d:d6:df:c6:a0:24:6a:29:fc:3d:
                    e9:8b:7b:7a:c7:b3:93:23:21:69:6c:38:04:8e:b1:
                    d5:5d:4d:15:5f:63:13:e0:d9:9f:50:98:d1:a9:ad:
                    b7:f6:b5:ce:44:a9:ef:e1:c1:99:b8:02:f3:10:39:
                    9a:da:54:1a:cb:3c:35:de:4d:91:4b:3d:78:74:c7:
                    dc:94:56:39:66:58:a8:73:d3:23:27:57:25:f3:b9:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D0:99:4D:C5:F5:04:18:0B:D4:ED:C7:0D:53:54:68:7D:15:EC:3C
            X509v3 Authority Key Identifier:
                keyid:51:0F:D9:14:35:B7:E9:30:52:B3:86:D2:A1:AB:B0:12:5A:05:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/510FD91435B7E93052B386D2A1ABB0125A05B1B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/510FD91435B7E93052B386D2A1ABB0125A05B1B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/063054f6-8d09-4d12-b19b-500d6d921fc1/0/3130332e3137352e34342e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:02:4f:e7:2e:d8:e7:ec:20:a9:a4:d5:6d:42:19:1b:e2:f7:
         82:97:d3:b8:ec:09:7c:55:ee:1a:3d:c9:f4:81:60:0a:41:6d:
         82:65:00:65:3a:f4:ef:79:be:31:67:1a:8f:15:a4:8b:4d:c4:
         db:4e:d6:bf:26:f5:ef:40:76:a9:5e:2e:ed:7b:94:a5:fc:e4:
         14:06:5b:4c:de:42:b0:52:12:1e:9b:dc:a5:c9:da:8e:62:a7:
         a5:86:82:58:f7:16:ee:22:a5:23:bd:a5:a7:04:63:b4:db:c5:
         aa:38:62:58:ce:8a:36:1e:04:27:17:84:3a:1a:b7:0f:41:35:
         ce:79:12:08:f9:fa:87:93:65:51:6a:a1:89:48:04:3b:64:c5:
         15:c9:df:a2:08:4c:76:72:62:e3:f4:65:1a:f8:a3:8d:7b:d6:
         44:3d:26:f7:0b:8f:6d:f6:9e:79:df:61:be:c3:43:5f:14:12:
         47:6e:62:2c:9e:ca:e4:7a:57:e8:23:db:d5:79:b8:7c:57:f3:
         ec:37:03:b4:45:bd:fd:ff:99:41:7e:10:8f:61:b5:80:12:b0:
         78:80:ba:10:c9:cf:5a:3d:3c:a5:25:e1:36:6c:82:7d:ff:b1:
         e4:3d:b8:fa:61:e5:ef:c5:d2:94:f6:ab:f8:bc:35:5d:6f:98:
         c6:b4:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 12:08:20 2024 by rpki-client on console-ams.rpki-client.org