Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa
File:                     3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (raw, json)
Hash identifier:          KKMvnxEpHLcD4JqwPE4S9ATTx/ynotILGK2CkMr0y04=
Subject key identifier:   5D:E3:3E:EB:D9:7E:E8:F0:A6:4D:A6:50:2F:4E:BB:69:73:05:A4:4B
Certificate issuer:       /CN=D6729321F95E264CBE7373469790C77F8B57E268
Certificate serial:       1269826A679617F3ABA71A7797F378FFFC159882
Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa
Signing time:             Thu 19 Oct 2023 17:00:01 +0000
ROA not before:           Thu 19 Oct 2023 16:55:01 +0000
ROA not after:            Thu 17 Oct 2024 17:00:01 +0000
asID:                     147167
IP address blocks:        103.177.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl
                          rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:69:82:6a:67:96:17:f3:ab:a7:1a:77:97:f3:78:ff:fc:15:98:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268
        Validity
            Not Before: Oct 19 16:55:01 2023 GMT
            Not After : Oct 17 17:00:01 2024 GMT
        Subject: CN=5DE33EEBD97EE8F0A64DA6502F4EBB697305A44B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:50:ff:4d:b7:19:9d:f5:c7:0a:da:76:19:
                    f0:3c:e3:21:53:c7:e9:44:ae:05:f0:5c:fa:ea:62:
                    05:7d:46:e5:52:b1:3d:db:6f:a3:3f:89:51:0b:81:
                    2b:37:52:4a:78:72:e3:a9:90:68:b5:be:b7:a8:86:
                    ed:1a:a1:e3:0e:48:5e:a0:fb:d6:f0:5e:9d:3b:58:
                    83:2b:57:13:0c:07:9e:fd:51:4b:12:d3:0f:66:d8:
                    50:ea:17:15:62:6e:bc:75:11:bd:c4:97:28:24:cb:
                    60:8b:d0:8a:4e:21:27:e1:76:30:68:ae:34:7c:07:
                    f4:81:54:5b:c7:09:c3:66:2c:8d:83:bd:82:cf:a5:
                    8d:4a:28:0a:a6:eb:b3:17:06:ea:dd:82:6a:7d:51:
                    08:46:d4:76:82:e2:1d:cb:3e:23:f6:01:88:bd:c4:
                    ed:c4:85:88:fe:94:2e:49:a2:16:21:54:08:28:9d:
                    72:4d:8b:f0:89:3a:46:ba:92:72:82:00:4d:f1:ae:
                    d5:71:c9:82:d9:8e:29:86:50:b9:39:0c:4f:06:f0:
                    af:a6:7a:50:29:a6:b9:ee:44:25:78:eb:73:4c:43:
                    55:d0:55:a2:e9:f1:41:d3:21:3b:6e:1f:79:99:f1:
                    6a:09:d9:3d:80:92:a0:fb:a9:c9:b3:a8:a2:15:55:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E3:3E:EB:D9:7E:E8:F0:A6:4D:A6:50:2F:4E:BB:69:73:05:A4:4B
            X509v3 Authority Key Identifier:
                keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:70:ff:71:a8:41:15:d9:a9:dd:6c:ad:4a:74:5b:15:c1:ae:
         2a:c3:36:de:a7:e6:67:61:44:dd:c9:34:18:8b:f3:d2:18:00:
         d3:c8:e4:4b:c7:43:40:7f:58:1a:6a:11:28:34:ba:d0:ce:70:
         4a:d2:d1:4d:32:4e:8a:b4:54:be:0f:b2:0f:fb:31:c4:8e:29:
         b7:4d:13:de:cb:60:d6:bd:8d:14:d6:d8:92:1d:b7:8f:be:57:
         10:4c:31:12:49:39:97:97:ae:35:99:e9:26:22:34:2a:37:67:
         1f:21:80:d7:42:ab:89:3b:57:54:90:d9:95:23:30:6b:a6:d4:
         c2:4b:5b:2c:8f:e1:6a:83:d4:0c:25:17:17:2f:0a:81:3c:b8:
         af:71:34:ef:0c:1b:a0:bc:83:c9:b2:23:e3:85:45:90:99:f5:
         eb:ca:9c:02:5a:6c:75:8a:b7:d9:e2:e5:b3:75:62:b6:0a:ce:
         58:bf:10:91:18:bf:5d:55:cf:ba:16:b5:e0:4b:b3:d2:c2:53:
         eb:a8:22:25:15:b7:fc:4b:44:a3:24:ae:6c:db:c8:bb:ef:e2:
         24:82:7e:ec:da:62:0d:bb:01:8e:e2:b8:99:bb:45:62:f1:6b:
         89:64:ff:b2:1a:7f:17:e9:81:e1:4b:e5:ba:16:f8:3e:5a:b8:
         ef:92:62:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:50 2024 by rpki-client on console-ams.rpki-client.org