Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa
File:                     3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (raw, json)
Hash identifier:          lG6GdZP6JcoPmnI4M7mWGssz8092xwxXUvy2NqAlsco=
Subject key identifier:   0D:30:97:DA:AD:D1:AC:11:05:DF:A1:C4:CF:3B:09:75:73:9E:45:3B
Certificate issuer:       /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
Certificate serial:       566BB7AF2BCD519EA9ACF49573121BCB74756CFB
Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa
Signing time:             Thu 21 Sep 2023 03:00:00 +0000
ROA not before:           Thu 21 Sep 2023 02:55:00 +0000
ROA not after:            Thu 19 Sep 2024 03:00:00 +0000
asID:                     149702
IP address blocks:        103.181.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl
                          rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 17:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:b7:af:2b:cd:51:9e:a9:ac:f4:95:73:12:1b:cb:74:75:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C
        Validity
            Not Before: Sep 21 02:55:00 2023 GMT
            Not After : Sep 19 03:00:00 2024 GMT
        Subject: CN=0D3097DAADD1AC1105DFA1C4CF3B0975739E453B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:c9:5e:fc:50:ce:94:af:35:16:e1:16:a5:
                    ab:ca:ca:70:a2:f5:8f:e3:d2:af:80:d8:2c:ca:65:
                    e3:f6:27:1f:10:a9:64:91:19:12:74:2e:c2:0e:0e:
                    c3:9b:32:f3:81:a0:98:88:0f:80:e0:9f:8d:d6:c8:
                    9d:67:2c:a0:f6:4d:a8:f5:8f:e9:32:bc:c3:45:d9:
                    1a:95:83:9b:df:64:91:b5:a6:fc:6a:70:c5:49:5e:
                    3a:25:f8:71:32:55:03:11:af:51:da:c4:67:3b:76:
                    75:50:cf:6b:58:61:0a:14:0a:59:33:ec:b4:5e:38:
                    78:31:4c:5c:55:d1:4c:d1:1a:df:01:50:25:f2:be:
                    0f:83:fe:e3:29:65:1d:be:cb:e7:df:60:c9:19:b8:
                    36:09:7b:a7:29:83:67:35:5a:60:7a:5b:21:32:f8:
                    d9:53:aa:fd:b4:c3:3d:f2:24:a2:32:57:cd:52:69:
                    a6:60:11:67:3c:7c:20:5e:67:a5:50:12:95:61:ba:
                    57:0d:21:9e:72:65:59:e2:8d:9f:b7:a3:5b:f0:bc:
                    4e:c4:19:7a:5e:66:fd:99:7f:a9:ee:f3:de:1c:47:
                    f5:e8:b9:3c:6e:af:a2:a8:92:c4:a2:3a:84:4b:4c:
                    c2:44:a3:b4:9f:8d:b1:8b:b3:93:d7:83:a7:6b:11:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:30:97:DA:AD:D1:AC:11:05:DF:A1:C4:CF:3B:09:75:73:9E:45:3B
            X509v3 Authority Key Identifier:
                keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:26:cd:a4:f0:44:2f:84:4a:17:1a:4d:3c:fc:a5:d4:75:df:
         1a:e0:1a:5d:32:7d:84:ed:6a:79:2a:2c:e5:96:9b:72:ad:f7:
         66:19:d7:ef:15:53:30:f5:a5:3a:90:32:d1:2e:61:86:c3:02:
         ad:8e:1d:24:89:0c:95:7f:f0:7b:3e:c7:ed:01:f1:33:1c:97:
         9b:79:73:b6:f8:5c:35:ce:83:30:41:54:70:09:14:7d:69:e2:
         97:b5:33:e5:a2:d8:10:7a:6e:8f:47:ab:5d:6a:cf:ef:21:da:
         92:32:be:1b:12:d0:72:5e:f2:90:53:4f:ab:3d:7f:b9:0e:29:
         04:37:b0:66:04:56:8a:cc:ab:d9:a5:04:f9:40:69:12:f3:ec:
         ab:dc:6d:53:a9:8d:63:bc:e8:b2:ef:aa:31:ce:2c:aa:5e:21:
         ff:5a:fc:da:91:8b:26:5e:77:69:e4:f6:e0:8d:ee:a6:70:14:
         ee:69:04:40:1c:7d:3f:cd:cc:99:a6:ea:55:7f:d8:4c:4e:a3:
         e0:48:3e:6c:72:c7:76:fc:49:26:3e:d6:47:b3:38:57:5a:4d:
         dc:d5:f8:9d:39:21:b8:2c:04:ac:8a:aa:e3:b4:ae:3f:da:bf:
         18:50:f8:9e:38:74:b1:25:6b:72:2d:5e:bc:44:1d:15:39:e3:
         dd:64:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:50:22 2024 by rpki-client on console-ams.rpki-client.org