Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
File:                     3130332e3136392e37322e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          UZJGRzZKkVB/K4lD1yRKScQ+jSrTmsieVQyYpXH1XWo=
Subject key identifier:   3F:73:B2:E8:0F:01:0B:37:D3:03:E4:3E:82:B0:80:A2:C3:BE:77:8D
Certificate issuer:       /CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
Certificate serial:       79DC4FBD0E019980A5570C8A42349B71D61DBDD7
Authority key identifier: 99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa
Signing time:             Mon 27 May 2024 09:02:07 +0000
ROA not before:           Mon 27 May 2024 08:57:07 +0000
ROA not after:            Mon 26 May 2025 09:02:07 +0000
asID:                     38320
IP address blocks:        103.169.72.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl
                          rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:4f:bd:0e:01:99:80:a5:57:0c:8a:42:34:9b:71:d6:1d:bd:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993D6DBC0B37BB59CEA86CE024A349353C57D366
        Validity
            Not Before: May 27 08:57:07 2024 GMT
            Not After : May 26 09:02:07 2025 GMT
        Subject: CN=3F73B2E80F010B37D303E43E82B080A2C3BE778D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:95:eb:4a:52:50:b3:50:e8:77:c6:62:b9:
                    83:7a:9d:ac:84:91:02:df:c3:f4:e7:40:e3:8d:a2:
                    78:95:88:2f:f6:21:24:f4:35:8a:c4:c7:68:5c:24:
                    6c:ec:cd:01:e2:db:0d:0a:34:e7:44:cd:1f:bf:2f:
                    84:3e:b9:43:7f:4c:18:aa:45:81:ac:19:db:4d:18:
                    1b:7a:f3:77:d1:65:dc:70:65:75:e2:ae:bd:d9:cc:
                    31:be:f6:54:7a:79:51:50:7e:25:38:61:e4:b9:b1:
                    91:74:e9:fc:90:f8:e0:8f:61:d0:da:eb:3f:fa:a8:
                    40:51:74:d9:3d:a6:c1:56:5f:b7:0e:36:a6:e5:62:
                    9f:a0:50:08:bb:93:c8:df:e9:ce:af:b6:90:8c:b9:
                    ba:e2:9b:21:14:13:64:d5:54:aa:b8:bd:3e:c9:86:
                    57:0e:ca:20:bf:7c:a0:ce:3e:ae:5a:86:55:b2:a2:
                    c3:92:ed:3f:4a:62:53:d4:1d:bf:53:13:c8:46:5f:
                    2c:5e:c7:cd:c9:6a:80:c0:b4:ea:a8:f1:2c:a8:13:
                    75:0b:41:d9:52:0f:04:9d:51:56:19:cf:10:84:f6:
                    73:95:86:2c:ab:1c:18:09:95:00:5f:65:9c:25:cb:
                    50:34:8e:ce:7b:49:99:c4:a6:db:00:27:17:c5:7a:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:B2:E8:0F:01:0B:37:D3:03:E4:3E:82:B0:80:A2:C3:BE:77:8D
            X509v3 Authority Key Identifier:
                keyid:99:3D:6D:BC:0B:37:BB:59:CE:A8:6C:E0:24:A3:49:35:3C:57:D3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/993D6DBC0B37BB59CEA86CE024A349353C57D366.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/993D6DBC0B37BB59CEA86CE024A349353C57D366.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/141a02e6-2171-47c9-86c9-d5d80f458836/0/3130332e3136392e37322e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:e0:0f:3b:78:58:4f:ba:cf:51:4b:20:18:58:3a:7f:33:70:
         b3:8e:47:74:d6:c0:1c:bb:94:3d:a1:f2:4f:a8:e8:b7:d7:87:
         15:5a:0f:98:ad:d7:29:ed:30:0e:86:94:55:d0:28:ac:de:0e:
         24:55:b6:65:18:ed:c1:39:89:d7:69:c6:92:b9:b0:27:c2:f0:
         71:1f:5e:4d:ca:15:b2:b7:13:74:2b:e9:24:5c:6c:d9:ad:a5:
         8d:b2:65:c5:a5:4b:f9:8a:40:4a:05:c0:79:9f:4c:af:7f:2a:
         bd:14:d6:7f:42:24:5a:b5:90:79:ae:9a:0e:29:66:5a:e5:1a:
         66:b2:62:52:9a:db:c8:7e:bc:8a:32:cd:ad:58:ff:d9:8b:f0:
         1e:25:b5:7e:70:5a:ea:3b:9d:d0:bd:88:04:63:3b:cf:5a:b6:
         d9:36:ae:59:cd:af:2d:1f:3d:20:6b:6d:41:24:d4:91:46:ac:
         59:af:8b:85:f5:a2:fb:7c:44:30:9c:eb:d3:91:d5:2d:00:a9:
         17:47:47:82:98:a0:72:c7:4b:1e:64:67:d2:ca:a0:8b:c0:e2:
         8c:d9:17:1a:37:21:d1:40:c6:23:0b:93:78:05:d9:21:07:10:
         9e:2b:0e:b5:4f:1c:bd:54:98:88:f0:d8:75:ff:be:c8:a3:5b:
         2b:bb:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org