Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          BT7epVVkwJX2+64Jqs9oRaoenm6Dids+96U+NSc4Ktw=
Subject key identifier:   B1:39:D2:35:8A:B9:61:8B:2C:35:A1:28:4F:43:90:17:70:22:59:19
Certificate issuer:       /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Certificate serial:       2374DA1BEBD2721095065651C87A94BFCD51F668
Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa
Signing time:             Tue 27 Feb 2024 09:02:02 +0000
ROA not before:           Tue 27 Feb 2024 08:57:02 +0000
ROA not after:            Tue 25 Feb 2025 09:02:02 +0000
asID:                     9341
IP address blocks:        103.180.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl
                          rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:74:da:1b:eb:d2:72:10:95:06:56:51:c8:7a:94:bf:cd:51:f6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
        Validity
            Not Before: Feb 27 08:57:02 2024 GMT
            Not After : Feb 25 09:02:02 2025 GMT
        Subject: CN=B139D2358AB9618B2C35A1284F43901770225919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:24:45:4d:9c:5a:54:23:09:44:77:c4:3b:
                    12:82:54:94:70:af:90:16:84:c3:c6:a2:cd:4f:8e:
                    bd:02:ec:65:d6:96:53:1b:41:73:c7:8d:74:07:10:
                    8d:ee:95:2c:06:6e:58:e7:cf:da:08:28:9a:ef:5f:
                    75:53:61:0b:e3:33:ed:10:e0:52:b1:3e:fb:45:51:
                    7b:94:0d:a0:74:51:b5:2d:89:10:d5:1f:36:c0:bd:
                    d4:22:98:9a:31:ca:50:ec:1d:11:44:a5:04:b8:f5:
                    66:40:0e:6f:d2:fb:b1:69:c5:e2:95:69:02:5e:97:
                    a7:61:07:d2:2e:fc:4b:b2:0a:74:f3:e2:95:1e:d1:
                    ce:5d:8e:8f:79:5d:85:44:cf:34:1c:5a:29:39:52:
                    fe:07:e7:c1:3e:f0:33:45:cb:20:35:cf:77:df:77:
                    35:cc:44:8a:c4:2b:69:89:9e:e0:e7:c1:aa:de:3d:
                    e0:84:d4:50:b7:48:bd:98:cb:ec:00:4f:91:04:40:
                    7a:ef:4e:26:a4:5e:c9:0a:c2:a5:c2:bf:d8:7c:c4:
                    a3:1b:1d:30:d2:44:ed:b8:78:e8:3c:82:f5:e7:00:
                    60:7e:cf:51:9a:87:87:48:a2:9b:91:fb:da:69:2d:
                    f3:41:f3:53:d0:47:01:da:d7:50:ba:57:db:ad:6a:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:39:D2:35:8A:B9:61:8B:2C:35:A1:28:4F:43:90:17:70:22:59:19
            X509v3 Authority Key Identifier:
                keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:d1:6a:f6:da:bb:bf:af:b3:94:f7:05:ea:e0:30:16:10:
         1d:b2:5a:06:cc:16:39:27:8c:01:a1:7c:e4:bd:04:e3:f6:69:
         ad:2c:39:5d:ed:19:8e:b9:f7:ab:26:f9:1b:de:b7:9e:5f:8f:
         a4:9a:8a:9d:9e:88:33:35:24:70:82:64:d3:14:26:36:f9:cb:
         d0:b4:74:1d:8e:89:d6:60:fc:9d:4b:90:89:f4:eb:49:00:4d:
         74:ae:ed:69:b2:55:37:62:05:d5:cd:78:7d:7e:0f:6f:8b:1d:
         73:b2:72:65:18:5c:94:8e:c1:bf:1d:49:f5:2f:b4:ec:21:fc:
         af:36:37:5f:87:11:b4:6f:c8:bb:84:06:63:50:d9:fe:70:da:
         98:ba:30:eb:5b:df:d4:e0:b1:ea:c8:08:bb:07:28:3e:85:b8:
         ff:d4:79:32:c6:33:39:39:cd:5f:3e:59:19:74:a6:b8:8b:68:
         c4:ef:8b:0d:69:0d:7e:62:cc:d5:92:d8:38:a4:44:67:99:96:
         ec:96:80:24:38:23:90:7c:ad:0f:d5:c4:0b:40:18:b8:0d:71:
         7f:2c:e4:63:58:25:5a:f7:c3:c9:bd:08:5e:81:55:6d:32:b7:
         97:c0:3a:87:17:0b:fd:00:12:69:f6:ff:fb:ff:69:ab:6f:d2:
         12:8d:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:14 2024 by rpki-client on console-ams.rpki-client.org