Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa
File:                     3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier:          t6TKtOv6VTNeqFq0BbyK9+Bb9so+HrfWmLggJjO83yQ=
Subject key identifier:   F7:A9:96:70:F2:53:D1:EE:23:F2:3A:EF:E5:AA:99:93:0C:31:9C:6A
Certificate issuer:       /CN=7CDEC0195C0619A2844735B38B762AB1C145318A
Certificate serial:       20F14D8E17DB835FF81FF3C821FCCEC42BE26A23
Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa
Signing time:             Thu 05 Oct 2023 07:00:01 +0000
ROA not before:           Thu 05 Oct 2023 06:55:01 +0000
ROA not after:            Thu 03 Oct 2024 07:00:01 +0000
asID:                     138886
IP address blocks:        103.163.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl
                          rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f1:4d:8e:17:db:83:5f:f8:1f:f3:c8:21:fc:ce:c4:2b:e2:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A
        Validity
            Not Before: Oct  5 06:55:01 2023 GMT
            Not After : Oct  3 07:00:01 2024 GMT
        Subject: CN=F7A99670F253D1EE23F23AEFE5AA99930C319C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:22:04:de:86:23:7a:8e:94:22:66:29:67:7f:
                    89:e7:53:8a:98:c4:11:2c:3b:30:fa:37:02:28:d2:
                    28:bb:1e:69:84:97:09:bc:7a:6e:5d:c7:ba:4c:d0:
                    2f:75:3b:bd:de:a0:ac:60:52:8d:f7:50:c2:9b:1e:
                    89:ab:03:41:bd:90:8a:90:4b:69:a6:80:40:0d:6c:
                    ee:85:ae:25:d9:fe:79:80:c1:cd:20:c7:cf:55:b3:
                    ab:46:48:1f:f8:d4:6d:7f:6a:4b:8e:d6:64:47:30:
                    53:f7:57:2a:84:78:28:74:51:5d:62:5a:61:eb:2f:
                    31:19:a4:29:95:48:b1:90:7e:35:50:55:85:82:58:
                    0f:6d:21:1a:58:22:72:cb:94:29:43:2e:aa:e1:a2:
                    59:19:bb:d7:44:69:20:97:37:ca:f8:a0:bc:a2:33:
                    60:dc:77:80:0a:15:4c:00:48:35:0d:e8:49:6b:14:
                    13:c9:53:1e:22:c7:65:28:93:a3:3b:e6:fd:c1:64:
                    c9:66:4a:c9:43:de:5b:8c:3d:b2:19:d6:3f:d4:64:
                    5c:31:04:33:e5:b5:e5:7e:2f:b4:d2:c8:6d:e7:af:
                    a0:bd:f5:35:0e:84:6c:7d:fc:0d:2d:32:93:57:0f:
                    11:46:25:dc:ce:39:f1:35:dc:29:0a:e8:cf:07:bb:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:96:70:F2:53:D1:EE:23:F2:3A:EF:E5:AA:99:93:0C:31:9C:6A
            X509v3 Authority Key Identifier:
                keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:87:10:d9:0e:35:31:d2:aa:22:2b:c4:a6:2f:bf:09:e8:
         ca:07:b9:9a:73:d6:71:08:a6:48:52:f3:fe:61:72:7d:60:fa:
         f1:99:f6:3b:92:40:96:7e:94:19:10:a1:be:93:8a:9e:f5:7a:
         e3:e2:7f:d3:76:ff:72:be:39:2f:83:0d:1c:9d:96:ee:d0:1f:
         5a:ba:85:1d:12:a6:6f:51:8e:fd:94:c1:4b:93:fb:f9:f9:44:
         17:11:94:5b:68:c7:dd:f4:c5:2a:96:44:91:2a:1d:bb:ae:eb:
         10:5b:e1:19:d4:9e:b9:30:55:38:7d:e3:f3:af:07:b0:54:6b:
         4e:ef:3e:99:75:5b:04:7a:23:7c:d2:6f:ca:78:c0:0c:e4:56:
         4f:f1:17:3e:2a:c2:1e:3f:6e:ca:49:78:e9:4f:31:e0:6d:71:
         64:c6:52:b5:b4:1d:44:15:b2:74:3d:84:32:af:59:24:a1:1c:
         bc:59:91:f4:7a:ed:92:50:60:a8:d8:38:b6:0f:1c:3f:7b:15:
         4b:c5:69:1a:1d:df:46:1d:23:94:14:4b:36:66:bf:a9:a8:1b:
         c0:77:1f:04:29:a0:ab:19:37:a0:e9:16:67:c0:87:73:9a:c7:
         b3:7f:99:2d:c8:1d:68:c7:79:74:be:0a:97:4c:6e:f8:49:29:
         ac:fa:bd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 15:50:40 2024 by rpki-client on console-ams.rpki-client.org