Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa
File:                     3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa (raw, json)
Hash identifier:          3PhwNeSYDAcIik5pnRDMCcA0nHd3sCf3a5FivQ6ylJw=
Subject key identifier:   A7:2F:84:6F:0B:FF:E0:32:08:3C:04:68:1F:18:20:9D:37:5A:60:F8
Certificate issuer:       /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
Certificate serial:       58958086D2DD205A28A894027E2A0B4B43377D87
Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa
Signing time:             Wed 17 Jul 2024 06:00:02 +0000
ROA not before:           Wed 17 Jul 2024 05:55:02 +0000
ROA not after:            Wed 16 Jul 2025 06:00:02 +0000
asID:                     142396
IP address blocks:        103.172.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl
                          rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:80:86:d2:dd:20:5a:28:a8:94:02:7e:2a:0b:4b:43:37:7d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
        Validity
            Not Before: Jul 17 05:55:02 2024 GMT
            Not After : Jul 16 06:00:02 2025 GMT
        Subject: CN=A72F846F0BFFE032083C04681F18209D375A60F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:0c:12:d8:94:23:d7:4a:16:6a:b6:0d:0b:
                    2f:a3:27:02:a4:10:c2:6d:3c:3d:2b:2e:b5:bb:8d:
                    43:5b:a9:55:71:78:55:6f:0f:bc:8c:6d:f2:79:c8:
                    6e:44:49:77:8e:a7:d3:52:58:10:13:47:0a:50:36:
                    96:8e:e4:14:35:6b:39:8f:0d:11:58:51:9d:02:2c:
                    6a:a1:80:e4:2d:84:ab:45:a3:4d:d1:44:5d:a5:d8:
                    7c:73:00:51:10:2e:a4:59:6d:7e:98:a2:4e:65:47:
                    ac:29:bb:9d:f1:2c:d3:b8:56:8b:e8:2a:0a:80:f8:
                    72:09:72:eb:c3:f5:78:ad:d6:5a:c5:0e:bd:1e:99:
                    2e:79:05:6b:4e:af:45:3a:f3:df:ba:dd:8e:70:65:
                    e1:2c:8d:a4:a1:7e:c2:2e:60:51:8a:5d:7d:17:d4:
                    d5:74:32:87:97:53:6d:9e:22:7b:aa:84:8c:51:ef:
                    cc:ad:be:75:b7:7d:d5:ca:c4:bc:93:96:ed:fd:f4:
                    ab:c4:d4:0f:fc:5e:8c:c0:2c:a9:9a:c5:3b:5f:2e:
                    0b:ca:bd:7c:59:15:36:13:64:b6:b0:f3:f0:f3:b3:
                    cd:4d:38:69:44:b6:61:51:bc:7d:c9:4e:5d:ba:53:
                    79:87:12:83:2c:e1:90:e7:01:bc:20:cb:b4:67:b9:
                    b7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:84:6F:0B:FF:E0:32:08:3C:04:68:1F:18:20:9D:37:5A:60:F8
            X509v3 Authority Key Identifier:
                keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32332d3233203d3e20313432333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:34:41:e6:91:cd:65:85:a4:b4:9a:4a:7c:55:c2:3a:04:
         9b:86:41:8f:8c:34:09:ab:30:63:a0:8b:16:73:0d:64:9e:77:
         a3:ec:19:14:61:3e:03:70:0c:87:a0:bc:70:ed:3b:68:24:c5:
         51:fc:05:bb:99:2f:6a:5f:98:17:0b:16:14:19:31:88:73:98:
         51:77:4a:ed:19:2d:b2:66:49:bc:6b:d0:56:c8:ae:bf:19:00:
         db:d3:5c:72:1c:7f:cd:6e:af:2d:68:fe:09:41:33:e6:28:8c:
         59:76:77:f9:ca:ba:e9:8d:10:2c:de:f5:18:48:80:76:0c:f7:
         91:27:4f:15:15:ab:a1:77:00:dd:06:b9:ce:19:31:b3:a2:25:
         14:22:ba:7e:b1:ba:78:1a:97:33:fc:a8:d6:c8:d2:1a:d9:24:
         65:73:32:bd:e7:b8:78:b1:a7:56:c4:79:c8:20:95:02:f1:dd:
         1a:64:67:be:d4:0a:c7:7b:1a:a6:fb:06:80:f6:06:f4:96:d9:
         cf:d6:57:7c:d2:df:cd:46:f0:2a:fd:b6:f0:fb:1a:fc:8e:21:
         5f:4c:5c:e0:7d:c9:ca:51:c5:27:e7:d2:55:24:c9:fb:04:a9:
         86:ac:de:5f:12:e9:9f:7d:f9:de:95:71:fb:0d:63:52:e5:ff:
         56:db:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org