Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa
File:                     3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa (raw, json)
Hash identifier:          nN5dyNrzoZXbuZcGIOJrv7v8eiXlOYmZJDvRBHlGsK0=
Subject key identifier:   01:B5:E5:8B:FE:ED:E8:62:0F:4F:67:34:5F:D3:E3:3B:67:B1:EA:AB
Certificate issuer:       /CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
Certificate serial:       53685F01D0080664CA3DFEBC4FDE0575113EA9C5
Authority key identifier: 97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa
Signing time:             Mon 31 Jul 2023 00:04:41 +0000
ROA not before:           Sun 30 Jul 2023 23:59:41 +0000
ROA not after:            Mon 29 Jul 2024 00:04:41 +0000
asID:                     134648
IP address blocks:        103.208.102.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl
                          rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:68:5f:01:d0:08:06:64:ca:3d:fe:bc:4f:de:05:75:11:3e:a9:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D77F08669FB94E4E99F795519FB61DCAC62C9F
        Validity
            Not Before: Jul 30 23:59:41 2023 GMT
            Not After : Jul 29 00:04:41 2024 GMT
        Subject: CN=01B5E58BFEEDE8620F4F67345FD3E33B67B1EAAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:b4:cd:ec:7b:65:35:4d:6b:3b:76:d6:12:
                    9c:8c:4e:78:4e:12:88:a2:32:5c:30:49:28:05:6c:
                    68:7a:eb:5c:cf:ca:82:e1:b3:d4:86:f6:50:76:39:
                    41:45:21:4a:7b:35:f9:68:77:16:2b:c4:50:86:b1:
                    9c:99:db:8f:ca:a8:4e:14:eb:1d:2d:94:14:7c:16:
                    e5:32:64:5a:18:f8:f0:b4:4f:de:06:f6:f6:52:f9:
                    86:db:9f:c3:1c:d3:1b:fe:3d:d6:58:75:66:58:6e:
                    f3:c3:c3:38:69:d0:4c:6c:5d:d8:f7:d0:70:ef:45:
                    a0:6b:bc:4b:74:63:96:5e:9f:86:93:20:7f:94:06:
                    56:07:25:b3:71:19:60:a2:5c:b9:f8:d5:32:5e:ab:
                    1b:48:54:f1:7d:f2:12:64:24:00:ee:ec:16:6f:eb:
                    6a:7a:70:de:7a:d9:44:08:2f:9a:b3:a5:0a:01:83:
                    b4:af:1c:a6:bb:57:6a:cb:ba:61:ac:b2:bf:05:b7:
                    53:31:fe:4d:ed:0a:42:55:13:b9:03:1f:c1:de:96:
                    cd:93:27:76:67:57:d6:b5:9b:63:ea:e8:e9:0a:6d:
                    d2:03:ae:0a:ab:53:1e:80:1f:7d:d4:0d:0d:ee:63:
                    c6:29:2d:0a:bf:fc:67:14:92:f1:80:cc:d3:66:1a:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:E5:8B:FE:ED:E8:62:0F:4F:67:34:5F:D3:E3:3B:67:B1:EA:AB
            X509v3 Authority Key Identifier:
                keyid:97:D7:7F:08:66:9F:B9:4E:4E:99:F7:95:51:9F:B6:1D:CA:C6:2C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/97D77F08669FB94E4E99F795519FB61DCAC62C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97D77F08669FB94E4E99F795519FB61DCAC62C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22c69440-8b17-4a68-a0fa-66159e2162e0/0/3130332e3230382e3130322e302f32342d3234203d3e20313334363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:42:77:5f:e1:d7:e0:e5:c4:f0:b5:c4:eb:d4:c1:f8:1d:7b:
         23:f4:19:80:c7:e7:e4:11:5b:be:54:89:56:d2:b0:aa:47:b5:
         9d:6e:e1:5f:26:cf:52:b2:3b:ad:81:63:fe:79:ab:5d:e1:5c:
         9e:0a:bf:8c:0e:d6:c5:d0:41:f8:d4:78:54:7d:39:fd:e9:80:
         55:d1:54:dc:a8:82:18:c0:09:71:6d:1a:eb:8e:bb:83:5b:57:
         72:c5:27:23:e7:08:a8:33:cc:4a:75:72:fd:fb:48:74:61:24:
         bb:35:38:59:36:a3:dd:f6:c8:77:35:36:c2:89:47:87:fb:72:
         d3:e1:4e:98:df:b1:eb:bd:c3:ef:5b:6c:98:a9:af:54:79:c0:
         2b:e3:8d:83:c2:25:5c:63:ab:8a:30:56:16:9c:64:e6:3d:77:
         61:59:07:3c:9d:2f:4c:4c:e6:1b:1a:19:bd:af:d1:8d:c5:21:
         01:9f:a9:44:2e:07:0d:4a:5c:d8:92:45:1c:82:0a:ec:91:65:
         c4:29:22:dd:4d:e1:b5:0b:64:a9:46:33:58:92:c6:f3:56:5d:
         2f:01:53:5f:19:73:af:ca:1d:f3:22:c7:2a:32:f0:8d:10:72:
         3c:36:4b:4b:a8:41:74:30:30:7f:fe:7b:67:03:6b:4a:44:04:
         b1:48:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:28 2024 by rpki-client on console-fra.rpki-client.org