Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa
File:                     3130332e3132322e302e302f32332d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          v2nSsVIyDiYiUeRnPmzQR39OqL4b8pjARvYC2QixqcU=
Subject key identifier:   59:4C:8C:9C:A7:CE:E6:1B:FF:F6:85:79:4C:80:A4:EE:00:8D:F9:24
Certificate issuer:       /CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
Certificate serial:       63CA7B77248A9EC5FEE49EF17770E2006DAC5E1E
Authority key identifier: EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa
Signing time:             Fri 01 Mar 2024 15:00:01 +0000
ROA not before:           Fri 01 Mar 2024 14:55:01 +0000
ROA not after:            Fri 28 Feb 2025 15:00:01 +0000
asID:                     135477
IP address blocks:        103.122.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl
                          rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ca:7b:77:24:8a:9e:c5:fe:e4:9e:f1:77:70:e2:00:6d:ac:5e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF
        Validity
            Not Before: Mar  1 14:55:01 2024 GMT
            Not After : Feb 28 15:00:01 2025 GMT
        Subject: CN=594C8C9CA7CEE61BFFF685794C80A4EE008DF924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:29:fb:21:83:43:66:e5:d2:01:e8:08:cb:
                    16:0f:96:10:60:fb:a5:6a:6b:c6:07:be:a6:6f:38:
                    f9:a6:eb:b4:5b:b9:a0:9c:46:d8:e4:cb:7c:f4:36:
                    f2:b7:ba:85:08:31:0c:ef:29:a7:76:03:0c:ef:a0:
                    91:c4:2e:40:3a:8b:b3:c0:2b:30:16:cf:80:fb:12:
                    b0:8c:0e:64:02:1f:88:49:6e:5e:fb:1e:39:fd:5c:
                    2b:09:7a:e2:cc:ec:60:24:7e:20:85:ca:fc:3f:84:
                    14:9f:d2:f3:52:37:f0:fb:5a:e2:65:ab:46:29:96:
                    fa:6d:cc:90:61:54:25:61:2a:5d:fe:d2:52:85:0a:
                    5b:27:eb:6a:02:6d:ef:0b:7d:2f:e6:dd:80:b0:e7:
                    a8:1e:67:8a:00:c1:47:91:0e:4d:1a:ec:53:42:10:
                    68:26:85:4f:ef:34:00:38:98:9e:7b:c7:88:59:57:
                    c4:35:33:31:1c:e4:b9:88:6b:0f:18:99:fc:0c:45:
                    f2:93:be:c9:63:63:75:b5:33:9a:18:00:0c:79:41:
                    26:3b:5a:c5:6a:8f:b6:3a:b8:3c:bf:c7:57:e0:8d:
                    05:5a:d4:d3:b3:9e:45:cf:e7:29:dc:8e:1b:f0:fb:
                    1e:ca:62:d8:ed:ea:a3:8f:9f:8e:01:cb:5b:fe:bc:
                    dc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:8C:9C:A7:CE:E6:1B:FF:F6:85:79:4C:80:A4:EE:00:8D:F9:24
            X509v3 Authority Key Identifier:
                keyid:EB:DA:93:9B:37:F3:6E:8A:9F:58:1B:10:36:E0:1C:32:F1:F3:D9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBDA939B37F36E8A9F581B1036E01C32F1F3D9DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2312a146-f954-47e3-b93f-92c2fe6d89ea/0/3130332e3132322e302e302f32332d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:04:51:a2:b4:5f:6b:6c:3e:1d:b6:e1:f8:43:fe:5a:a6:32:
         6a:06:41:e4:4a:55:ba:ec:aa:76:54:b4:8c:73:1e:c0:4e:cd:
         da:b8:eb:b8:72:cb:e6:12:73:85:66:f3:f5:7e:f6:dd:f5:30:
         cc:a7:fa:28:ff:25:38:de:f1:5e:ab:d9:38:3a:db:3a:a9:4e:
         a0:9d:2f:08:75:b9:88:48:f5:d5:3a:22:4b:18:0c:74:8a:15:
         9a:e6:9a:bd:2b:18:22:d7:cb:29:eb:d5:80:f7:59:94:5f:ad:
         0e:99:4f:e3:22:47:1d:73:c7:a2:29:65:c6:52:72:57:d6:3d:
         5a:47:82:8f:60:eb:07:10:37:44:2a:7b:d6:a4:80:76:73:70:
         8a:a7:a0:b2:c6:69:aa:ad:d0:b1:14:de:ab:42:07:aa:3c:05:
         f4:82:85:77:d8:96:32:8d:f6:c5:55:67:00:5d:5a:5a:22:b2:
         dd:a5:0d:26:7a:f3:4f:20:61:e4:4b:2c:fe:82:72:97:4d:ef:
         b1:7b:ba:ad:01:8f:d3:da:56:19:bd:13:dd:19:29:b4:5e:a9:
         f4:88:45:33:f2:50:71:86:5d:4e:dd:1f:8b:65:3a:4b:54:53:
         b2:ff:ca:db:ed:07:77:aa:ac:da:e6:62:24:38:e6:c0:f8:19:
         d4:75:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:01 2024 by rpki-client on console-ams.rpki-client.org