Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          +dXzsD7uPGXefP0scRCF5ptb3gH/EEv4UesejbPaKeo=
Subject key identifier:   02:13:DE:A1:D5:03:F8:69:80:84:1A:27:57:41:80:03:AE:B3:58:B4
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       3D33153E87018D6DEBA5CBECC9EA72EE5F0575AC
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa
Signing time:             Thu 13 Jul 2023 14:27:39 +0000
ROA not before:           Thu 13 Jul 2023 14:22:39 +0000
ROA not after:            Thu 11 Jul 2024 14:27:39 +0000
asID:                     210537
IP address blocks:        103.118.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:33:15:3e:87:01:8d:6d:eb:a5:cb:ec:c9:ea:72:ee:5f:05:75:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jul 13 14:22:39 2023 GMT
            Not After : Jul 11 14:27:39 2024 GMT
        Subject: CN=0213DEA1D503F86980841A2757418003AEB358B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:64:d3:f9:21:f6:55:29:0f:14:0f:d1:8a:
                    3e:d9:33:7e:e2:ed:b4:17:b2:d2:e0:ab:55:e6:7e:
                    46:93:70:56:4f:ce:7c:89:36:59:b2:2e:bb:bf:b4:
                    c3:34:b1:1b:bc:4a:4c:d6:9a:0f:20:a1:9f:ba:d2:
                    8c:bc:af:6c:ef:74:15:c9:fc:b2:ee:ec:95:59:c8:
                    c2:bc:69:7d:1e:31:37:ac:74:30:8a:f4:1f:53:3e:
                    1c:00:48:4b:1a:b4:12:55:d4:c6:b8:fe:71:79:95:
                    7a:5c:60:62:56:3d:37:61:63:c3:e6:aa:41:26:d3:
                    c7:e7:41:23:c4:25:60:55:b0:57:4b:70:de:3a:ca:
                    24:9f:02:49:b7:cb:a4:c1:f8:21:8c:3c:55:ff:16:
                    8a:35:25:5f:09:7e:28:cb:ef:8d:a7:42:4c:99:f2:
                    98:3a:d8:8d:39:f2:0c:fd:e7:bd:cc:09:a7:12:0f:
                    84:24:91:ad:2c:c0:a1:7d:53:0f:41:ef:f8:2c:b2:
                    09:9f:95:4b:9b:bd:9b:fc:6b:3f:e5:ce:06:b8:90:
                    65:8f:61:c7:6d:68:6a:ce:eb:c6:01:4e:64:90:a2:
                    6f:25:48:bf:14:96:7b:0d:7d:75:54:24:72:7b:0a:
                    20:31:64:e0:47:8f:ef:c1:3d:9d:7c:9c:71:fb:d4:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:13:DE:A1:D5:03:F8:69:80:84:1A:27:57:41:80:03:AE:B3:58:B4
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:f0:00:b4:b7:d9:37:ca:16:55:7d:f8:3a:2d:f9:f6:27:5e:
         39:66:ff:25:c4:d2:7c:a3:0a:ee:aa:9d:a2:c4:27:1c:d5:c3:
         39:ee:88:0a:bb:0f:99:ec:be:a5:8d:c6:b6:f2:c8:e4:c1:3c:
         0b:74:81:f5:39:a0:c2:c8:e1:b0:3a:ff:6f:87:d0:3f:e0:24:
         1f:4a:af:0b:e9:0c:0f:98:2e:8c:89:9a:2e:3d:c6:4f:09:3e:
         06:2f:41:10:04:ff:d6:5b:39:ee:15:29:9f:e3:02:4f:97:86:
         c1:97:40:fa:85:8c:bf:31:0b:74:36:11:e3:16:3c:d4:d8:e3:
         71:a0:0b:1d:fe:16:f7:3d:40:89:52:9f:fc:6c:df:83:7a:46:
         2e:61:0f:bb:72:3e:07:11:82:65:3e:a0:c9:bf:1a:2b:dd:71:
         ea:24:de:a3:33:80:5d:67:0d:aa:cf:59:76:43:8b:2c:60:4d:
         ff:5c:fd:ac:54:7a:d3:6a:a5:ef:01:af:9c:2b:e2:d7:eb:6f:
         76:43:e7:53:f7:c5:12:8b:13:64:8c:57:d5:3f:68:64:19:51:
         b8:47:39:ed:d3:aa:5e:e4:7c:58:5b:cf:75:1c:d5:68:a8:7f:
         5c:f7:f3:e0:67:7f:ab:62:6c:76:04:47:c1:2a:e0:23:e6:bc:
         d2:41:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:55 2024 by rpki-client on console-ams.rpki-client.org