Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          iGOfMsUs6nT6WorIbO4E2HhbWdKa/xDM1ud/WrhPOLQ=
Subject key identifier:   89:D0:87:73:2A:7F:29:8D:70:0A:1C:F4:80:33:18:11:AB:57:6C:9F
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       6623221658A213FA600AB6F25BA53AE43037B8C6
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa
Signing time:             Mon 15 Jan 2024 10:00:00 +0000
ROA not before:           Mon 15 Jan 2024 09:55:00 +0000
ROA not after:            Mon 13 Jan 2025 10:00:00 +0000
asID:                     50104
IP address blocks:        103.118.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:23:22:16:58:a2:13:fa:60:0a:b6:f2:5b:a5:3a:e4:30:37:b8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jan 15 09:55:00 2024 GMT
            Not After : Jan 13 10:00:00 2025 GMT
        Subject: CN=89D087732A7F298D700A1CF480331811AB576C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:91:42:54:3a:bb:19:69:05:4e:da:7e:cf:
                    2a:01:b9:b1:55:8c:cb:84:03:d0:50:61:7f:26:5c:
                    9e:a5:dc:5f:47:8a:0e:1b:b8:1c:02:e8:70:c4:5e:
                    21:9c:d9:c1:d2:49:8f:07:bb:78:14:34:e2:7a:87:
                    28:79:a9:4a:22:50:bc:c3:b5:58:12:3d:84:6d:15:
                    f7:d7:b2:54:19:92:12:59:6f:c3:ee:08:c0:3c:31:
                    d2:d9:96:b7:48:b5:35:5a:16:99:f3:7f:4b:87:90:
                    f7:89:24:ef:55:be:94:f2:ca:9c:fa:21:d2:9a:a9:
                    ba:63:dc:56:29:38:ff:3d:e5:ad:e4:4f:1a:9d:c0:
                    f4:c0:c5:62:3b:12:2a:94:c7:45:5f:7f:87:f0:44:
                    42:be:50:58:5a:77:89:0f:99:fe:3a:3c:99:ac:b9:
                    81:33:9e:ec:3f:7a:41:3b:ab:e9:0e:b0:1e:24:a2:
                    7b:8e:15:55:b4:49:ea:0c:8e:c1:59:e0:69:33:1d:
                    3c:b8:e2:9d:44:60:75:fe:8e:c2:dd:e0:67:c3:0d:
                    a3:a1:57:8b:10:18:db:3c:4c:b3:17:73:41:fd:49:
                    01:b6:c8:5c:c6:a2:77:c5:5b:30:e1:8b:80:36:78:
                    43:96:1d:99:c7:6c:f4:7e:31:3d:06:ce:f5:7f:35:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:87:73:2A:7F:29:8D:70:0A:1C:F4:80:33:18:11:AB:57:6C:9F
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:27:29:bc:ca:19:09:d3:65:8d:e6:90:05:0a:79:29:50:f3:
         94:a1:31:a8:3e:80:1f:37:df:cd:5d:cf:e4:71:e6:62:92:71:
         cb:a8:04:bb:f8:16:40:01:21:93:aa:12:25:b4:3b:92:73:6b:
         ec:1d:4b:56:9c:6c:f3:5a:52:d3:59:96:09:0e:8b:ce:e5:c8:
         8c:2e:de:b2:50:46:c8:34:b2:18:6f:2e:a5:a1:f8:c2:a1:3b:
         e4:74:2c:2d:f6:24:aa:25:c1:26:6a:ed:6b:f7:4b:24:93:d2:
         22:5f:04:07:6a:02:08:c7:a9:83:f5:de:ba:cd:97:bb:e2:2f:
         08:3b:0d:b5:8f:88:10:d3:c9:a0:24:88:4b:1b:65:70:92:45:
         40:3e:55:c5:aa:69:a4:47:12:9e:11:52:40:04:09:dd:4b:ea:
         0a:6e:f6:71:77:8d:29:59:71:9a:56:b7:5e:28:52:8c:f4:9e:
         d6:3d:9c:1e:36:fd:fd:d7:cd:c0:37:ce:86:5f:9b:e9:4f:57:
         ec:46:a9:7d:32:f2:d6:40:dd:45:dc:54:8c:0c:35:f5:fe:9c:
         62:04:cc:bd:f2:58:2a:7d:6b:2a:ba:03:e8:cf:33:a1:52:34:
         00:6d:e2:14:0c:c1:cb:ae:46:ef:8b:32:f9:01:09:56:39:c2:
         48:69:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:01 2024 by rpki-client on console-fra.rpki-client.org