Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          ppTvOD0iMjRtCK5NFRn/t/xl7hcSCgQ+RF8TyhqZosM=
Subject key identifier:   F7:E7:C6:A3:AA:E0:75:17:5B:9D:A5:35:C8:18:34:FB:CE:53:80:EE
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       41F96D1399F62DC94AE5887260FABF3D953240B0
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa
Signing time:             Tue 26 Mar 2024 05:00:00 +0000
ROA not before:           Tue 26 Mar 2024 04:55:00 +0000
ROA not after:            Tue 25 Mar 2025 05:00:00 +0000
asID:                     210537
IP address blocks:        103.118.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:6d:13:99:f6:2d:c9:4a:e5:88:72:60:fa:bf:3d:95:32:40:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar 26 04:55:00 2024 GMT
            Not After : Mar 25 05:00:00 2025 GMT
        Subject: CN=F7E7C6A3AAE075175B9DA535C81834FBCE5380EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:04:b0:4d:04:25:a8:da:51:35:84:1c:37:
                    4c:21:47:92:0c:e6:be:d7:53:49:11:e1:a6:a9:e9:
                    fe:c6:e1:18:0f:72:53:3d:57:22:b0:92:e7:a8:da:
                    d2:82:5c:60:c7:0a:8c:ba:1a:62:63:b6:ec:49:dd:
                    02:d6:8d:04:de:3b:32:59:c3:94:94:77:82:cc:6e:
                    f8:44:7a:72:c9:7f:5c:db:ea:aa:3b:ce:24:bf:77:
                    cd:cb:84:f2:97:18:e1:2b:23:93:a3:40:67:a2:17:
                    24:72:3c:ea:98:a4:bf:f9:93:41:d5:12:4e:c1:38:
                    0f:32:b7:75:ac:92:93:68:b4:e3:9b:f5:66:53:28:
                    96:bc:71:d4:dc:8c:27:65:94:89:c2:f9:22:98:27:
                    bd:d5:7d:97:ca:4d:8a:16:d0:aa:ee:f6:01:aa:63:
                    a7:19:49:02:94:bf:6f:f7:7a:19:25:a1:d5:42:74:
                    53:d5:a3:1b:22:57:02:15:0d:96:82:c0:d7:30:9b:
                    ac:be:2d:fb:73:4c:81:02:02:73:8d:d5:17:6d:e4:
                    da:b6:da:6e:d6:7a:3b:d0:c0:53:e3:ac:af:56:a8:
                    3a:0d:23:31:cb:04:00:ab:ec:18:58:ab:fa:2e:81:
                    aa:59:43:2a:ec:39:47:6d:e5:a7:a8:16:17:6b:19:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E7:C6:A3:AA:E0:75:17:5B:9D:A5:35:C8:18:34:FB:CE:53:80:EE
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:da:08:7c:87:a1:d5:7e:5e:ff:d6:f5:5e:a2:bd:9c:76:17:
         ab:5e:94:18:e7:4a:bb:cb:99:40:2a:7a:a8:5b:c2:ef:9d:fd:
         ad:a2:46:10:43:f2:df:ae:99:70:06:0e:5b:a1:07:12:30:cc:
         b4:11:33:ae:4b:46:5c:bc:53:3b:a9:09:98:e1:f3:07:1b:1a:
         39:49:8c:08:4f:77:c3:c6:46:8c:ab:3d:cd:db:f4:b7:96:8e:
         91:58:14:fa:09:ec:be:b3:00:7f:c0:ef:89:2b:ad:44:4c:f2:
         04:eb:1b:51:14:e0:a9:a4:d9:68:de:90:b6:76:01:61:4c:06:
         e2:d3:7d:65:d7:aa:17:45:de:33:dc:f3:91:55:2b:89:96:ce:
         7c:a3:5d:b0:f6:4e:cb:89:6d:fd:02:95:fc:e6:8d:5d:17:0d:
         79:94:f8:6a:2c:97:bc:fc:41:4f:02:86:0f:93:54:41:a0:e4:
         05:41:dc:1a:9c:33:86:0e:91:0d:be:e8:b3:e4:bd:51:fa:f8:
         06:6e:d7:ca:95:01:94:36:c7:73:81:57:ba:08:30:6c:e8:4a:
         8b:03:75:3d:aa:ec:a0:ca:b2:38:0f:86:58:66:d4:0b:87:8b:
         bd:48:1c:d6:e8:b2:fa:63:0a:d7:75:2a:a8:c0:1f:d0:eb:48:
         cf:7c:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:01 2024 by rpki-client on console-fra.rpki-client.org