Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          k/0VIt5mTjgiMPa+FYmxnBAoSNwtjI5X7vOp9KKhPPc=
Subject key identifier:   16:60:96:4E:A9:3D:92:4A:87:C9:7C:0D:75:9C:45:39:F6:37:A9:EA
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       2E6A10938B09BC92253B5D53C4149B68FC92DC73
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa
Signing time:             Tue 26 Mar 2024 03:00:00 +0000
ROA not before:           Tue 26 Mar 2024 02:55:00 +0000
ROA not after:            Tue 25 Mar 2025 03:00:00 +0000
asID:                     50104
IP address blocks:        103.118.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6a:10:93:8b:09:bc:92:25:3b:5d:53:c4:14:9b:68:fc:92:dc:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar 26 02:55:00 2024 GMT
            Not After : Mar 25 03:00:00 2025 GMT
        Subject: CN=1660964EA93D924A87C97C0D759C4539F637A9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:2b:b9:99:59:2b:b7:1d:75:ab:d5:06:35:
                    ed:67:7d:fd:27:14:0c:3d:4a:60:cf:d9:af:ad:52:
                    19:f9:13:dd:45:52:94:43:31:47:51:0a:35:2e:f1:
                    25:07:05:45:ae:2c:bf:2b:f2:cf:a7:7b:dc:43:a3:
                    76:19:9d:e1:e0:d4:00:f7:56:bc:45:af:98:d9:b1:
                    6c:7b:3b:ec:43:b4:f6:ae:fa:04:38:83:eb:91:51:
                    9e:e9:a6:e7:d5:5f:12:55:56:8c:50:95:e0:cc:c4:
                    44:18:49:d9:f9:e3:0e:db:0e:4d:b8:f9:1a:8d:dc:
                    6e:8e:21:0f:1e:05:1d:75:56:d3:58:2a:47:1e:8b:
                    0f:fa:f8:82:d5:2f:d4:2f:ca:5f:b2:98:b0:0f:1c:
                    01:4a:3d:4d:10:79:ad:09:7f:04:03:45:b2:b8:8f:
                    9d:cd:56:71:a7:98:dd:ce:77:ae:51:46:b6:a5:be:
                    a9:ed:a7:db:3c:15:af:4f:79:05:cd:94:36:cf:98:
                    b0:59:a4:4d:53:a6:6a:e8:0d:94:8d:51:d1:b0:7e:
                    d5:30:58:83:c6:b8:64:15:29:f0:a6:59:16:89:15:
                    52:8e:bf:eb:70:36:d7:bd:e0:64:4c:c9:39:fa:06:
                    9c:d0:12:53:11:b4:1b:ae:49:c9:97:40:44:9c:51:
                    9a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:60:96:4E:A9:3D:92:4A:87:C9:7C:0D:75:9C:45:39:F6:37:A9:EA
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:a9:20:f6:12:a0:fb:d3:f8:94:71:26:9c:71:e2:c6:1d:97:
         6e:81:09:9f:72:00:aa:f6:ab:2d:a0:45:d8:e5:6b:fd:79:b6:
         92:2c:ea:96:01:64:4c:66:b5:d2:c7:35:2a:08:b9:66:28:78:
         e7:bf:a7:e5:27:27:96:92:ed:d5:bf:93:2c:9a:35:a3:7f:27:
         20:1b:3b:b9:bd:a5:fe:bf:c7:4d:4d:74:d2:8b:f7:a3:2f:e8:
         0c:ff:ac:56:7b:0a:da:ca:48:3a:05:8b:e5:c7:1e:6d:d4:9b:
         e0:73:09:df:61:3e:79:b9:ba:e2:de:31:6d:81:42:bc:de:b7:
         ad:1e:b7:76:0d:32:8e:71:95:d8:2e:30:2a:db:06:41:9d:c3:
         fa:db:4a:e9:b6:66:e8:0b:63:3e:e1:bd:cd:13:36:c9:97:72:
         90:37:52:ef:4f:2e:e6:81:95:0b:8b:0a:13:c0:4a:aa:28:05:
         22:93:53:00:44:e6:cb:89:78:04:66:06:02:03:67:73:5a:d2:
         59:4b:95:ba:1b:d6:ec:90:b0:a9:c0:6c:56:21:77:e7:fe:b7:
         bd:3b:df:22:f9:cb:2d:f3:73:58:eb:e3:6f:8f:03:1e:80:f4:
         2e:13:5a:5e:3e:92:43:51:2e:a0:d0:ea:7a:99:f5:f7:c3:fb:
         af:46:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:55 2024 by rpki-client on console-ams.rpki-client.org