Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa
File:                     3130332e372e302e302f32332d3233203d3e203338373838.roa (raw, json)
Hash identifier:          7ZlgZqpVWmjc84NgERPPp7pmCN6tdh6tZZrTTYHHci4=
Subject key identifier:   47:1B:52:AB:7B:98:AB:97:AF:37:F5:26:45:CC:7C:2C:30:7A:86:45
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       0BBDEF38C3CF1A31514C2C581150BA896EC24E03
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa
Signing time:             Mon 01 Jul 2024 01:06:07 +0000
ROA not before:           Mon 01 Jul 2024 01:01:07 +0000
ROA not after:            Mon 30 Jun 2025 01:06:07 +0000
asID:                     38788
IP address blocks:        103.7.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:ef:38:c3:cf:1a:31:51:4c:2c:58:11:50:ba:89:6e:c2:4e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Jul  1 01:01:07 2024 GMT
            Not After : Jun 30 01:06:07 2025 GMT
        Subject: CN=471B52AB7B98AB97AF37F52645CC7C2C307A8645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:09:b3:f6:cd:0b:5f:c9:f1:f8:d8:9c:87:
                    b7:7e:ae:70:e3:4a:08:52:32:b3:10:6f:fc:7e:4b:
                    be:99:03:69:d0:c1:58:ef:a2:80:d2:87:28:de:5c:
                    84:5f:7d:a6:52:05:5e:b6:67:38:28:85:9f:8f:9c:
                    4b:10:e6:fa:a4:43:1d:2a:95:43:5e:dc:55:c1:98:
                    eb:a7:77:f7:50:ba:71:2e:c4:93:80:01:bd:4f:24:
                    c0:f2:fe:d1:45:1a:3a:fe:57:d2:4a:5c:c1:83:d0:
                    67:20:16:27:64:49:b7:82:8d:a8:84:d8:de:5e:7c:
                    1b:9d:19:93:f3:e8:4b:c9:d3:ed:bf:8c:a0:67:7d:
                    7a:cd:5b:88:42:38:89:33:f5:dc:b8:15:ac:88:8e:
                    fc:e7:3c:cb:40:d5:f2:44:c2:ce:78:f7:cf:7b:9c:
                    ba:93:97:22:91:69:db:a7:70:bd:31:12:61:eb:57:
                    85:f8:34:b8:aa:e1:b6:2d:60:48:29:9a:18:04:31:
                    c8:af:56:49:4e:99:a1:2b:75:12:3f:51:86:92:41:
                    17:db:6c:24:2a:ee:ad:6d:e2:77:9c:32:b3:99:92:
                    f7:47:aa:58:66:d7:58:f1:77:b4:63:6d:0d:1e:fe:
                    79:ea:86:d4:75:ca:b3:1b:dd:13:45:09:05:f9:ab:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:52:AB:7B:98:AB:97:AF:37:F5:26:45:CC:7C:2C:30:7A:86:45
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e302e302f32332d3233203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:70:e5:35:72:fa:54:0a:51:27:39:c9:5d:c0:20:63:15:e7:
         ae:6a:0c:27:d4:95:32:9f:1c:fc:9b:93:f7:f1:ea:63:31:5a:
         c6:52:a7:6c:8c:73:91:0f:7f:fa:ad:df:93:dc:db:32:95:f8:
         83:43:ff:d1:b7:b9:2f:22:b0:6c:32:9e:07:4b:ef:6e:5c:91:
         3e:20:2c:1a:3b:b0:57:e2:d7:ca:dc:2e:3d:0b:ed:51:43:cd:
         e7:a2:4a:c0:83:65:0b:c5:79:8c:42:7d:9c:bc:36:77:76:af:
         7f:90:7b:04:be:3a:b1:56:da:76:f7:3b:9b:be:40:f2:2b:92:
         9d:b5:a4:33:e4:4b:c2:0c:b1:7b:cb:e4:86:df:7f:ca:3e:db:
         9e:ba:f1:07:87:5c:4e:c8:be:63:53:1e:d6:2a:07:75:a4:ca:
         02:15:3f:27:d2:59:ec:20:b5:29:58:a3:89:6d:c6:97:0c:fe:
         6c:e6:46:3c:92:b1:7b:09:11:68:8b:a2:40:7b:da:ce:81:70:
         6d:8d:12:3a:f9:de:eb:35:d1:a3:64:7c:5a:cd:31:58:65:32:
         68:e7:91:69:94:0b:47:db:15:80:12:7a:9c:ca:8f:34:c4:be:
         3c:e0:a0:5b:99:85:3e:a3:e6:3d:c7:3a:4d:ba:12:7d:b6:58:
         2f:04:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org