Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa
File:                     3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (raw, json)
Hash identifier:          +cIOnNQ3kmyknKEWyXmqefczxBH4/wcLUfGbwX+bPFA=
Subject key identifier:   0B:73:06:4E:4B:EC:71:28:AB:5A:DD:EA:38:44:DF:ED:95:F1:3D:D3
Certificate issuer:       /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB
Certificate serial:       6CE69898A00E6E6E50C1A5F9C59665894F3E08F5
Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa
Signing time:             Thu 10 Aug 2023 14:00:37 +0000
ROA not before:           Thu 10 Aug 2023 13:55:37 +0000
ROA not after:            Thu 08 Aug 2024 14:00:37 +0000
asID:                     138860
IP address blocks:        103.152.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl
                          rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e6:98:98:a0:0e:6e:6e:50:c1:a5:f9:c5:96:65:89:4f:3e:08:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB
        Validity
            Not Before: Aug 10 13:55:37 2023 GMT
            Not After : Aug  8 14:00:37 2024 GMT
        Subject: CN=0B73064E4BEC7128AB5ADDEA3844DFED95F13DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:a7:3d:0d:1f:3b:ad:0d:16:b4:80:7a:4f:
                    2d:80:11:7f:5e:63:95:9d:96:b5:5a:09:40:98:61:
                    33:68:7f:28:37:7c:ae:70:f0:65:fb:4d:3f:dc:65:
                    34:e0:7b:88:92:de:b4:70:7d:d6:bb:73:f5:59:75:
                    4c:da:1c:c2:65:98:d6:31:d6:8d:64:3c:ce:75:4f:
                    b8:34:b4:4e:4c:e1:36:78:d9:17:c7:98:44:27:37:
                    37:17:71:32:d4:40:ad:8b:73:e6:7d:a0:13:94:ee:
                    71:75:00:96:48:34:f0:ab:af:0e:19:3f:f2:cd:c4:
                    2c:90:34:08:15:23:65:8d:a9:fb:6b:9e:38:4d:6e:
                    b8:be:62:f0:e5:17:11:11:54:ec:87:6c:0f:58:44:
                    5c:82:97:94:8d:62:1f:c4:3f:21:d7:89:ff:a3:86:
                    0e:bd:26:f1:61:96:ff:c4:4b:0f:19:69:3c:cb:51:
                    3b:39:01:26:37:7f:73:25:7e:cb:34:64:22:22:3a:
                    3f:77:8d:65:a7:6f:26:7a:9f:58:89:37:63:75:9a:
                    a0:6e:ce:e4:3d:2f:fa:a1:e7:16:bf:c2:4e:ce:a4:
                    a8:34:35:73:5d:6f:a0:8e:c2:4b:ec:2f:3c:59:b0:
                    23:3f:9a:94:41:a7:3b:e5:64:ba:66:e9:95:cc:92:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:73:06:4E:4B:EC:71:28:AB:5A:DD:EA:38:44:DF:ED:95:F1:3D:D3
            X509v3 Authority Key Identifier:
                keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:58:6b:40:46:3e:f4:60:0d:cb:3a:bb:a0:31:63:ea:41:
         a2:aa:b1:7d:f3:a4:3d:d7:ad:db:7b:71:77:e8:68:fd:cc:75:
         7b:52:e5:cc:64:b1:82:08:aa:e2:83:22:73:72:ae:3e:08:ef:
         19:49:b4:d1:a2:76:97:ef:3c:23:14:84:0a:31:4b:f3:58:36:
         15:d9:84:6a:13:c6:5a:60:4d:f8:31:70:c6:82:3d:58:a3:dc:
         6b:5f:11:ba:d6:2a:28:a5:e2:07:65:8f:5f:77:0e:e8:b2:bb:
         b6:92:2d:b9:54:35:ed:e2:72:98:05:d3:2b:39:42:9d:44:9a:
         7c:bd:ce:90:42:c3:e9:17:49:bd:a5:db:e1:89:09:69:de:58:
         a3:0d:5b:06:6b:1d:f5:60:44:24:b4:8a:db:2e:38:5f:8c:83:
         70:9a:41:f3:2f:7d:89:b1:46:71:c6:e6:45:3e:e2:d0:f9:4f:
         7e:97:d4:d6:d9:72:a3:b1:53:6c:7d:cc:70:13:02:e7:09:a9:
         8d:8d:0c:0b:70:2d:68:ba:06:d4:ac:f9:79:da:fe:28:7d:f4:
         21:6e:4e:8a:a1:03:19:38:49:73:3b:d6:02:eb:4e:04:41:33:
         42:27:fd:9b:f7:88:85:9e:6b:6e:ca:7d:fe:c9:77:02:27:bc:
         71:85:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org