Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e392e302f32342d3234203d3e20313437313337.roa
File:                     3130332e3137372e392e302f32342d3234203d3e20313437313337.roa (raw, json)
Hash identifier:          8wlLzmfSWwRGc5rVuWlfm5TS6Q1boqLecoY0IZM6yqg=
Subject key identifier:   2A:D7:63:45:1A:B9:71:CD:CD:14:12:2F:E4:B6:7D:19:BF:AD:37:D9
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       2E97282612B5B23279019AAF0E4AF4115ED42D61
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e392e302f32342d3234203d3e20313437313337.roa
Signing time:             Wed 05 Jul 2023 03:00:01 +0000
ROA not before:           Wed 05 Jul 2023 02:55:01 +0000
ROA not after:            Wed 03 Jul 2024 03:00:01 +0000
asID:                     147137
IP address blocks:        103.177.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl
                          rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:28:26:12:b5:b2:32:79:01:9a:af:0e:4a:f4:11:5e:d4:2d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Jul  5 02:55:01 2023 GMT
            Not After : Jul  3 03:00:01 2024 GMT
        Subject: CN=2AD763451AB971CDCD14122FE4B67D19BFAD37D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:ee:f8:bc:12:25:be:72:e5:dc:1e:59:68:
                    f7:f4:19:f1:47:8e:68:0a:7e:a2:33:a3:54:7c:3b:
                    c9:ff:5d:10:ad:56:b0:73:4b:39:47:cd:2c:d6:98:
                    f1:7a:03:c5:7c:53:55:cd:5a:51:a0:64:1f:4b:6d:
                    85:d9:da:5f:50:98:6f:69:9d:12:48:ab:73:6d:85:
                    d4:5c:48:0b:c8:10:65:41:ed:2f:b9:f6:13:29:00:
                    d0:22:65:39:29:53:d8:23:df:16:41:39:f6:b6:6f:
                    50:29:91:c4:ad:ce:a3:49:24:ef:8e:cd:30:bc:09:
                    53:c1:05:5f:fe:27:d1:3b:c8:20:a0:e3:a6:c9:00:
                    4b:3f:c0:26:21:90:ce:63:68:ca:2b:2d:ef:f4:c6:
                    b3:49:61:a5:77:86:98:21:38:cb:8f:9b:60:34:bf:
                    a3:57:a8:01:50:f7:8b:9e:4f:ad:65:8a:5e:a2:70:
                    32:0b:62:f1:4f:77:86:61:b6:06:f6:31:6f:ff:13:
                    5d:bd:39:46:6f:15:97:69:86:4b:f2:d6:78:70:61:
                    0b:73:d6:fe:5e:0b:7c:cb:f8:d1:f3:44:dd:ad:ff:
                    90:0c:b4:bd:f8:fe:07:1e:14:0d:95:aa:79:43:97:
                    d3:bf:6d:02:d3:e0:c8:f9:0c:84:09:30:be:29:e4:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:63:45:1A:B9:71:CD:CD:14:12:2F:E4:B6:7D:19:BF:AD:37:D9
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e392e302f32342d3234203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c4:4f:23:84:08:9f:9f:1d:a9:e4:e7:07:04:ce:95:fa:d4:
         20:e8:e1:6a:f5:60:43:3e:04:6c:fd:0b:e0:61:21:d9:2a:ca:
         e9:ae:cf:c5:06:42:24:34:48:14:2f:a0:9f:ec:86:c0:b3:a5:
         7c:0d:7b:4e:c8:ad:09:84:26:57:8a:b5:1d:42:01:5d:64:c7:
         98:e0:20:03:9d:f8:77:1b:5d:77:7e:d5:9d:a5:3a:dc:e1:57:
         3d:6d:38:cb:ab:6b:cf:bc:2b:8e:d0:29:14:0f:cb:78:3f:c9:
         28:a4:6a:9b:86:22:a2:45:d2:95:56:af:63:c7:6a:30:47:44:
         90:0a:24:f7:a8:57:b2:be:fc:28:77:bc:af:49:84:71:dc:5b:
         04:2f:b3:7c:e4:7d:91:33:94:68:72:21:fb:89:45:62:6b:29:
         78:02:71:d7:2c:50:94:d0:f2:c4:12:20:a5:6b:ae:43:99:de:
         ff:76:c3:2a:96:94:59:fd:fe:58:e3:39:b6:09:29:24:ea:1c:
         24:4a:45:06:5f:0e:9e:ad:0f:1f:3c:9f:b5:c0:72:56:69:cd:
         c7:ed:e9:92:4a:0a:c1:ae:7c:a8:30:dc:9a:1a:e9:74:bb:be:
         01:a4:f0:58:c0:20:ee:be:5f:22:9a:08:65:24:de:e2:95:82:
         22:fd:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:02:53 2024 by rpki-client on console-ams.rpki-client.org