Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa
File:                     3130332e39372e372e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          6MVNd/0Vl+q4o+s6VeraWVxTBxsJsCKdU4TUSH/T2eY=
Subject key identifier:   37:8B:6D:17:5B:D7:53:60:3E:76:50:EF:33:30:04:A0:34:7B:5A:FD
Certificate issuer:       /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial:       52347675722D83EA2DD349AEB65E87DA7CBEE469
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa
Signing time:             Fri 17 Nov 2023 04:00:02 +0000
ROA not before:           Fri 17 Nov 2023 03:55:02 +0000
ROA not after:            Fri 15 Nov 2024 04:00:02 +0000
asID:                     136127
IP address blocks:        103.97.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
                          rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 21:09:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:76:75:72:2d:83:ea:2d:d3:49:ae:b6:5e:87:da:7c:be:e4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Validity
            Not Before: Nov 17 03:55:02 2023 GMT
            Not After : Nov 15 04:00:02 2024 GMT
        Subject: CN=378B6D175BD753603E7650EF333004A0347B5AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:6a:ce:21:d9:7d:b6:22:b2:aa:cd:76:21:
                    84:3a:a4:77:03:7c:8b:14:6e:2b:f3:5b:c9:dc:09:
                    bf:6c:cd:3c:41:f1:89:55:64:cc:3a:88:f3:bb:e9:
                    38:e3:dc:1e:3b:78:ba:49:ca:16:97:b9:bd:0a:29:
                    6f:8e:9b:e8:86:8e:ad:31:69:ee:9b:35:78:c1:03:
                    5f:93:ac:11:b2:01:10:75:da:59:86:32:cd:3d:ba:
                    18:9f:8f:57:62:b9:e7:1c:fa:f3:93:22:38:8d:8f:
                    44:6f:b8:37:32:08:06:8c:d5:34:0e:d8:c7:38:42:
                    76:97:19:e5:6e:bd:26:b1:2d:87:0c:7d:6a:4c:16:
                    23:93:f7:12:99:47:fc:bb:c3:ef:2b:bc:6d:06:7e:
                    a9:34:ed:a6:e0:47:f2:a4:fd:8b:93:51:e6:f6:44:
                    62:3c:cc:fc:e4:69:35:5e:fb:da:03:b7:ac:9f:42:
                    33:f2:5d:30:41:a3:d3:4f:8f:d5:8d:d6:6e:1b:f1:
                    35:df:22:10:30:36:21:ca:9c:db:57:41:28:07:36:
                    59:f6:44:ff:63:56:1b:99:92:2a:42:3b:d4:28:af:
                    97:75:0b:71:69:fb:a3:c6:3e:39:1a:fb:65:07:20:
                    1b:e0:77:9b:7e:cd:11:d9:a5:25:8a:c0:15:ad:6b:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8B:6D:17:5B:D7:53:60:3E:76:50:EF:33:30:04:A0:34:7B:5A:FD
            X509v3 Authority Key Identifier:
                keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e372e302f32342d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:06:80:ef:e6:ad:4a:86:23:64:8b:22:14:7d:cc:8a:6b:e5:
         b0:37:52:84:ae:89:a2:54:d1:4e:88:2d:d0:84:ac:e9:47:0f:
         9e:d3:91:a7:ff:0b:93:02:68:fc:89:e7:9d:59:2e:33:71:8e:
         e4:d3:58:0b:53:21:f0:24:52:f0:7d:51:37:ba:13:96:ae:1a:
         57:48:7f:1b:20:2a:64:a1:68:f1:76:ba:d6:76:7e:2c:a7:11:
         88:bc:33:18:08:f6:28:e8:dd:df:40:6e:39:44:d2:31:c8:cc:
         3f:34:11:a5:0f:70:6f:c7:f3:88:3e:1b:51:37:d6:9e:f0:bf:
         05:81:e3:87:83:25:62:59:fb:24:1d:74:24:8d:8b:18:94:24:
         bb:c9:ff:e5:11:05:41:16:8a:40:1c:9b:95:48:79:35:e9:cf:
         48:3e:e9:86:0b:4e:cb:0e:a1:69:82:6e:e7:59:02:7d:08:4b:
         c7:88:64:66:78:95:67:c3:fa:f4:59:46:31:76:47:ed:9c:b3:
         35:53:10:29:e6:3d:65:3e:56:0f:02:bf:ec:47:e6:b7:61:41:
         3e:b8:43:ba:ce:42:68:e4:22:6f:28:0b:93:f4:0f:0c:af:b5:
         f4:c8:61:aa:90:63:0b:e0:46:7b:af:ee:03:50:17:12:51:95:
         92:49:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org