Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa
File:                     3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          dUClOkevyB3AqGi+C56ozRI10n0uk7qLfbwOsjVexag=
Subject key identifier:   43:82:7E:F3:EC:E9:7F:32:D6:4D:4D:8C:69:C9:48:3B:98:DA:F8:DB
Certificate issuer:       /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
Certificate serial:       7E6502028C4666C83E10A8739FD6BE486305E25E
Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 25 Sep 2023 15:00:00 +0000
ROA not before:           Mon 25 Sep 2023 14:55:00 +0000
ROA not after:            Mon 23 Sep 2024 15:00:00 +0000
asID:                     9341
IP address blocks:        103.17.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl
                          rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:65:02:02:8c:46:66:c8:3e:10:a8:73:9f:d6:be:48:63:05:e2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
        Validity
            Not Before: Sep 25 14:55:00 2023 GMT
            Not After : Sep 23 15:00:00 2024 GMT
        Subject: CN=43827EF3ECE97F32D64D4D8C69C9483B98DAF8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:27:42:ee:9c:a1:15:45:7c:1b:05:d5:96:
                    a0:0c:c5:50:6e:ab:48:27:e6:e6:3e:c3:79:08:20:
                    84:69:de:6d:94:3e:7b:e6:53:38:bd:20:6d:69:14:
                    b9:24:b6:2d:1f:fd:9f:cf:2e:35:ca:86:44:5d:a9:
                    fe:3e:38:8f:1d:78:04:7b:83:fc:3d:1a:38:c8:1a:
                    94:06:41:48:d1:f1:aa:d1:ce:15:3a:9a:1e:12:51:
                    08:62:db:75:be:d2:46:b1:f6:ef:ab:06:a2:f4:5d:
                    a4:bb:2d:22:b6:8e:9b:13:66:34:c6:1f:74:5b:f5:
                    f6:49:33:bf:fd:a6:ef:1c:24:96:50:e1:3c:39:7f:
                    b1:8c:9a:d8:82:4e:74:6d:01:24:06:e1:04:71:df:
                    b2:20:f7:7c:d2:b9:72:f9:81:e3:78:79:7f:d9:ff:
                    84:cc:56:90:6d:d4:ce:9b:7e:de:2f:c7:ea:da:fd:
                    bc:e9:e7:b9:d1:34:6f:b8:8e:9e:38:45:db:4d:1e:
                    89:8c:3a:9b:f8:a3:2f:e7:5a:f3:0d:ab:4b:55:c6:
                    0f:dc:74:aa:a7:b1:2a:ff:c1:32:c9:cb:a4:af:7d:
                    9e:57:84:72:4d:b2:a7:03:8d:44:1c:46:70:63:ad:
                    c0:e6:43:79:d7:fd:bc:7f:12:c0:41:db:c8:60:24:
                    a1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:7E:F3:EC:E9:7F:32:D6:4D:4D:8C:69:C9:48:3B:98:DA:F8:DB
            X509v3 Authority Key Identifier:
                keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:23:c3:88:c2:69:8f:15:1f:15:ed:f6:79:52:48:d9:75:
         86:89:5c:a8:54:af:6e:7b:7a:61:5e:6d:09:0b:16:9d:fb:fb:
         a2:e2:9f:2f:d0:97:24:6a:cd:d0:ca:51:63:52:b4:ca:94:ee:
         f3:8a:8f:99:0e:ee:a1:21:65:da:04:ff:1e:3c:92:5e:d8:db:
         7e:cc:d1:bd:99:ba:e0:12:f6:cd:6c:05:3a:8e:38:64:6a:86:
         65:99:e4:00:17:f1:24:ad:bb:17:f1:b3:d7:4c:e1:f6:aa:e0:
         c6:ad:b6:ec:a4:fd:39:47:55:e6:71:1b:8b:a3:bf:0c:e6:a1:
         fb:98:20:ca:61:7b:80:8c:c9:88:36:1e:cc:2f:f1:18:c8:e0:
         68:52:c0:ac:48:14:24:5d:50:c0:65:c7:ba:63:66:05:d0:b8:
         e8:e6:a8:c4:ed:92:07:e6:95:5e:a6:52:26:60:e3:bd:7b:dc:
         5a:9e:34:3e:3c:33:6d:d3:82:26:10:d2:8e:54:ce:37:4a:6c:
         7b:e9:cc:9e:73:71:93:00:69:ef:b2:0a:43:68:34:75:8b:d5:
         a8:e2:f3:aa:ce:38:20:3f:4a:6c:af:3f:ec:6a:cb:47:8c:2a:
         61:42:91:97:e8:7c:a7:77:13:e5:87:b2:e9:da:4f:f9:1c:2b:
         38:98:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:17 2024 by rpki-client on console-ams.rpki-client.org