Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
File:                     3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (raw, json)
Hash identifier:          GqpApCZsTZIotGQu+evDyWElqLkFW0uUDaRgMaB4+Yk=
Subject key identifier:   21:E9:C2:3B:2B:96:D5:7D:6A:CB:D3:1D:C1:E0:0A:2A:00:91:F4:D3
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       6F2626DDEC82396F314E0CB28E168CD890336AFF
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa
Signing time:             Sat 06 Apr 2024 04:00:00 +0000
ROA not before:           Sat 06 Apr 2024 03:55:00 +0000
ROA not after:            Sat 05 Apr 2025 04:00:00 +0000
asID:                     64297
IP address blocks:        103.77.204.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:26:26:dd:ec:82:39:6f:31:4e:0c:b2:8e:16:8c:d8:90:33:6a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Apr  6 03:55:00 2024 GMT
            Not After : Apr  5 04:00:00 2025 GMT
        Subject: CN=21E9C23B2B96D57D6ACBD31DC1E00A2A0091F4D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:d5:8e:d3:68:53:cf:5d:a6:25:30:5f:0e:
                    e7:4f:98:4f:94:99:dc:7b:38:38:91:95:47:7c:a2:
                    e4:7b:ba:c3:ec:d8:0c:83:30:73:7e:17:1c:df:95:
                    e9:56:83:78:81:b0:e5:e6:6b:cd:4f:a8:b0:6f:9f:
                    30:e0:0e:f3:96:64:ad:33:22:47:8a:77:6c:58:41:
                    4e:8d:e0:8c:7b:e0:64:d4:e4:d9:6b:d8:49:47:2a:
                    ef:7e:7c:87:20:09:fb:60:be:f7:fe:f7:73:1a:92:
                    bd:eb:91:ea:bf:6a:dd:b8:16:40:00:8a:d7:ad:aa:
                    6e:18:a5:10:bb:84:58:cf:97:e8:73:cb:d4:3c:69:
                    63:4d:d5:49:7a:1e:e7:15:81:2d:25:42:95:a7:9b:
                    bb:31:55:fb:e0:b6:cc:7a:90:36:4c:d7:b8:1c:0d:
                    3b:20:b3:0f:36:5b:03:59:0a:ef:e8:98:ff:8d:4e:
                    7a:ce:14:d2:ce:db:8a:9b:83:de:79:93:78:3b:d6:
                    ab:1d:7c:75:ec:57:01:81:ac:9c:1e:75:9c:c1:46:
                    13:86:b6:b4:41:4d:b8:e7:9a:d0:ce:dd:be:ef:3e:
                    15:fc:28:2f:d7:33:f0:36:75:b1:9a:dc:aa:94:2d:
                    02:91:48:2b:64:d6:65:4f:36:e1:65:02:c6:df:ef:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E9:C2:3B:2B:96:D5:7D:6A:CB:D3:1D:C1:E0:0A:2A:00:91:F4:D3
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230342e302f32322d3232203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:2c:d1:3b:a6:7a:9c:bd:57:12:78:ee:51:55:7a:3f:32:
         00:a9:e5:b3:ae:ba:0d:88:ee:a4:03:4a:ab:cf:63:16:55:50:
         7e:77:d8:73:f3:65:17:19:7e:f3:69:73:15:c9:3b:d4:d5:39:
         62:9a:80:e9:0e:0c:b0:5c:f7:a7:cb:47:e8:6b:33:29:8e:7d:
         0b:50:3a:49:7b:b7:3f:6b:12:e6:f2:cb:86:0c:2d:b0:63:3f:
         c7:8e:8e:5d:bc:5a:6a:f9:4f:f1:f6:67:17:9e:e7:1f:3b:72:
         7d:aa:f7:8c:5f:b2:aa:7d:06:01:8f:d7:d2:a3:fe:8f:24:c2:
         56:0d:63:39:38:ae:53:80:52:a6:16:d1:8e:3f:9b:82:bb:14:
         c7:b8:f2:af:da:69:45:a9:6a:ed:a6:00:96:cf:0a:14:30:ca:
         7d:49:d2:fb:7d:a6:fd:41:ec:48:f0:ee:76:48:d2:e6:80:d7:
         2f:28:e1:c2:a7:ff:d8:e3:18:31:35:6a:a4:53:b4:97:23:24:
         fb:cb:89:65:d9:53:e5:72:3f:7b:86:bc:2e:d8:d6:84:c1:dd:
         24:e4:db:5e:0d:a5:26:36:77:78:0e:f4:36:c2:44:83:ff:4d:
         02:7d:12:44:e9:c8:bf:b4:64:b2:11:4f:b9:47:98:47:e4:fd:
         77:5b:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 18:34:15 2024 by rpki-client on console-fra.rpki-client.org