Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
File:                     3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          LH0D/lnqNZR/qgC3dYNGt5Yc30aTR17CIEGc4ZOF7ss=
Subject key identifier:   34:FE:E8:E0:2B:E0:59:EF:3D:BE:04:8B:EE:57:F3:33:36:59:A4:3D
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       662BAEA471F0BB024A78A49FF81197C0EBA16B86
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:05:34 +0000
ROA not before:           Mon 31 Jul 2023 00:00:34 +0000
ROA not after:            Mon 29 Jul 2024 00:05:34 +0000
asID:                     58369
IP address blocks:        103.121.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:10:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:ae:a4:71:f0:bb:02:4a:78:a4:9f:f8:11:97:c0:eb:a1:6b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Jul 31 00:00:34 2023 GMT
            Not After : Jul 29 00:05:34 2024 GMT
        Subject: CN=34FEE8E02BE059EF3DBE048BEE57F3333659A43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:bb:84:23:83:c3:36:b1:7c:e0:ac:49:c0:
                    67:ad:8b:b2:b7:37:98:75:5c:4c:33:47:4d:5a:79:
                    ff:03:ea:6b:df:c2:f5:32:a4:33:34:52:51:6b:c9:
                    a0:e3:fa:ec:dc:57:2a:36:01:e5:80:a1:df:1a:98:
                    a4:bf:ce:15:0b:91:cd:65:2a:fd:c0:89:60:db:18:
                    58:9c:5d:3c:48:12:63:eb:15:f0:e8:5c:9c:87:57:
                    24:c2:f3:64:15:70:cb:36:89:a4:48:5c:85:b2:8a:
                    bb:36:18:69:57:0f:64:69:ee:23:24:84:28:2a:c7:
                    5e:76:13:61:9d:83:2e:63:b7:89:44:45:87:b6:b6:
                    28:59:d4:a7:10:23:cf:23:6e:5f:a8:a8:f0:d7:62:
                    3f:72:34:94:ae:b4:80:ec:fb:94:47:18:20:78:32:
                    60:f2:0a:c6:52:0f:62:2a:49:b9:7a:11:dc:36:2d:
                    1f:bb:a6:ff:1a:39:95:73:be:8c:af:79:5f:59:d5:
                    7e:bd:1e:13:03:86:9d:f0:c0:17:6e:8a:dc:86:d4:
                    ee:03:a6:7a:fb:b8:f2:6d:b1:13:cd:83:84:e0:f4:
                    19:a8:eb:0a:4e:07:4e:4d:55:e3:9c:73:ae:a6:b7:
                    be:56:ef:ea:00:fc:34:c9:d9:b9:eb:bd:8a:22:89:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:E8:E0:2B:E0:59:EF:3D:BE:04:8B:EE:57:F3:33:36:59:A4:3D
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:78:bc:6c:2b:0c:11:83:f1:5f:8e:a2:4f:e4:1d:81:3f:62:
         73:52:ed:4d:75:95:1d:5c:24:d5:a5:c3:06:d9:b4:c2:ea:49:
         73:14:89:85:79:26:15:15:bc:76:e1:50:74:cc:df:b9:23:26:
         b5:a3:6c:0c:24:c2:ac:0f:37:a8:14:fa:5f:e1:c0:ca:fe:65:
         fd:de:1a:6c:6f:7e:eb:08:2b:ec:c8:40:1c:36:f6:07:89:ed:
         eb:67:d8:78:d6:bd:a6:06:59:c5:80:15:0b:1e:b6:50:70:f6:
         fa:af:44:eb:15:82:b2:e5:db:80:8e:88:35:a3:c7:52:a3:5e:
         81:f4:a3:a9:2f:fe:f0:d1:2b:da:0c:2b:34:a1:0d:5b:a2:23:
         e5:ae:58:ee:8c:5e:29:46:08:a8:46:1a:35:e4:23:68:e0:fc:
         56:97:fa:19:29:95:67:72:ec:7f:68:c9:9d:31:53:de:6f:3f:
         bf:47:d5:75:fb:4e:2b:da:2f:e5:75:37:8e:43:34:ce:b3:8e:
         a7:77:0b:f0:2b:89:4e:23:8b:f0:f4:2a:e8:0c:51:57:ed:07:
         2f:4f:d6:2d:be:ca:78:ba:d4:2b:b6:fa:7a:4c:c7:86:5a:f5:
         2e:18:d5:48:ae:03:be:b0:a2:b9:6f:c6:6e:e8:d1:f3:34:05:
         a5:ec:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:37 2024 by rpki-client on console-fra.rpki-client.org