Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
File:                     3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (raw, json)
Hash identifier:          TimjDCBPsiatxEsjgRNAVo15ILCj7ZiEZZcrMdM8cNo=
Subject key identifier:   34:13:C7:D5:95:61:AF:23:FD:24:A0:4E:41:C4:0F:F2:0E:F1:FB:C9
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       2D2C24F2809957D87E4169C28C9F594CA79C3336
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa
Signing time:             Sun 21 Jan 2024 09:00:01 +0000
ROA not before:           Sun 21 Jan 2024 08:55:01 +0000
ROA not after:            Sun 19 Jan 2025 09:00:01 +0000
asID:                     136865
IP address blocks:        103.102.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl
                          rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2c:24:f2:80:99:57:d8:7e:41:69:c2:8c:9f:59:4c:a7:9c:33:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Jan 21 08:55:01 2024 GMT
            Not After : Jan 19 09:00:01 2025 GMT
        Subject: CN=3413C7D59561AF23FD24A04E41C40FF20EF1FBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:db:b3:97:b9:86:6b:d4:71:a8:24:09:60:
                    1f:f8:4d:a7:b1:c5:95:7b:89:16:4f:2b:22:74:bc:
                    19:2d:4e:ce:f4:28:a6:04:41:2b:fb:4f:fa:9f:2d:
                    b8:30:1d:7b:38:2d:5f:7b:2d:94:cc:f3:47:6f:97:
                    d7:d5:84:0e:fe:0a:c2:7b:21:9a:d4:ea:2a:c5:3e:
                    0e:09:21:1f:75:08:be:ad:41:c8:9a:4a:95:82:47:
                    3d:43:21:10:8c:99:f2:81:0b:50:22:fc:9c:b0:57:
                    46:82:1b:43:a6:90:8c:e8:41:ec:63:b8:79:f1:f8:
                    4e:b9:31:91:49:b9:d1:9f:72:4b:33:91:20:02:cb:
                    98:6f:1e:88:4f:37:f9:05:fd:4e:09:b6:c0:24:64:
                    79:99:de:42:83:96:88:1f:95:7d:00:c9:2a:36:e6:
                    3c:46:91:2b:0c:dc:a2:43:da:3a:d6:bd:90:36:3f:
                    2b:14:4a:32:c0:dc:a7:38:af:02:9a:fd:5c:66:14:
                    87:ad:e7:46:a7:6b:c8:60:f3:e7:a1:0e:9b:ad:d4:
                    7f:f0:f5:e8:be:47:c4:d9:de:8a:9b:4f:25:ac:b4:
                    68:21:7f:f3:2f:2b:97:7f:40:23:92:93:0f:dc:a7:
                    bf:5d:a4:20:10:a1:50:fa:82:9b:ca:db:6a:bf:e2:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:C7:D5:95:61:AF:23:FD:24:A0:4E:41:C4:0F:F2:0E:F1:FB:C9
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:eb:61:93:da:c5:9e:24:70:f4:ec:22:f3:47:eb:4b:70:
         03:fd:73:92:1b:82:2e:db:a1:62:35:86:97:3c:c0:56:6e:9a:
         d0:3e:73:48:f7:f4:19:1f:9e:74:98:44:13:7f:bf:8d:19:96:
         dc:e5:f0:24:56:cf:f7:b4:03:14:4b:33:1f:de:32:69:51:32:
         18:e5:25:ab:7c:38:3e:5b:6e:27:de:f7:5b:39:c2:fc:ad:c6:
         e5:f7:7d:5c:5f:32:da:7f:be:e0:86:ec:a1:60:75:18:fa:43:
         d1:34:a0:bb:1f:9c:e1:cf:ed:1d:6c:f1:56:66:91:e2:37:20:
         20:31:b6:98:6f:12:13:8b:bb:0e:49:ed:f4:52:09:2b:58:6c:
         6b:42:4b:dc:9c:6d:de:81:46:46:dd:15:14:73:8f:e1:77:6f:
         49:64:c4:19:b3:99:e1:24:23:e7:f4:eb:e4:b5:80:14:6c:0e:
         b8:bb:7b:76:77:0a:f0:6c:d2:2b:08:2c:72:3b:e5:c8:6f:1e:
         e5:00:ce:3a:be:7f:2e:b0:ca:30:d2:1f:af:81:d2:4d:e8:92:
         0a:36:c1:74:e4:cb:7f:e9:39:b9:44:2a:d9:84:ee:d0:06:fe:
         59:be:d8:09:e4:98:73:b8:9e:13:ab:38:4c:d7:c2:84:bb:aa:
         f5:9f:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org