Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32332d3233203d3e20313531303132.roa
File:                     3130332e3232372e3138342e302f32332d3233203d3e20313531303132.roa (raw, json)
Hash identifier:          oaTMXoTg2eiA0+ONxTUhuvsQqRHwvDQn8j1kTDdUEwU=
Subject key identifier:   7B:39:C5:71:6F:85:66:AF:61:4E:81:29:34:27:63:B5:18:8B:49:B5
Certificate issuer:       /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
Certificate serial:       724296679D0E97452B057B5422411E441591DA0F
Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32332d3233203d3e20313531303132.roa
Signing time:             Wed 29 May 2024 10:02:33 +0000
ROA not before:           Wed 29 May 2024 09:57:33 +0000
ROA not after:            Wed 28 May 2025 10:02:33 +0000
asID:                     151012
IP address blocks:        103.227.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl
                          rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:42:96:67:9d:0e:97:45:2b:05:7b:54:22:41:1e:44:15:91:da:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
        Validity
            Not Before: May 29 09:57:33 2024 GMT
            Not After : May 28 10:02:33 2025 GMT
        Subject: CN=7B39C5716F8566AF614E8129342763B5188B49B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:5f:7d:54:8a:f2:30:f1:34:9e:92:aa:12:
                    26:93:3c:c3:97:17:23:0b:27:d3:1a:bf:06:13:1b:
                    33:59:bc:5d:a3:3d:3d:80:de:93:af:d3:a7:82:17:
                    c1:85:96:51:7d:d9:24:00:ea:a7:24:c6:3d:d5:76:
                    d2:6b:21:8c:24:d9:ac:ed:3c:cf:85:05:5e:01:b4:
                    1f:f1:32:25:9f:07:8f:72:1b:cb:4d:2d:6a:35:c5:
                    34:c1:d7:fa:08:f0:88:4a:1e:1d:e3:65:40:67:67:
                    9b:1f:69:42:76:09:33:84:fc:a5:55:e7:71:2d:75:
                    01:f8:a9:af:27:c1:71:3c:df:84:1f:2c:98:75:7b:
                    02:db:00:d2:6c:8b:e1:55:f8:4d:98:3b:f6:d8:16:
                    69:a9:78:2a:a8:80:be:0e:4e:35:7d:f7:eb:f4:3d:
                    a8:3f:ef:55:e2:5b:ab:c0:c8:63:4e:9c:14:70:b3:
                    e6:fd:f8:99:72:44:26:0d:fb:b2:76:cc:d9:f4:40:
                    ca:92:c6:9e:e7:13:9e:81:3c:17:ad:18:6d:fb:da:
                    3c:4f:46:c6:b2:d6:5c:cb:e2:21:6c:aa:90:ac:f2:
                    2b:8e:c3:6b:20:48:3d:6c:57:02:f7:af:99:60:f1:
                    22:7e:6c:ba:27:04:57:f8:09:dd:66:eb:73:4d:75:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:39:C5:71:6F:85:66:AF:61:4E:81:29:34:27:63:B5:18:8B:49:B5
            X509v3 Authority Key Identifier:
                keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32332d3233203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:23:46:e0:1d:5f:2c:e9:1d:94:39:de:65:89:4e:5e:47:44:
         a5:8b:5d:7e:02:13:e3:8b:82:39:0d:e6:bb:be:b3:e6:b4:f2:
         1e:3c:1f:05:8b:d3:2d:57:bc:6c:8b:6b:05:e0:81:29:5d:18:
         d4:d7:fc:e7:07:7b:6e:dd:94:a6:43:10:2f:a8:de:42:2d:63:
         d9:e3:0f:85:5d:b0:84:0d:bd:e9:34:4f:36:19:2d:cf:7a:ab:
         94:46:a4:6d:86:d3:04:78:23:36:27:10:2d:54:9c:4c:a9:92:
         77:af:6b:3f:2c:39:26:44:a8:48:88:c0:38:d8:c0:83:79:3f:
         00:8b:b9:24:f7:98:6a:0f:23:42:77:8b:66:0c:9e:e7:60:5c:
         25:62:36:5c:a6:c7:1b:8c:fa:f5:da:0a:63:8a:48:83:14:da:
         02:a0:1e:37:60:1a:21:b6:13:26:0d:0a:52:01:9f:b1:d2:9f:
         86:9d:ab:82:bd:85:6b:d2:6e:70:11:09:86:c0:f8:7e:83:a4:
         3f:ca:03:1f:5b:07:00:60:e3:fd:de:00:8b:dd:2d:37:84:7f:
         2f:0b:41:49:2a:8a:da:4a:fd:4b:cd:9d:02:9b:6f:4f:62:af:
         01:70:7b:5a:55:3a:84:15:bf:51:f4:6a:89:4b:f0:b5:68:68:
         d7:6c:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:45:36 2024 by rpki-client on console-ams.rpki-client.org