Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
File:                     3130332e342e37362e302f32332d3234203d3e20313530323136.roa (raw, json)
Hash identifier:          Lhfroe+AEXgEhrFY/RT18gnNwb8H7lxWYtwkaKpg5XA=
Subject key identifier:   E0:71:EE:E6:77:BA:B9:54:FF:15:7B:5F:5C:D3:9C:B4:CE:CA:01:6C
Certificate issuer:       /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Certificate serial:       66941B9E1E7880AEEB5308C6077C042298FB908F
Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
Signing time:             Sat 19 Oct 2024 10:00:02 +0000
ROA not before:           Sat 19 Oct 2024 09:55:02 +0000
ROA not after:            Sat 18 Oct 2025 10:00:02 +0000
asID:                     150216
IP address blocks:        103.4.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl
                          rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:1b:9e:1e:78:80:ae:eb:53:08:c6:07:7c:04:22:98:fb:90:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
        Validity
            Not Before: Oct 19 09:55:02 2024 GMT
            Not After : Oct 18 10:00:02 2025 GMT
        Subject: CN=E071EEE677BAB954FF157B5F5CD39CB4CECA016C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:30:6d:49:a6:ab:73:ad:3f:f3:85:38:8c:
                    90:ae:0f:59:e2:75:8c:ba:7c:70:87:d9:d3:fe:bf:
                    a2:b0:f9:5d:a2:c3:ff:2b:b1:76:0b:52:7a:5d:26:
                    03:f7:81:a9:39:e3:d6:bd:fe:1d:98:54:80:d7:8c:
                    b4:5c:34:c4:50:16:74:25:65:c9:d8:0a:f0:70:d2:
                    6c:92:2a:dc:65:63:0b:63:ef:f8:78:b9:b7:f2:90:
                    a9:43:8e:28:f2:df:76:9d:8d:f3:2b:54:05:47:b1:
                    16:7b:96:d9:66:f1:ff:b1:09:c5:a4:a6:47:be:6f:
                    10:7b:c6:9d:0d:9b:27:36:d2:45:c0:72:54:3c:a0:
                    b3:b2:62:57:5f:a8:0e:c5:c1:9c:44:5d:2d:ca:5f:
                    e8:d7:59:98:43:f6:18:20:8f:5a:c4:cb:40:98:f7:
                    c7:c9:b7:69:06:42:40:d9:16:f9:3d:21:18:43:0e:
                    93:93:e8:cb:d1:d6:a6:d6:54:84:0b:f0:be:4d:ec:
                    c2:d1:42:d6:e0:23:b6:d9:95:2b:79:e5:09:ef:61:
                    cf:8a:0c:18:84:68:a3:25:7d:4d:cb:db:3d:8f:47:
                    0c:c7:44:8a:93:61:d4:52:f0:2f:4d:31:75:1c:33:
                    6a:a0:e3:20:2e:da:8b:7d:fd:cd:54:0c:be:d4:ef:
                    96:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:71:EE:E6:77:BA:B9:54:FF:15:7B:5F:5C:D3:9C:B4:CE:CA:01:6C
            X509v3 Authority Key Identifier:
                keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:88:6d:dd:ac:c2:39:54:cb:36:a7:81:e2:86:1d:1f:16:9b:
         76:d2:57:07:9e:c9:cb:51:3f:a9:92:86:09:36:c5:f0:88:49:
         1a:0a:37:be:d4:5c:f4:c6:7a:b8:cd:c4:dc:8e:c5:49:11:41:
         a4:a2:5d:56:80:06:b4:db:3e:d9:35:9e:7a:db:c3:c8:64:73:
         f0:31:86:e3:c8:2c:8f:0b:98:bb:c1:a6:8d:5e:8d:ba:14:19:
         56:2d:36:ed:a3:1b:f0:b3:e1:34:74:b5:02:77:73:b6:cf:32:
         c8:75:62:3a:06:c4:36:4a:04:65:0d:64:fc:ae:ec:dd:08:89:
         d4:24:c8:2e:0d:60:e2:e9:57:c1:9a:a6:3b:f8:5f:5d:69:60:
         bd:83:1a:91:9b:9e:0d:a8:0f:18:58:16:88:26:01:92:cb:fb:
         bf:fb:12:d0:cf:37:a1:0a:86:01:d4:db:91:35:e6:f0:3a:a4:
         aa:04:42:4d:82:ee:5f:3c:61:b4:91:95:27:ac:4d:6f:17:0d:
         9e:75:2c:5c:c6:75:bc:e5:5f:4c:03:69:c1:10:44:af:47:d4:
         5f:cf:9a:f5:36:c3:9c:77:3c:9a:56:8e:f0:54:ca:82:26:e4:
         70:00:f6:80:c2:0f:9f:d0:69:fc:ed:e3:8d:32:43:30:64:29:
         19:08:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org