Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa
File:                     3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (raw, json)
Hash identifier:          xf6aYFANRi2gXj+4Ef83dW2Y4cnlFa6Ygd8LC1iqxNs=
Subject key identifier:   D9:DA:0B:BF:95:51:12:78:EA:94:C7:9F:08:D3:DA:B3:79:F4:D4:3F
Certificate issuer:       /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
Certificate serial:       4D17DEE97CEBAE831F65001FB74AD754DBAF7081
Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa
Signing time:             Fri 13 Oct 2023 02:55:59 +0000
ROA not before:           Fri 13 Oct 2023 02:50:59 +0000
ROA not after:            Fri 11 Oct 2024 02:55:59 +0000
asID:                     149934
IP address blocks:        103.191.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl
                          rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:17:de:e9:7c:eb:ae:83:1f:65:00:1f:b7:4a:d7:54:db:af:70:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413
        Validity
            Not Before: Oct 13 02:50:59 2023 GMT
            Not After : Oct 11 02:55:59 2024 GMT
        Subject: CN=D9DA0BBF95511278EA94C79F08D3DAB379F4D43F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:10:65:c0:53:b0:49:5d:aa:fc:9d:be:33:
                    f1:01:e1:9e:d1:a8:7f:2a:9f:31:f1:85:42:e3:b3:
                    3a:79:a8:b0:55:ed:5e:78:24:12:35:00:54:87:ba:
                    c5:d4:69:df:88:b9:eb:dc:da:ec:b2:91:3f:ff:20:
                    f6:48:e4:2d:02:1b:aa:5e:a1:74:f8:43:ac:56:80:
                    75:05:74:b2:a5:75:1f:3d:ba:9c:c2:07:4f:d5:ae:
                    6c:04:b8:93:e8:f4:03:2a:33:0e:4b:d7:c4:d0:ef:
                    0c:f2:53:4e:b8:ba:0e:ac:aa:ac:fd:80:a9:42:8e:
                    8c:79:67:31:de:22:20:55:a4:48:ac:a1:96:a4:f2:
                    1d:9f:f7:47:e1:8a:3b:7d:3c:ab:5f:77:00:b3:e0:
                    ba:03:14:21:70:60:ee:48:ea:d6:fd:ae:0e:23:b0:
                    62:0b:d5:8a:b7:1b:6d:2f:e1:b5:4a:84:ac:c1:1f:
                    e2:8c:2c:13:c6:ec:c3:48:37:a1:05:82:b7:14:ad:
                    26:1e:70:02:6f:3c:3c:82:d5:08:aa:33:f6:7b:18:
                    29:13:c7:12:86:9b:b2:db:35:e4:d1:76:d0:92:e8:
                    f2:63:9b:1f:a4:0d:e0:60:34:ab:3e:51:1f:e5:fb:
                    89:36:2a:1d:eb:21:16:eb:4a:bb:e3:a3:20:8b:81:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DA:0B:BF:95:51:12:78:EA:94:C7:9F:08:D3:DA:B3:79:F4:D4:3F
            X509v3 Authority Key Identifier:
                keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:9b:43:50:11:34:d9:f4:6a:c4:aa:b9:53:0b:87:29:78:f8:
         3b:3e:f8:cd:79:76:e9:d6:ce:3f:2f:bf:63:27:e9:0d:a0:af:
         ac:67:65:99:e8:eb:1a:53:4a:ae:86:f1:34:b6:1b:5f:d4:03:
         75:da:55:cc:64:bf:87:84:2b:34:8e:e7:dc:31:dd:c8:4c:b4:
         e7:13:7f:08:86:c5:69:93:a4:70:8a:94:17:1c:7d:31:29:fa:
         e4:40:61:57:78:1c:b5:e7:49:2b:68:0d:21:fa:3b:fd:2a:c5:
         b5:61:53:3e:d2:5c:09:30:a3:b7:70:c6:72:f4:ac:d5:b6:03:
         20:67:cd:49:69:9a:66:2a:45:53:7d:95:a1:91:3f:58:8d:9f:
         5a:69:b3:8b:5a:83:12:e5:25:24:2a:2b:1a:17:3c:48:00:5a:
         0b:0d:20:58:72:1a:40:7f:e7:7a:3b:69:ea:3f:41:53:fc:ff:
         a5:35:69:43:eb:25:2f:93:a6:33:90:6f:74:83:3f:fe:cc:96:
         21:be:f0:70:4c:87:bf:92:a2:76:f3:3b:2a:42:95:20:7e:8e:
         88:d6:a9:cc:2f:7e:91:36:c3:37:99:22:1f:c3:a2:b2:0c:c3:
         ce:37:95:b5:07:47:25:10:2a:87:38:ed:f7:e0:5c:12:ec:72:
         3c:5e:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:43 2024 by rpki-client on console-fra.rpki-client.org