Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa
File:                     3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (raw, json)
Hash identifier:          R84ijcGEJVTwF0pTReTFkkLj+c3Y3t+jF7hwqJn5Uac=
Subject key identifier:   8F:68:E5:4D:37:4A:FB:3E:4A:D8:BB:40:FF:06:0E:D5:08:1B:F1:3F
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       3FDAB29614DD83CF651D01113016E8547BE1CE2B
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa
Signing time:             Fri 09 Feb 2024 08:00:00 +0000
ROA not before:           Fri 09 Feb 2024 07:55:00 +0000
ROA not after:            Fri 07 Feb 2025 08:00:00 +0000
asID:                     147163
IP address blocks:        103.177.214.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:da:b2:96:14:dd:83:cf:65:1d:01:11:30:16:e8:54:7b:e1:ce:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Feb  9 07:55:00 2024 GMT
            Not After : Feb  7 08:00:00 2025 GMT
        Subject: CN=8F68E54D374AFB3E4AD8BB40FF060ED5081BF13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:da:07:c2:f4:c1:b4:d6:1d:07:9f:5b:8c:
                    be:90:a9:5b:f7:0f:68:d5:5a:08:b4:09:19:d9:d4:
                    af:3b:7e:fc:fa:e3:ea:46:ef:81:55:8b:15:ca:7e:
                    4e:0c:47:42:25:d2:74:9e:c8:8c:e1:86:cf:8b:86:
                    03:2e:f6:1b:5e:d7:50:20:8b:5f:31:0d:3b:9d:49:
                    e9:52:e9:19:1c:4b:94:ca:1a:4e:da:98:7d:22:b2:
                    ee:b8:c9:3e:df:06:22:2b:1f:f8:e6:28:ab:7c:a2:
                    b4:8c:58:cd:3f:ed:5e:1e:fc:2e:d5:ee:69:e0:e9:
                    30:8b:92:b7:48:08:8d:90:ed:8b:59:f3:ac:50:93:
                    ac:4d:98:19:d4:0f:ec:a6:70:7e:2a:04:47:f4:7b:
                    40:f6:40:c4:c5:cb:8d:3c:af:21:28:33:ed:3c:f1:
                    74:37:f3:a9:2f:c1:fb:aa:45:5a:b9:3e:1c:0e:42:
                    ec:ac:23:ef:ca:1c:c5:4a:f6:e2:ad:f8:7e:c1:ca:
                    83:93:5a:de:e5:fc:b4:1e:bb:c0:5c:68:e2:8c:55:
                    c8:9c:fb:9c:24:ee:9b:b4:5b:d6:b3:fe:69:56:66:
                    03:89:fe:e5:6a:47:56:2e:95:38:b0:ec:a0:04:80:
                    f5:fa:e6:c4:f1:83:b8:3d:b2:bd:3f:3d:2a:9e:9c:
                    d5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:68:E5:4D:37:4A:FB:3E:4A:D8:BB:40:FF:06:0E:D5:08:1B:F1:3F
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:b5:92:d9:43:4b:f7:7c:27:b1:70:fd:99:7b:53:ec:ca:
         fb:e0:ba:82:e2:5f:b6:35:7d:be:7f:5b:1f:7d:0b:9a:14:8e:
         d5:2d:44:85:42:34:a4:4e:fd:74:bb:31:3a:86:b2:85:9c:7f:
         88:aa:d4:26:3c:22:92:d0:2f:4c:68:61:fc:b3:15:9e:e2:96:
         14:b3:a2:90:54:80:c3:2a:27:ca:f0:95:39:47:97:de:d6:c9:
         93:6a:55:87:44:bb:9d:7a:43:2f:49:d7:1c:99:2e:6f:6c:6d:
         c1:22:c7:a9:91:f4:cc:b6:e3:86:a2:a4:99:be:af:1d:84:26:
         45:d2:2d:9e:98:f1:2a:e9:86:3c:47:ee:6b:9f:d7:97:94:7e:
         17:39:33:fa:1d:4a:31:48:2d:28:1e:75:f3:81:91:ce:0e:a9:
         44:25:6b:f0:3f:84:62:05:46:de:bd:5a:a7:73:ba:83:b1:d2:
         15:52:45:7a:50:7d:f0:57:26:37:3e:58:fb:22:5c:53:b1:fa:
         8b:ed:f7:fd:b1:4b:bf:66:46:9d:63:08:10:50:ad:0b:d5:3c:
         ba:7e:3e:ce:fd:df:15:46:97:72:5e:5c:4a:1c:bc:e9:5e:cc:
         13:34:f3:29:2e:eb:51:1e:83:2c:32:58:ff:36:e0:22:86:85:
         6f:ff:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org