Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
File:                     3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (raw, json)
Hash identifier:          BU7RhJbHmo48gBiM0XCGp/0W3zlkvH59pjw/gREL0T0=
Subject key identifier:   CE:FA:22:72:F4:F7:05:F9:B2:4A:C7:E4:4C:89:F5:14:4D:CA:38:42
Certificate issuer:       /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
Certificate serial:       45D71F4DCDA86A3D2B00C756A703D6A772CC99D6
Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa
Signing time:             Wed 13 Dec 2023 09:00:00 +0000
ROA not before:           Wed 13 Dec 2023 08:55:00 +0000
ROA not after:            Wed 11 Dec 2024 09:00:00 +0000
asID:                     147163
IP address blocks:        103.177.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl
                          rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d7:1f:4d:cd:a8:6a:3d:2b:00:c7:56:a7:03:d6:a7:72:cc:99:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4
        Validity
            Not Before: Dec 13 08:55:00 2023 GMT
            Not After : Dec 11 09:00:00 2024 GMT
        Subject: CN=CEFA2272F4F705F9B24AC7E44C89F5144DCA3842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:ad:02:3d:ce:c9:16:1e:1c:82:05:91:7e:
                    52:83:6d:03:ab:3f:a6:fb:a6:c2:79:a7:b4:3f:bf:
                    78:4d:f7:ee:53:ba:4c:37:a4:a7:15:16:02:af:ac:
                    b5:14:b8:fa:ef:51:1c:72:3d:fe:52:0d:43:0c:3c:
                    c6:f0:55:eb:df:1e:4f:a6:47:41:5d:aa:7a:ce:63:
                    59:01:11:9f:2d:52:78:d1:ad:24:77:6a:e6:fe:7b:
                    69:bd:56:8f:e3:30:45:7c:fa:e1:24:09:fb:68:a1:
                    ab:18:7b:d7:58:0c:2f:fc:bd:7c:c7:38:b2:97:1a:
                    f6:47:ab:1d:45:91:c1:2b:c0:5f:b8:4b:51:85:e1:
                    ff:4f:79:ee:21:aa:19:37:51:ee:f9:bd:44:b3:9f:
                    d0:35:88:1c:36:57:d9:b5:48:1b:af:8b:8e:3b:d1:
                    e5:da:40:0e:92:e1:eb:89:f7:2d:b2:fa:a7:e6:2e:
                    5e:f9:dc:cd:2d:2b:7f:9c:21:7f:04:cf:02:79:d5:
                    96:c4:ee:b4:72:75:6e:86:85:21:c8:d8:d1:0e:6e:
                    11:04:d7:0f:8c:8b:17:b3:37:e2:74:8d:00:04:f2:
                    0a:93:40:32:06:d0:96:f0:b4:b4:01:79:1d:7d:b1:
                    ee:9b:86:44:92:16:ec:dd:7b:b8:f6:37:4f:65:45:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:22:72:F4:F7:05:F9:B2:4A:C7:E4:4C:89:F5:14:4D:CA:38:42
            X509v3 Authority Key Identifier:
                keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:ac:70:da:15:8b:6b:b6:02:fa:3a:df:22:98:d4:58:4c:d5:
         98:d2:1a:b4:3a:db:d4:b5:49:82:f6:fd:a2:a5:bd:14:44:44:
         dc:a7:9d:ec:54:24:de:ee:e3:8b:34:40:92:f6:87:54:fa:92:
         ce:60:c9:c6:76:33:3b:a2:76:5f:6d:55:91:8c:7e:f0:54:5b:
         08:30:a2:1f:85:67:02:95:f0:8e:89:af:ae:33:aa:2b:f3:7c:
         e9:de:bb:49:ee:d4:bd:c6:4c:d4:fa:0d:27:82:91:4b:2e:58:
         fb:11:55:6f:e0:fa:4d:93:7c:6f:35:9e:21:9d:2e:2a:15:de:
         07:57:56:ef:0f:20:4c:d8:6d:45:3f:3f:1b:0a:5e:fe:14:e0:
         af:df:d7:f9:93:0b:d2:f6:54:db:51:ea:dd:30:5f:4d:e1:92:
         9d:83:6f:f0:bf:39:e3:77:71:fe:f6:19:cf:23:cd:98:49:0c:
         46:3c:27:f9:47:fa:9f:96:1e:89:f9:40:9f:33:96:94:a2:23:
         4b:6d:e0:dc:63:1b:e4:11:d7:4e:18:60:0f:07:d3:e4:db:22:
         85:c1:69:e7:1a:0e:a0:b6:50:f8:c1:aa:98:78:b5:74:b3:5c:
         1b:7b:9f:82:5a:35:68:ca:95:cd:88:3d:61:67:a1:02:75:cf:
         2d:36:e3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org