Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          x8nThpSsXNcXVCU82pXJDEMTMfpVQIOVwj3RtXBlejg=
Subject key identifier:   27:E8:A0:1C:83:25:C9:BE:F9:EE:F2:C0:A8:63:CC:62:69:6A:77:CD
Certificate issuer:       /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Certificate serial:       EE3921F7D28E1F7A852BD80224CDD0AADA5B0D
Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
Signing time:             Sat 16 Dec 2023 10:00:01 +0000
ROA not before:           Sat 16 Dec 2023 09:55:01 +0000
ROA not after:            Sat 14 Dec 2024 10:00:01 +0000
asID:                     141922
IP address blocks:        103.165.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
                          rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ee:39:21:f7:d2:8e:1f:7a:85:2b:d8:02:24:cd:d0:aa:da:5b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
        Validity
            Not Before: Dec 16 09:55:01 2023 GMT
            Not After : Dec 14 10:00:01 2024 GMT
        Subject: CN=27E8A01C8325C9BEF9EEF2C0A863CC62696A77CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:09:f0:07:cd:66:89:0f:5b:c1:df:37:c5:
                    9f:67:ed:d0:fa:fc:f9:b6:20:f3:f5:bf:9f:05:4b:
                    28:5b:ad:e7:1b:9c:14:3f:7c:3d:e8:86:f4:b2:ca:
                    0a:2b:25:66:e5:fe:93:76:5c:9a:4f:3a:2f:a5:02:
                    b6:27:2a:65:c2:af:68:88:e6:0d:4c:df:c2:01:f9:
                    f0:42:e4:fb:9c:f2:3d:56:32:48:07:a2:27:15:96:
                    a3:48:05:13:95:7c:98:20:f9:39:cb:cb:17:34:69:
                    28:5e:d7:c5:1f:38:5d:17:c0:5a:7a:a7:60:7b:11:
                    a5:55:ee:4f:dc:a0:4b:57:74:43:9b:fb:83:35:ce:
                    56:d8:ea:76:c9:30:45:a8:7b:cf:79:35:ad:70:08:
                    83:87:06:88:4c:43:55:04:90:03:08:43:03:d7:8d:
                    9e:a5:78:0b:66:d5:4d:19:f8:97:92:97:1e:c2:87:
                    eb:50:b9:1c:c0:35:b2:d8:e5:0e:14:69:30:b5:01:
                    7b:6b:9b:2a:a2:67:ca:4c:f7:4b:fa:f0:46:b7:93:
                    2b:d5:54:3a:82:fa:77:c1:2f:66:3a:6e:e9:72:96:
                    2e:e2:1b:34:3c:75:72:f0:03:4f:cd:24:2b:dd:70:
                    56:c5:8b:3b:7a:1b:d9:a2:60:21:d6:57:20:9a:ec:
                    27:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E8:A0:1C:83:25:C9:BE:F9:EE:F2:C0:A8:63:CC:62:69:6A:77:CD
            X509v3 Authority Key Identifier:
                keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:6f:82:fc:db:0b:10:af:58:40:ba:e1:d0:49:5e:1e:ca:
         27:b6:a3:36:b1:5b:81:17:ad:9e:5e:d2:66:10:c1:7e:9c:ee:
         f9:ef:ec:57:8d:fd:cc:1f:8b:f8:43:ed:4e:6c:9b:9f:fc:e1:
         66:a0:2d:8b:45:3a:54:96:38:dc:71:3c:1c:58:5f:89:7e:44:
         f9:e1:79:31:d9:d5:6f:b6:1a:dd:30:87:a9:d4:3c:a5:b2:50:
         37:29:e6:16:75:e8:c4:2b:13:bd:62:2c:f2:80:da:8a:4e:3b:
         ea:1d:df:3c:a1:d8:c3:b8:b0:d6:77:45:7f:32:b8:6d:8c:65:
         0a:9a:e1:0e:82:b9:dd:c6:d4:a9:77:4e:ae:4a:73:2c:ea:ca:
         bc:0f:49:28:75:f9:b5:e4:29:65:7f:07:4a:11:b4:da:34:85:
         1f:c1:4d:0f:e5:35:ee:4e:c0:76:7e:48:42:18:dc:49:9e:57:
         c1:05:8b:0c:41:0c:30:9d:67:45:43:6e:34:e7:21:c3:92:9c:
         ad:41:a2:b0:65:6a:99:ed:69:d7:ba:7c:18:d4:38:38:ad:07:
         d9:72:e7:39:db:0f:cb:05:de:a5:82:8f:26:ce:83:aa:1a:d2:
         52:89:a6:c4:6b:c7:40:09:e4:c8:90:bd:5a:01:35:ef:20:1a:
         84:58:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:10:17 2024 by rpki-client on console-fra.rpki-client.org