Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          thDtgZsazkp88ni95y+yNGXyIFIpUYVcRqLy+iAIvbs=
Subject key identifier:   E2:ED:16:96:8E:EE:0C:C9:9E:BE:69:3B:3A:64:FC:10:33:33:73:76
Certificate issuer:       /CN=28612772543E43335B080C32808B7FDC277E71E4
Certificate serial:       2AF5EA1EAFF36356D37AB4E6A4044E3D3166C483
Authority key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
Signing time:             Thu 12 Oct 2023 06:33:12 +0000
ROA not before:           Thu 12 Oct 2023 06:28:12 +0000
ROA not after:            Thu 10 Oct 2024 06:33:12 +0000
asID:                     138131
IP address blocks:        103.121.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl
                          rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f5:ea:1e:af:f3:63:56:d3:7a:b4:e6:a4:04:4e:3d:31:66:c4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28612772543E43335B080C32808B7FDC277E71E4
        Validity
            Not Before: Oct 12 06:28:12 2023 GMT
            Not After : Oct 10 06:33:12 2024 GMT
        Subject: CN=E2ED16968EEE0CC99EBE693B3A64FC1033337376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:58:ca:d3:37:69:82:ef:04:18:0b:5b:39:3c:
                    5d:ab:20:95:f1:86:c4:1b:a3:0a:dc:cb:ab:a2:71:
                    4f:56:8c:9d:70:36:bd:31:60:29:4c:93:43:82:8d:
                    64:0d:1b:d3:bf:2e:c3:07:51:d3:bd:d6:52:8b:9d:
                    fc:36:af:60:1e:d9:a5:f9:f4:fc:33:db:8d:a3:20:
                    38:b5:87:67:5a:c9:6b:1c:1e:92:40:76:d7:e8:9f:
                    94:24:55:96:37:f1:64:4f:54:50:13:fc:f6:48:aa:
                    9d:59:8d:2b:c5:54:27:db:6a:19:18:46:cd:18:b2:
                    d9:56:61:d4:68:20:23:d9:49:03:bc:a6:49:26:11:
                    de:fb:61:74:d0:69:0f:e7:a2:ba:9b:e6:88:6f:31:
                    98:9e:cb:58:3f:7a:2d:37:21:50:84:f1:ad:38:91:
                    3c:57:2e:7f:cd:eb:1e:fa:f7:3d:a0:15:c3:ad:1b:
                    38:82:0e:09:1d:3f:9a:63:9e:f0:dc:8a:8a:5c:e9:
                    33:f2:f3:32:fa:c1:6c:93:25:5c:ec:aa:21:a3:53:
                    92:73:f1:24:1c:5c:28:97:ea:72:af:15:7b:0f:6b:
                    dc:05:20:9a:ac:ee:af:76:8a:31:e2:8d:19:c4:72:
                    9c:49:8d:e3:6b:4a:07:b3:7b:ad:09:83:d0:14:bd:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:ED:16:96:8E:EE:0C:C9:9E:BE:69:3B:3A:64:FC:10:33:33:73:76
            X509v3 Authority Key Identifier:
                keyid:28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:11:87:42:9e:4b:22:0d:20:8c:fc:ff:29:a3:1a:02:50:
         41:18:a0:35:75:ee:d1:ff:ef:36:73:52:e3:1d:af:ff:21:cf:
         48:3e:94:9a:c4:d3:94:5c:8a:31:75:fa:80:65:56:91:3a:4a:
         56:9d:5c:de:88:61:30:6c:da:25:c7:6d:f4:63:07:43:21:00:
         c0:69:e9:a4:e5:cc:12:47:21:23:f1:9b:fa:ca:23:71:29:9b:
         c3:11:14:b3:a0:a8:2b:c1:85:91:c0:4c:b2:38:88:78:26:85:
         31:d2:e4:d4:60:04:5d:76:cd:b0:06:3f:a4:e8:23:d8:d4:08:
         91:22:b1:b3:e3:11:ef:79:07:0b:d5:39:2b:9d:fc:dd:9a:f5:
         84:ce:fe:af:1c:ca:25:40:5c:53:5c:50:25:ec:84:5a:07:85:
         fd:8b:0d:7c:e1:fe:7b:5c:67:e3:84:59:89:58:cb:e2:68:da:
         bb:75:d5:bb:94:50:82:59:f9:d0:8c:15:6f:d1:7b:31:8a:57:
         4d:94:3c:ae:9b:48:d7:60:9b:f8:f0:e0:49:7c:08:3a:f7:7b:
         ef:cf:b3:88:d7:b0:67:d5:c7:2d:a8:9d:a0:a5:73:d9:88:ab:
         bc:dd:0a:a8:77:02:b7:1e:b3:24:2d:4f:48:fc:f5:28:95:8d:
         4c:82:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:04 2024 by rpki-client on console-ams.rpki-client.org