Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
File:                     3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (raw, json)
Hash identifier:          f3gVQy3iVscJrDT64wrFEXtI8xDsmGuUPnvqrFOi7q0=
Subject key identifier:   A2:DB:F7:D0:58:6F:6F:14:78:0F:06:79:F0:2D:05:7A:F6:05:9C:49
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       709A37781ACC940AF24CF393F470B7B00BC221D2
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa
Signing time:             Tue 16 Apr 2024 07:00:02 +0000
ROA not before:           Tue 16 Apr 2024 06:55:02 +0000
ROA not after:            Tue 15 Apr 2025 07:00:02 +0000
asID:                     141907
IP address blocks:        103.163.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:37:78:1a:cc:94:0a:f2:4c:f3:93:f4:70:b7:b0:0b:c2:21:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Apr 16 06:55:02 2024 GMT
            Not After : Apr 15 07:00:02 2025 GMT
        Subject: CN=A2DBF7D0586F6F14780F0679F02D057AF6059C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:48:3e:a6:2e:70:06:9c:5f:a6:96:96:7b:
                    f0:40:5a:b6:b1:b0:36:e7:d3:6b:f8:05:c7:49:21:
                    b0:bb:14:5e:59:d1:2f:57:56:8e:09:0d:be:f2:85:
                    e9:25:32:a0:d7:d0:7d:b8:d5:81:72:7d:62:b4:bc:
                    1c:e2:06:57:d9:7f:1e:d7:6f:75:32:aa:d3:1c:04:
                    ed:d2:0b:f6:36:ce:f1:ae:e7:ab:99:78:4c:5c:60:
                    15:5c:fa:e5:6d:f5:4b:60:9f:f5:fa:7b:09:26:d0:
                    9c:7f:7a:48:54:8e:16:79:24:27:55:d4:19:6e:8e:
                    25:3d:66:64:d4:c8:9e:18:52:dd:b9:1d:9f:75:28:
                    dd:9c:fd:7a:45:a9:5e:2d:01:97:e1:ed:9c:a5:bd:
                    88:65:10:2e:3a:06:c3:70:11:ad:72:1b:18:be:2d:
                    f1:d2:84:d4:41:1a:d4:fd:fb:5d:07:d2:ad:73:0d:
                    78:99:3b:3c:9b:95:b9:ca:ad:5d:db:b1:5e:2e:4f:
                    23:be:70:09:e9:1f:7a:c1:71:24:a2:b9:40:b6:ed:
                    66:cf:10:b3:53:18:50:db:fa:9d:dc:e8:60:5d:47:
                    d1:a5:b1:c2:f7:36:49:e6:f4:0a:47:ea:a0:dd:2e:
                    30:5f:bc:5f:5f:d7:5b:c3:63:cf:4a:5f:10:61:0f:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:F7:D0:58:6F:6F:14:78:0F:06:79:F0:2D:05:7A:F6:05:9C:49
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:34:ac:98:75:8d:ca:a1:1c:0b:56:28:53:44:1e:ef:c7:
         b3:ac:18:c6:87:e3:ab:29:d3:83:6c:cd:e3:38:75:0a:e2:74:
         b3:d8:f6:06:ff:af:e8:29:2c:4d:35:35:24:a8:24:1c:5a:61:
         f1:20:65:28:59:9f:63:a5:e4:a0:5e:75:99:eb:79:d4:f3:cc:
         35:66:81:27:34:cb:11:8f:26:47:74:84:ad:af:93:33:8e:bd:
         4c:03:b0:c6:07:ba:25:cf:a1:dd:15:5b:86:f2:b0:ca:f7:7e:
         48:8e:9a:8d:e4:3d:0f:fd:c8:ed:40:20:e5:f4:91:03:e4:5b:
         f7:22:72:27:b4:17:22:b3:1d:ff:95:56:33:09:d5:7e:43:54:
         52:96:33:18:a7:d7:9e:9d:c2:bc:77:5b:ba:86:ea:e3:1c:b4:
         4a:70:0c:c9:8e:e1:39:42:c0:fb:40:07:23:d4:1d:c6:58:56:
         27:25:d5:e6:29:0d:17:e8:9d:0f:0d:2c:17:63:11:53:de:7a:
         2d:91:60:46:9c:03:74:60:d7:00:5c:df:3d:6e:20:14:3f:59:
         5d:8d:f3:5a:ae:4b:ae:9a:51:9a:2c:f8:9f:ac:7b:2d:7b:89:
         c4:db:af:d2:5c:4a:37:a3:c5:d2:b6:7c:c6:55:b2:7f:24:af:
         2a:57:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org