Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa
File:                     3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (raw, json)
Hash identifier:          amC3xp9Xh5S/9IN9xAK1DkoUZZNKfdJbWEZ+D4rP1Ao=
Subject key identifier:   70:71:10:8B:C2:3A:F4:FC:D5:C5:91:AF:16:50:67:FE:32:FF:6E:E6
Certificate issuer:       /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
Certificate serial:       2275DB5EA1EE7D34AE778193DBA2368EBDCA23CD
Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa
Signing time:             Thu 01 Feb 2024 16:44:31 +0000
ROA not before:           Thu 01 Feb 2024 16:39:31 +0000
ROA not after:            Thu 30 Jan 2025 16:44:31 +0000
asID:                     149353
IP address blocks:        103.177.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl
                          rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 22:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:db:5e:a1:ee:7d:34:ae:77:81:93:db:a2:36:8e:bd:ca:23:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E
        Validity
            Not Before: Feb  1 16:39:31 2024 GMT
            Not After : Jan 30 16:44:31 2025 GMT
        Subject: CN=7071108BC23AF4FCD5C591AF165067FE32FF6EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:b1:7f:af:13:6c:56:a2:da:de:90:e2:1b:
                    c9:93:f5:0a:99:c4:8c:fe:a2:05:dc:2a:d5:b9:8f:
                    f0:b6:61:1a:5d:53:ed:9e:85:05:23:3c:63:27:7a:
                    b0:2b:7f:74:4d:19:55:41:b0:c0:16:f0:78:8d:a1:
                    85:9e:71:62:c6:96:6c:ea:fc:fc:94:13:55:5b:16:
                    5c:f4:29:c8:06:f1:0d:31:04:d3:8e:ae:e5:5c:98:
                    86:79:94:1d:e8:61:76:44:c8:1c:98:b6:46:23:73:
                    6a:3e:30:42:fd:75:be:61:c6:60:bc:7b:3f:37:7d:
                    52:ee:2b:53:7d:87:f4:89:5b:12:45:dc:d1:1a:55:
                    3a:08:ee:93:36:50:1c:53:85:46:73:b0:13:c5:cb:
                    66:e1:7c:e0:bb:4c:bd:36:82:c9:25:38:84:7b:c8:
                    38:1f:ff:14:e3:88:06:d4:97:a8:5c:1d:01:12:6b:
                    6c:f0:dc:40:85:99:14:99:10:14:c4:ac:33:10:bd:
                    32:09:54:34:6d:11:bb:cb:3d:bd:3e:50:4c:96:4e:
                    48:c0:b8:19:9e:b1:2d:a7:ad:ff:c7:96:7e:ce:3a:
                    31:5e:49:0a:d7:01:46:9e:6d:a2:f5:76:c7:01:e4:
                    3a:1a:62:2e:a2:77:ea:3e:62:8b:85:d6:f0:81:79:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:71:10:8B:C2:3A:F4:FC:D5:C5:91:AF:16:50:67:FE:32:FF:6E:E6
            X509v3 Authority Key Identifier:
                keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:78:a6:21:4f:d3:83:8f:30:1a:cc:b9:b4:62:37:91:f3:be:
         7b:40:cc:00:01:d6:ee:c0:b4:bd:9f:78:b3:0d:77:78:89:9c:
         9e:6e:af:0a:5f:2c:08:5b:48:30:6f:67:ff:78:6b:17:9f:0f:
         13:97:5d:b7:6e:b1:3c:71:b3:17:19:41:b0:53:49:75:65:ae:
         e1:04:79:4b:ae:be:0e:6f:e9:d8:33:88:d4:bf:ca:c0:af:49:
         64:15:b7:3c:c3:3d:e4:54:cb:39:1c:1a:72:ce:ed:72:90:94:
         a6:14:b9:d3:0d:e1:ce:ba:00:bb:85:ed:28:b7:91:50:89:7b:
         fd:4c:05:9f:b1:aa:71:30:12:d5:7c:db:75:da:d7:30:52:aa:
         8d:bb:7a:8b:89:78:14:d1:e6:9d:b7:78:62:97:8c:0e:d1:d4:
         8d:62:1c:13:0d:dd:57:5a:2b:a5:78:6e:53:4d:06:18:a3:57:
         25:74:e5:9a:5b:89:e8:db:5a:65:3a:c0:bb:1f:a9:60:82:67:
         62:9e:92:44:1c:e9:08:eb:32:31:3d:70:de:91:3d:d8:b5:42:
         a9:eb:a2:77:eb:f3:31:53:d2:60:02:b8:3b:fe:24:49:1a:94:
         59:b9:4d:3a:02:fe:a9:2f:8c:cd:a9:cb:ae:e2:45:79:b0:ae:
         8f:a8:2c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 21:35:55 2024 by rpki-client on console-ams.rpki-client.org