Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          rGH7TAkukxNyA6o3mHQLPc45RKKezG68X/hpPx0mdUM=
Subject key identifier:   90:7A:28:4C:C3:D4:8D:8E:03:E3:76:C2:A1:93:F0:57:F8:C8:14:8E
Certificate issuer:       /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Certificate serial:       7998572CA3966B0C3B4215776A5BCC83E562EF5B
Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa
Signing time:             Wed 10 Jan 2024 19:00:00 +0000
ROA not before:           Wed 10 Jan 2024 18:55:00 +0000
ROA not after:            Wed 08 Jan 2025 19:00:00 +0000
asID:                     9341
IP address blocks:        103.181.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
                          rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:98:57:2c:a3:96:6b:0c:3b:42:15:77:6a:5b:cc:83:e5:62:ef:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
        Validity
            Not Before: Jan 10 18:55:00 2024 GMT
            Not After : Jan  8 19:00:00 2025 GMT
        Subject: CN=907A284CC3D48D8E03E376C2A193F057F8C8148E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:88:e8:9b:b2:4c:be:f5:2b:80:d3:c0:a1:
                    f9:ab:23:d7:8f:fa:e9:b5:7c:e9:c1:63:4b:07:63:
                    31:32:18:a1:73:de:c5:58:db:5a:ea:db:d6:d4:52:
                    fa:ff:71:65:8f:a1:c0:17:67:e4:53:42:78:fc:9b:
                    b7:55:90:31:32:f5:5c:47:e7:0d:6f:12:34:16:78:
                    e4:bd:c2:84:68:1b:ec:b3:2f:40:7a:e3:5d:34:1e:
                    be:86:7c:78:e5:48:c2:98:30:c2:4e:f6:d6:82:95:
                    4b:dc:1c:40:15:25:10:21:ec:50:c6:3d:9a:79:8d:
                    a9:7d:28:5a:f5:e3:c3:b1:62:99:cb:37:27:53:f5:
                    62:28:7f:4b:70:ff:c8:55:13:0b:40:db:61:36:d3:
                    47:5b:2f:56:b1:38:46:9f:d8:92:c4:c6:1e:82:39:
                    80:ea:47:e5:7f:25:4c:00:fc:bc:a5:51:15:70:89:
                    b7:0e:c8:98:cf:e9:b3:50:4d:1e:c1:41:1a:9c:d3:
                    43:ea:e1:39:c7:5a:d2:3a:4a:52:28:68:be:6c:99:
                    43:9a:5c:3c:7e:fd:2a:a0:4f:29:92:23:fc:e1:f3:
                    a1:e9:bb:4f:2f:8e:f8:cb:14:67:b4:aa:c1:3c:61:
                    5e:74:47:a5:f2:d0:85:fa:59:98:d0:83:3f:e5:fc:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7A:28:4C:C3:D4:8D:8E:03:E3:76:C2:A1:93:F0:57:F8:C8:14:8E
            X509v3 Authority Key Identifier:
                keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:86:cb:93:c1:ef:95:f0:79:c5:f9:19:e5:5e:ab:c5:dd:35:
         3a:74:aa:60:58:cc:e7:97:ff:62:44:8c:18:c1:17:d8:c2:a1:
         44:45:37:7a:d0:02:b9:93:f0:b4:64:1a:50:ef:ab:f9:61:67:
         b4:f2:9a:34:cb:83:42:c8:d2:0f:e0:fc:c6:c7:60:bd:d9:45:
         58:b3:10:75:08:e9:b6:9b:18:08:ed:a2:05:0b:3c:78:fe:6d:
         91:b8:2c:37:1b:53:5c:34:bd:2a:d7:bb:00:d2:b7:2a:0e:f5:
         6b:89:99:e4:c4:5b:5a:6b:e5:84:25:87:ee:f6:62:dd:ab:68:
         ba:b7:c1:8b:ba:9b:a3:71:62:a0:d5:6b:bf:8e:f8:8f:8e:fe:
         8c:2a:ae:9b:cc:2b:8f:5e:c0:a2:10:ed:8e:ba:2b:dd:e1:cc:
         cd:c7:9c:41:7f:0d:7e:fd:df:ef:51:14:b6:4c:37:e9:cb:34:
         52:db:09:4b:99:40:24:1e:7d:35:10:77:6d:72:80:c4:23:78:
         5e:61:1e:89:9a:87:99:c9:8f:3a:9d:1e:05:2c:a1:2a:f0:9b:
         23:40:01:d1:21:71:27:ba:dc:97:c9:f3:84:68:52:b1:30:2a:
         e8:49:ab:97:3e:0b:92:83:df:13:9f:91:06:11:43:08:77:6e:
         af:26:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org