Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
File:                     3130332e34392e32382e302f32322d3232203d3e203633383632.roa (raw, json)
Hash identifier:          KaYaILBDYwVpa7pLBu0dfQxIdhd3GjYV9bwkkIrfNQI=
Subject key identifier:   7D:2B:BA:30:95:FE:3F:6E:3A:19:6F:C5:2B:A2:3E:93:DA:FB:4C:65
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       6B47153E4FDC2501A66522385EB1B9FEE4B67ED1
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
Signing time:             Mon 01 Jul 2024 01:06:08 +0000
ROA not before:           Mon 01 Jul 2024 01:01:08 +0000
ROA not after:            Mon 30 Jun 2025 01:06:08 +0000
asID:                     63862
IP address blocks:        103.49.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:47:15:3e:4f:dc:25:01:a6:65:22:38:5e:b1:b9:fe:e4:b6:7e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul  1 01:01:08 2024 GMT
            Not After : Jun 30 01:06:08 2025 GMT
        Subject: CN=7D2BBA3095FE3F6E3A196FC52BA23E93DAFB4C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:49:db:7d:e0:6b:d6:9e:d6:0d:ea:1a:ad:
                    33:4f:f4:f2:5a:31:d6:ab:e4:af:ea:ee:24:d7:aa:
                    e0:01:49:ca:45:4c:86:f7:af:61:83:58:9a:b3:96:
                    74:0e:39:a7:a8:91:e5:2a:ff:63:27:ec:4c:da:40:
                    2b:9b:7d:10:b4:e2:11:84:b8:a5:28:95:40:d0:d4:
                    62:19:1c:fb:76:8b:43:d3:b8:6f:f7:7d:01:5a:55:
                    6f:f4:fb:12:b3:64:2f:4b:20:d1:9d:49:75:47:b0:
                    04:45:9b:c5:ae:2b:1d:bb:17:70:39:55:88:68:ea:
                    bf:dc:6e:89:a4:3a:c2:7a:e4:89:1c:04:12:e0:85:
                    4f:f5:66:6e:a4:c7:88:0d:e3:f2:49:e0:d0:55:78:
                    d1:b6:12:1b:24:db:90:d3:78:eb:57:bd:32:13:3c:
                    d9:69:20:16:a6:97:48:58:ef:5b:6f:b5:c9:e8:4e:
                    0a:57:73:84:c7:4e:7c:02:c3:38:87:05:a1:d0:7b:
                    df:75:c8:92:d5:cc:a4:aa:0b:92:51:dc:63:c2:49:
                    ae:40:df:d1:a3:5f:88:65:2a:b9:99:b2:35:d5:ab:
                    74:ed:b2:18:af:0b:e5:20:85:b8:6d:06:f1:ca:8a:
                    95:6d:36:75:be:ac:01:49:09:13:ec:9e:1f:67:55:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:2B:BA:30:95:FE:3F:6E:3A:19:6F:C5:2B:A2:3E:93:DA:FB:4C:65
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:eb:8a:ad:97:5e:06:00:2a:59:31:dc:94:c4:f4:2f:5f:
         96:8c:82:83:3e:c7:a6:b2:38:1d:6a:29:f8:d3:fb:3e:22:c8:
         52:12:8e:cf:43:3f:71:36:d2:75:c9:67:51:89:df:b0:ba:6f:
         7e:0f:84:75:e1:19:c2:db:ca:e4:33:67:92:be:29:3b:a0:db:
         9c:ea:37:f9:c5:77:ac:ff:03:78:7b:89:e4:4a:9b:a5:06:d9:
         09:97:ad:2b:c9:11:07:b5:21:30:e9:f9:35:70:80:25:37:2e:
         ed:9f:70:67:ab:ff:08:2a:6a:d7:fd:79:01:4f:4f:c8:c8:a4:
         6a:95:07:55:e1:52:8f:42:b2:c8:c0:90:8d:ca:85:2b:23:71:
         93:b3:cf:cb:cc:f0:d0:0d:00:b9:cb:bf:71:dd:11:68:7a:0e:
         ca:5d:b0:0a:d3:32:ee:54:f6:5e:3c:44:19:1b:10:91:24:a9:
         e7:4d:f9:d9:d1:2b:33:31:bd:f7:28:a4:12:4b:43:f6:d3:5d:
         65:18:c4:5f:ce:e7:54:07:16:e7:7c:3f:34:2e:18:6e:d9:46:
         d1:23:f5:17:8c:5a:f2:01:26:5d:15:16:23:46:32:d8:f0:e2:
         43:77:fc:5c:59:e9:25:b2:c3:14:cd:9f:d8:ea:bf:15:96:d4:
         8a:77:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:26 2024 by rpki-client on console-fra.rpki-client.org