Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
File:                     3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (raw, json)
Hash identifier:          zLrCpNxHf66lAMSf328KkK9kG2VPdZK2m9u8GABO+5Y=
Subject key identifier:   BD:59:0E:97:71:50:D7:98:46:C9:2E:2B:7B:06:7D:84:E7:9E:96:C1
Certificate issuer:       /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
Certificate serial:       727D297F985EF3322A4EE7098E8F96780DD0E137
Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa
Signing time:             Wed 10 Apr 2024 17:00:02 +0000
ROA not before:           Wed 10 Apr 2024 16:55:02 +0000
ROA not after:            Wed 09 Apr 2025 17:00:02 +0000
asID:                     137351
IP address blocks:        103.114.144.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl
                          rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7d:29:7f:98:5e:f3:32:2a:4e:e7:09:8e:8f:96:78:0d:d0:e1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681
        Validity
            Not Before: Apr 10 16:55:02 2024 GMT
            Not After : Apr  9 17:00:02 2025 GMT
        Subject: CN=BD590E977150D79846C92E2B7B067D84E79E96C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:87:07:36:9b:8f:db:55:52:62:7b:34:d3:
                    7b:8a:9a:7f:70:a6:0b:c5:36:a8:c7:e2:7b:69:ba:
                    0f:ec:2f:13:37:f2:b7:7e:ff:9a:3a:8a:c4:64:a8:
                    13:48:c6:e2:1c:07:d0:2d:59:a7:54:be:c8:f2:44:
                    67:e1:56:b2:cb:e8:54:f6:fa:cb:b2:74:98:3e:69:
                    94:69:86:5a:3f:09:63:c4:ec:29:2a:ec:f4:a0:5f:
                    41:9f:cd:1a:14:94:91:a5:9a:1e:00:f1:e3:e2:5c:
                    17:aa:ec:d5:06:d3:4c:0e:04:8b:71:57:92:c6:3e:
                    0c:81:a7:22:93:cb:e3:cb:60:37:20:73:21:06:b1:
                    76:06:d8:b3:42:a7:2b:dd:2b:85:87:c0:3d:3e:34:
                    96:c4:dd:37:01:16:b2:d6:9b:fe:a2:3d:9c:f2:76:
                    83:78:ff:9b:de:53:90:ef:6b:70:cc:8f:e2:0a:77:
                    1d:63:ce:39:26:f1:b0:98:b7:97:04:18:16:bf:1d:
                    32:e9:12:e2:65:51:14:f4:d1:83:83:ba:62:dd:db:
                    e3:e0:a0:58:b8:ec:73:61:71:81:23:a3:fe:12:aa:
                    22:8f:54:8e:f9:65:c2:fe:15:3b:d4:1f:88:f9:19:
                    d6:0d:0d:ae:bc:76:90:70:ec:ec:bb:91:d4:ca:f2:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:59:0E:97:71:50:D7:98:46:C9:2E:2B:7B:06:7D:84:E7:9E:96:C1
            X509v3 Authority Key Identifier:
                keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:32:13:d4:fb:ad:4c:25:21:fc:6a:92:71:20:4e:84:07:5e:
         56:0d:56:60:81:9e:0b:0d:36:b8:82:1a:7e:ad:3d:58:39:09:
         26:50:12:e5:cc:c2:99:3d:6f:77:5e:ba:f2:9b:36:8f:32:0f:
         01:54:b8:b5:62:81:b9:5f:70:97:98:f6:d6:59:96:2d:32:f6:
         3c:53:5b:14:fe:0b:8b:86:68:55:d0:6b:be:15:ac:82:8f:50:
         07:d2:28:25:9b:c4:e6:ab:8f:02:55:b1:39:14:53:aa:f1:c1:
         cd:05:60:a8:59:1f:c9:b2:b8:79:c2:bc:2f:ab:df:57:f2:3a:
         4a:0e:3e:4e:95:5a:6b:51:75:67:cb:f4:78:c2:82:5d:88:b7:
         37:21:21:9f:66:9a:46:d3:32:25:a2:d5:5f:6a:bf:63:c7:00:
         0f:e6:70:d5:3b:b2:63:19:fb:e4:b7:a9:4b:7b:b2:0d:f5:d2:
         4f:58:52:a8:7c:8a:ad:97:4f:a8:64:32:6b:73:38:24:b1:56:
         5d:05:bd:9b:51:b9:88:23:82:bb:6a:8e:36:17:44:fa:97:a4:
         84:21:cb:34:e2:6f:de:0c:4c:b1:aa:c6:c5:ac:30:ee:41:9f:
         46:8a:97:40:62:db:99:a2:e4:2f:d5:00:b5:69:48:f0:c8:40:
         34:53:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org