Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa
File:                     3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (raw, json)
Hash identifier:          mdYIK7cYXtduzPFojnCLd4Q9s2upzV+l5bezceedf5k=
Subject key identifier:   80:5E:6B:48:53:0B:DE:35:32:5F:20:D3:FF:6A:70:68:A8:BC:B6:C6
Certificate issuer:       /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
Certificate serial:       4A11CA67823F0C53FC677C66C2E96B16FD79D250
Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa
Signing time:             Tue 02 Jan 2024 19:00:00 +0000
ROA not before:           Tue 02 Jan 2024 18:55:00 +0000
ROA not after:            Tue 31 Dec 2024 19:00:00 +0000
asID:                     147145
IP address blocks:        103.177.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl
                          rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:11:ca:67:82:3f:0c:53:fc:67:7c:66:c2:e9:6b:16:fd:79:d2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Validity
            Not Before: Jan  2 18:55:00 2024 GMT
            Not After : Dec 31 19:00:00 2024 GMT
        Subject: CN=805E6B48530BDE35325F20D3FF6A7068A8BCB6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:53:a2:1a:0d:ce:c9:d8:62:4a:a5:34:61:17:
                    e1:a6:34:25:74:89:69:0b:30:5d:f5:ee:50:50:84:
                    05:d5:ce:e0:05:ad:5d:23:52:b8:e2:6a:6b:93:72:
                    a7:fc:4e:1c:01:74:42:4d:0b:1f:3e:fd:0e:77:07:
                    c7:f7:75:fd:3b:cb:bb:e5:8c:c0:dc:0b:0b:89:f8:
                    f6:77:57:f6:d2:49:c2:ef:62:de:5c:ba:85:28:6c:
                    7e:e4:88:58:60:55:d2:c7:a1:e8:54:d5:f0:e1:1d:
                    90:5b:92:f0:db:b2:49:12:a2:15:97:b5:b6:ef:a9:
                    7e:20:45:b2:61:16:84:66:de:40:73:08:be:ae:eb:
                    a2:15:93:da:f9:60:82:f5:a4:ef:ed:52:d7:e7:63:
                    a1:b1:4e:7c:6a:dd:af:c8:b4:28:2a:c6:88:30:90:
                    de:74:36:a7:f4:60:50:d7:f3:ef:f6:d1:36:e6:76:
                    8e:f0:37:ba:1d:52:39:d1:d9:61:f6:d2:0b:21:e4:
                    e3:4d:43:a0:1c:03:76:0f:34:a9:44:27:b1:0f:0d:
                    7a:d2:cc:57:e0:70:9a:c3:5f:01:d9:7e:02:96:ba:
                    6b:b7:36:75:c2:11:01:0a:73:43:b1:14:ba:39:cc:
                    6a:fc:8b:82:dc:7f:b3:a0:9c:88:96:ee:57:d7:5c:
                    9a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:6B:48:53:0B:DE:35:32:5F:20:D3:FF:6A:70:68:A8:BC:B6:C6
            X509v3 Authority Key Identifier:
                keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:73:cf:78:a9:28:cf:0f:af:af:e3:09:7f:29:31:0b:77:
         ab:38:46:e6:86:13:92:51:be:0a:01:fb:e2:2d:4a:1b:56:44:
         39:1a:04:9d:05:51:9d:a5:7b:8b:4f:3f:c4:8e:58:4e:78:90:
         65:70:65:87:0c:b5:af:2d:b8:8b:42:b9:58:b4:34:fc:d3:e8:
         14:c2:af:89:b8:06:72:57:9c:54:db:11:76:0b:78:95:a4:56:
         98:47:57:e1:3d:72:89:5f:33:4a:d6:b9:6f:e9:e9:02:d5:91:
         0b:15:1b:b6:e5:3c:17:50:1d:b1:21:d3:6c:cd:74:1b:04:06:
         e4:ee:95:da:6b:a4:f2:6a:b1:93:33:68:8f:bb:6e:16:c6:61:
         b4:e1:d3:c5:fc:1c:c1:95:a4:81:b6:5b:58:ec:26:7d:95:eb:
         8f:dd:c1:a2:0f:f4:d9:d2:9f:0a:23:70:6e:1a:d6:38:f3:8c:
         26:7c:7f:27:73:73:36:72:e3:6d:7d:f9:54:a9:15:c1:77:d5:
         70:ba:e7:ba:6a:bf:c3:9b:12:d9:bb:17:7a:3f:d5:51:3e:14:
         15:8b:87:91:5e:8f:38:33:c3:2e:20:57:a0:62:a9:10:7d:89:
         07:34:39:b1:cf:f0:ce:22:e2:76:a7:fb:f9:45:3d:20:e8:c6:
         12:77:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org