Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
File:                     3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (raw, json)
Hash identifier:          0NisZLJnuZ0rPMP6L5OQkbS5KDDLOjk2KByJOynP/8Y=
Subject key identifier:   5C:15:33:37:86:73:59:38:E8:E9:20:AA:DC:F1:23:11:FC:13:F3:9F
Certificate issuer:       /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
Certificate serial:       7F88F765B0D28901C3591BA14FF7B82E5A43C462
Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
Signing time:             Fri 06 Oct 2023 09:00:00 +0000
ROA not before:           Fri 06 Oct 2023 08:55:00 +0000
ROA not after:            Fri 04 Oct 2024 09:00:00 +0000
asID:                     136821
IP address blocks:        103.27.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl
                          rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:88:f7:65:b0:d2:89:01:c3:59:1b:a1:4f:f7:b8:2e:5a:43:c4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0
        Validity
            Not Before: Oct  6 08:55:00 2023 GMT
            Not After : Oct  4 09:00:00 2024 GMT
        Subject: CN=5C15333786735938E8E920AADCF12311FC13F39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1d:f2:a8:14:43:7c:90:e2:23:a4:56:e6:d7:
                    47:cf:5a:05:a6:bc:76:b0:9c:18:fb:15:fb:d4:dd:
                    da:7d:22:e2:cf:9e:6e:fb:05:cd:99:fa:6d:0f:14:
                    a1:08:b4:ca:d6:c8:bd:20:67:c3:31:ff:d8:06:5d:
                    d2:a3:ed:1b:9c:1a:87:b2:03:76:ed:f3:1b:99:33:
                    f4:0d:ae:d5:51:79:cd:49:a0:4e:c9:34:32:f1:fd:
                    56:32:21:6d:12:e4:35:08:6b:a8:e6:0c:e9:a0:0f:
                    29:79:3b:93:2f:6f:67:1f:a0:5f:65:05:c9:58:5f:
                    87:6c:19:46:7e:b3:72:eb:de:47:1f:2f:76:d1:14:
                    c1:95:68:33:a0:3d:c5:a8:3d:65:eb:7f:f6:0c:17:
                    58:a9:b0:b3:e4:77:9a:17:c3:9c:bf:b8:56:80:a0:
                    cc:6d:01:fa:45:0a:57:6a:55:ee:be:82:6a:8b:25:
                    70:84:b6:78:b2:9a:04:33:61:76:72:96:06:b3:2f:
                    b2:38:01:3d:e6:d7:06:c4:10:e1:fa:62:16:b9:35:
                    1d:f9:d7:f4:d5:01:ee:2e:f8:08:ef:51:f3:ad:6b:
                    f0:03:3e:a6:59:ea:c2:a4:fe:3c:b0:a5:8a:15:b5:
                    fd:c6:8b:6c:87:12:af:10:2e:40:7e:7c:66:ea:94:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:33:37:86:73:59:38:E8:E9:20:AA:DC:F1:23:11:FC:13:F3:9F
            X509v3 Authority Key Identifier:
                keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:b6:d0:18:dd:81:73:0d:61:c4:6a:44:37:e9:df:49:14:ac:
         a1:d4:5f:c4:3d:34:87:30:22:df:0f:11:db:96:73:a3:5a:1a:
         a5:39:ed:6b:ab:4f:59:6f:e0:51:30:af:1f:86:b4:ce:1c:87:
         ea:bd:a5:18:d8:db:d7:e5:66:a1:ca:94:0f:79:56:35:26:fe:
         47:24:80:6a:1d:cc:b4:3e:ac:01:02:17:bc:83:7c:58:9b:fc:
         32:60:ee:2e:a2:d0:cf:5c:d4:6e:41:69:b6:20:01:a0:11:85:
         14:00:9e:e8:37:6c:f1:b7:f6:bf:4c:e4:57:be:84:e4:f9:3a:
         19:b6:d2:51:0e:2a:74:05:94:b3:74:fc:85:ea:e0:8e:f3:77:
         a1:b8:01:ec:90:7b:35:e3:4d:dd:a1:b8:75:dd:9c:52:7f:2f:
         c5:81:ff:46:c0:0c:aa:c1:6a:3b:c2:09:bd:dc:86:33:2e:64:
         e1:31:b5:35:a6:39:b9:62:29:b9:72:08:e6:97:15:1b:27:1e:
         16:81:4b:e1:21:09:59:b6:1e:7e:76:46:fc:54:20:d2:05:72:
         18:89:27:71:22:23:d1:72:ce:f3:1d:58:f9:ed:cb:52:da:ba:
         8d:e5:3f:6b:b3:b4:59:a3:a9:19:bb:1b:a7:1e:fa:26:dd:be:
         0d:d0:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 04:18:03 2024 by rpki-client on console-fra.rpki-client.org