Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
File:                     3130332e342e38302e302f32332d3233203d3e20313530323034.roa (raw, json)
Hash identifier:          BmGcVFHSR1oJ3mXq4NBN+6yPqZz7+edU+gYk10iiMqc=
Subject key identifier:   F0:5C:A4:3D:E6:20:36:87:4A:55:57:E0:33:75:46:96:65:3D:99:59
Certificate issuer:       /CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
Certificate serial:       7D6532FBEB0BAAE89D798F7E2DA7C7F3BB7BCEF2
Authority key identifier: 0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa
Signing time:             Tue 20 Feb 2024 07:00:00 +0000
ROA not before:           Tue 20 Feb 2024 06:55:00 +0000
ROA not after:            Tue 18 Feb 2025 07:00:00 +0000
asID:                     150204
IP address blocks:        103.4.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl
                          rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:65:32:fb:eb:0b:aa:e8:9d:79:8f:7e:2d:a7:c7:f3:bb:7b:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E
        Validity
            Not Before: Feb 20 06:55:00 2024 GMT
            Not After : Feb 18 07:00:00 2025 GMT
        Subject: CN=F05CA43DE62036874A5557E033754696653D9959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ed:fe:66:6b:a4:74:1b:3f:1f:56:4d:fe:93:
                    c1:d9:7e:fa:b9:68:80:9f:7e:01:c7:48:6e:e1:5f:
                    4b:e8:01:44:f0:94:c2:1b:74:bf:20:f6:3b:4c:e7:
                    6b:25:36:e7:73:99:58:77:c8:93:3c:98:2c:37:43:
                    bc:8b:49:83:02:d7:54:32:0e:ff:37:c1:8b:b6:b0:
                    0f:6b:56:d2:6b:43:ac:4b:3f:aa:c5:23:e7:9f:29:
                    5d:d2:9d:37:a3:e6:f9:53:c3:2d:f7:0e:e0:c7:3b:
                    ea:f4:f7:97:33:f7:ab:18:00:43:f6:6f:40:da:55:
                    fd:65:f1:37:be:ba:c0:b9:23:58:9b:cd:a4:03:88:
                    7f:e6:88:6a:97:e9:66:ee:55:4f:83:0b:c2:00:3a:
                    ba:0c:b9:82:80:86:bb:a3:29:ac:d9:da:a1:6d:6d:
                    be:b3:9f:f9:58:ca:fa:37:23:93:89:91:90:98:3d:
                    a1:22:4b:1a:68:60:61:fe:f4:8a:ea:92:e1:4b:dd:
                    89:17:39:4b:0a:4b:cf:48:75:b7:05:9e:95:81:ce:
                    7e:75:ed:30:df:86:88:ec:84:5e:c6:fe:7c:de:5a:
                    22:9a:d8:c4:d1:28:59:24:a7:c6:f7:4d:8f:b4:a5:
                    b0:56:3e:a6:ae:aa:d4:78:35:3d:70:02:b7:a5:c6:
                    19:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:A4:3D:E6:20:36:87:4A:55:57:E0:33:75:46:96:65:3D:99:59
            X509v3 Authority Key Identifier:
                keyid:0E:2E:7A:9C:F1:1C:69:2E:C8:E5:6F:03:52:7B:DF:92:FA:00:1A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E2E7A9CF11C692EC8E56F03527BDF92FA001A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/3130332e342e38302e302f32332d3233203d3e20313530323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:fb:9f:67:bc:04:1a:0e:37:e5:1b:b0:ba:4f:2f:dd:1f:f1:
         1e:4e:cf:76:70:80:e9:8f:39:02:c7:9e:33:5a:ae:3b:81:b8:
         2b:b5:76:ff:0e:be:e0:19:96:7d:e0:f9:8b:a2:87:1e:3a:45:
         9d:96:bc:ed:84:3b:30:ed:b7:c8:54:7b:f7:c8:37:9f:45:3b:
         4f:04:69:db:21:fe:1a:eb:2d:bc:16:0c:ec:b5:22:80:9d:b7:
         33:ad:a6:14:eb:45:02:32:1f:c9:2d:f4:96:dd:0d:fe:29:54:
         4c:60:9e:11:7c:2c:07:03:6a:1b:9e:c9:77:af:ca:de:44:41:
         9a:60:b0:75:d6:10:79:6e:a6:36:fa:3b:1c:bc:5b:08:39:4d:
         c4:df:b4:6d:bf:d2:38:d5:05:46:ea:ba:a8:4e:0a:99:f9:71:
         10:ef:d4:2d:5b:e8:7e:ff:1a:e6:04:47:1b:d1:4e:28:97:0e:
         fa:fb:4c:89:07:dd:95:af:89:92:bf:79:2a:d2:a5:ad:91:08:
         7f:1b:66:39:12:90:5a:b3:97:2b:cf:f9:c8:27:7b:59:9a:c9:
         53:6f:fb:07:13:8a:02:ca:eb:ae:24:af:f6:92:bb:1d:20:b6:
         d7:01:8a:71:ee:49:5b:97:c8:34:06:f0:b7:e1:fa:08:57:87:
         f5:13:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org