Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
File:                     3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          o+iQ1dzg1cyz3kqMTGAF+JKJryBNJXgICEcDNzODm6I=
Subject key identifier:   6B:0D:76:38:21:10:97:B1:E3:16:64:72:12:89:B7:BB:F7:5C:61:94
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       78A68288778040FC543D7AFDD7C378D5FE9C4859
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 14 Jun 2024 06:00:01 +0000
ROA not before:           Fri 14 Jun 2024 05:55:01 +0000
ROA not after:            Fri 13 Jun 2025 06:00:01 +0000
asID:                     23679
IP address blocks:        103.103.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a6:82:88:77:80:40:fc:54:3d:7a:fd:d7:c3:78:d5:fe:9c:48:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jun 14 05:55:01 2024 GMT
            Not After : Jun 13 06:00:01 2025 GMT
        Subject: CN=6B0D7638211097B1E31664721289B7BBF75C6194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:19:39:01:31:b1:bf:b2:f8:a7:06:5f:4b:
                    02:74:75:44:32:a6:c8:17:6f:22:c0:7c:6c:28:27:
                    9d:2d:35:da:9c:15:61:ef:21:d3:34:ca:53:85:6b:
                    5e:c9:fe:8b:5a:60:a7:12:79:e3:11:d4:a6:9e:62:
                    5a:fe:c4:2f:8f:d3:75:38:73:f3:85:b9:32:40:3b:
                    13:81:80:b0:cb:5b:f4:44:67:b3:9f:aa:63:3d:00:
                    83:14:1c:e6:ef:b1:91:a5:36:3d:2d:59:d8:a8:68:
                    b7:98:6c:c3:73:98:78:b7:f7:25:18:78:17:2f:33:
                    c1:b5:0c:bc:1b:eb:88:45:9e:8e:be:57:be:07:0e:
                    e4:20:4d:9c:7c:d6:03:63:87:89:5c:b5:1f:d6:af:
                    3d:5f:e2:b4:7e:9f:49:cb:50:86:42:51:31:cb:ff:
                    67:0b:52:35:45:fd:73:c7:e8:83:fc:87:5d:d0:5d:
                    ac:cc:8d:b0:42:21:99:9b:ea:64:84:bc:b5:88:a8:
                    37:9d:e6:89:2f:84:fe:bd:15:09:a4:ef:86:aa:55:
                    c7:11:21:ae:3a:38:52:dc:b3:74:16:7a:c5:0a:c9:
                    2b:f2:df:6c:51:bf:67:45:8e:f0:14:69:8d:98:f8:
                    5b:17:27:7f:dc:a2:c1:1e:cb:7e:31:69:9c:94:ce:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0D:76:38:21:10:97:B1:E3:16:64:72:12:89:B7:BB:F7:5C:61:94
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:e4:0f:0d:61:c0:b8:d6:d7:8f:68:42:b7:e7:92:08:17:
         1b:73:91:9e:a9:3a:e5:56:af:77:96:1d:03:9d:d2:5c:f6:cd:
         11:31:5e:c0:54:b5:ff:12:76:e4:5d:ee:6c:30:ea:11:01:c3:
         65:5c:34:f3:f7:b5:17:da:18:a0:bb:be:fe:37:49:58:8b:6a:
         fa:c7:1b:8a:36:23:6b:b7:05:60:bf:27:d3:52:fb:27:c8:b4:
         f0:17:b8:d5:24:a4:71:97:80:8e:77:9f:9d:19:a5:30:cf:ab:
         c5:98:5d:a1:df:d2:a0:a2:fe:f3:03:62:77:47:ce:11:cf:eb:
         98:db:d6:28:7a:e3:74:7d:56:2d:8b:0f:de:0d:57:0c:1c:df:
         1e:ef:16:f9:aa:82:ba:e7:ae:64:91:4c:5a:83:75:9e:f3:39:
         bb:25:d1:fd:ef:a0:ec:da:2a:5f:8b:9d:f5:4d:1c:cf:cd:29:
         b9:ae:be:4d:71:56:c2:68:51:64:ef:8d:61:6d:41:23:58:e0:
         63:3f:20:04:d1:14:eb:f1:a4:db:a3:60:e4:89:82:81:1c:b7:
         f8:16:c2:87:3a:a7:ff:4b:2e:11:28:24:46:1b:15:22:5f:47:
         16:26:4b:b6:31:82:9a:29:e9:99:a7:2a:c7:df:51:d9:f2:3c:
         da:73:96:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org