Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          sln2y1brjKOczFQIAz8CSR6ZbCHQFE48AeB+2G2MmEc=
Subject key identifier:   FD:06:C0:FB:C8:A9:3B:27:7F:9B:56:51:24:15:00:BA:3F:DA:EE:A3
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       3F6A86170D899B2072CFD60693EF7E1C847FD3D5
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
Signing time:             Fri 21 Jul 2023 02:00:01 +0000
ROA not before:           Fri 21 Jul 2023 01:55:01 +0000
ROA not after:            Fri 19 Jul 2024 02:00:01 +0000
asID:                     138089
IP address blocks:        103.131.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:86:17:0d:89:9b:20:72:cf:d6:06:93:ef:7e:1c:84:7f:d3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Jul 21 01:55:01 2023 GMT
            Not After : Jul 19 02:00:01 2024 GMT
        Subject: CN=FD06C0FBC8A93B277F9B5651241500BA3FDAEEA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:4f:79:57:b4:bb:93:b1:5c:d2:b6:46:2e:
                    cf:c7:35:e9:e7:e6:10:42:db:fd:9c:c8:92:01:0e:
                    ea:14:7b:4d:18:3b:82:78:0c:ee:a3:50:33:36:c1:
                    86:21:e8:57:05:71:2e:b5:74:2f:7b:a7:17:4a:84:
                    ac:3e:58:33:04:d2:61:75:aa:ef:83:6b:ce:0d:ec:
                    f2:a9:7a:a1:ca:5c:ac:bc:2a:76:53:18:33:e4:06:
                    3f:be:1c:c5:c6:a0:c7:c2:3e:d3:75:5a:42:a7:c4:
                    14:bf:c3:5f:8f:0a:8a:8d:f8:15:5e:6e:c2:e6:00:
                    9e:26:d6:8b:93:c3:6b:7b:fa:63:38:09:72:37:58:
                    ba:0b:d4:26:eb:1a:3d:d9:b8:97:7a:4f:30:a2:03:
                    01:32:46:fb:2f:b0:fa:ce:fd:8f:3d:b7:ec:07:a5:
                    ce:b6:b8:26:02:8e:f8:c1:8f:85:64:8c:df:ca:49:
                    62:33:05:42:df:c6:5d:86:54:6e:0b:3e:e0:da:c1:
                    ef:d3:5e:6f:25:46:3e:ad:0d:83:63:ac:e4:d6:0f:
                    ae:54:ee:35:7a:f3:f6:cf:22:6a:69:30:1b:ab:f6:
                    15:ba:4a:13:8b:28:59:b1:4b:10:31:cc:44:3f:1c:
                    cd:fa:7f:bb:34:66:dc:d3:91:82:c4:cf:4d:4c:6e:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:06:C0:FB:C8:A9:3B:27:7F:9B:56:51:24:15:00:BA:3F:DA:EE:A3
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:fd:24:cb:57:5b:3a:ef:99:94:d3:fe:c3:cf:d0:8a:14:59:
         19:5d:f1:27:be:73:a1:54:53:af:48:6c:24:e7:12:e9:4a:0f:
         88:bf:a3:35:ff:8a:53:e3:9d:24:b2:85:56:4f:e2:04:48:29:
         05:41:96:13:8e:a3:d1:37:34:67:c5:80:7d:ee:f7:8f:8c:f3:
         92:db:76:29:32:fe:ab:f5:5b:c6:9d:28:fd:33:97:32:df:ab:
         47:95:55:7d:34:b2:d0:fc:e8:85:b5:e6:f4:c6:29:81:1d:52:
         81:ba:ec:d1:5f:c4:42:93:fe:a4:38:05:91:c1:fc:5a:b7:19:
         6d:b5:13:73:d8:a8:d2:63:47:da:bf:f6:80:f7:12:64:53:df:
         01:b1:2a:2b:24:ca:f5:84:58:99:71:54:02:20:a3:b1:a4:12:
         d5:54:60:d2:27:1b:fb:2d:47:f8:96:ff:ee:89:95:d2:23:86:
         c4:38:f7:69:80:de:c3:e4:b2:08:f7:ba:44:1e:63:34:f2:d0:
         14:a3:12:58:bc:a7:8f:d8:18:ab:8a:1b:4e:35:89:61:65:9b:
         82:7a:75:e5:08:fe:db:ac:88:6b:1b:df:46:b4:40:3b:48:dc:
         f4:ea:1d:92:52:05:6a:64:29:93:c4:5a:bd:f8:3e:34:d3:84:
         15:c1:6b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:52:01 2024 by rpki-client on console-ams.rpki-client.org