Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa
File:                     3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (raw, json)
Hash identifier:          QdWS7N9pLDoATwZDpnbq4kTn9k0xFQRh0bHWkeX9Y6I=
Subject key identifier:   DA:B3:36:0A:C7:6B:11:F3:A7:95:04:18:BE:D2:03:78:44:1A:D4:1B
Certificate issuer:       /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
Certificate serial:       518F348385F599EC88170C3F82DBF218AFF49E03
Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa
Signing time:             Wed 22 Nov 2023 08:00:01 +0000
ROA not before:           Wed 22 Nov 2023 07:55:01 +0000
ROA not after:            Wed 20 Nov 2024 08:00:01 +0000
asID:                     135450
IP address blocks:        103.77.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl
                          rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Jul 2024 17:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8f:34:83:85:f5:99:ec:88:17:0c:3f:82:db:f2:18:af:f4:9e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
        Validity
            Not Before: Nov 22 07:55:01 2023 GMT
            Not After : Nov 20 08:00:01 2024 GMT
        Subject: CN=DAB3360AC76B11F3A7950418BED20378441AD41B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:13:1b:af:71:09:a1:dc:c5:e9:fa:56:62:18:
                    ef:b8:aa:7c:65:95:2b:b9:b7:c1:bf:d1:89:21:d8:
                    a8:bc:34:d4:d8:91:5f:be:c7:3f:60:f3:69:a6:7b:
                    91:68:40:58:50:13:73:dd:6e:ac:da:d2:9c:a7:4d:
                    1b:96:65:0f:5d:f0:76:0d:86:2d:b9:8f:1e:4f:3a:
                    64:33:da:17:12:4a:7d:b6:80:ae:64:58:61:73:d8:
                    a1:2e:0f:be:7a:05:30:d6:d0:e7:7b:8d:1c:f3:98:
                    66:9d:ff:97:c2:06:65:36:c4:79:c3:a6:81:2d:c1:
                    c3:5d:10:03:46:4b:a6:b9:b1:01:7a:3e:10:83:61:
                    13:ce:53:f3:7f:dd:55:6e:d1:78:6f:d0:83:88:64:
                    12:07:2f:02:b4:8f:99:7b:95:b0:ee:9b:60:ec:4b:
                    b7:c8:44:be:b4:5c:c9:e2:ef:e7:7b:26:4a:cf:e4:
                    93:79:a0:ec:d0:03:a3:9b:99:18:27:36:c9:5e:82:
                    b4:0d:b2:bb:b1:c9:5b:ca:6a:13:7a:ce:3f:36:47:
                    75:05:ca:84:e9:d0:3b:6c:62:a9:f9:67:ec:76:a8:
                    f1:3b:17:af:96:d2:f7:cb:18:72:3c:62:23:26:d7:
                    36:3e:15:81:d9:f9:74:f3:93:72:bf:c6:7b:53:be:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B3:36:0A:C7:6B:11:F3:A7:95:04:18:BE:D2:03:78:44:1A:D4:1B
            X509v3 Authority Key Identifier:
                keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:67:b5:ed:01:36:cd:99:e1:2c:5c:af:45:a5:06:fa:d0:9f:
         fc:da:5e:43:e1:75:2c:6c:31:07:f5:90:59:a3:95:7d:66:40:
         57:91:7d:fa:e3:2d:87:df:ef:b3:06:c8:1d:6b:01:60:28:8d:
         87:fa:d1:9f:d6:0b:4e:f9:90:de:c5:35:88:71:ce:98:4b:f1:
         88:e6:ad:32:0c:29:00:74:35:ab:88:1e:eb:e8:a8:a9:67:bf:
         2a:33:56:4a:a9:a5:6d:a8:42:12:9d:75:a1:ac:74:ef:b1:bb:
         24:4e:a4:ac:a4:16:43:71:6f:49:4f:76:44:a2:d9:9a:3c:f8:
         be:ef:2a:23:de:3f:93:ce:d7:ec:30:20:c3:65:8e:f1:d5:41:
         0c:00:d4:2b:39:74:74:3a:d5:55:3a:0e:cd:aa:f5:a0:d9:33:
         7e:ea:b6:95:68:4e:f6:da:64:ff:06:7b:3b:17:52:2b:83:73:
         02:f8:93:2d:c1:d2:5a:0f:b3:7c:5e:cf:96:5e:86:47:4b:d9:
         24:21:eb:91:3b:78:19:d5:4d:ac:a8:48:4f:9d:95:ec:00:c3:
         7c:dd:01:81:c1:7f:e9:f0:0b:24:e3:af:73:ed:ae:72:b6:f7:
         90:25:ca:63:1e:e6:60:0b:6a:b2:e1:fb:12:b9:2c:78:ce:9a:
         b6:0d:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 14:06:25 2024 by rpki-client on console-ams.rpki-client.org