Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          mJLB2tKLnYbB9zMLRYUfW0oiNzOSUGzCunMjTLsdgdw=
Subject key identifier:   E1:C4:E5:5A:BF:5F:37:6D:8B:BE:D2:DF:1D:4E:BE:52:57:7E:E8:B2
Certificate issuer:       /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
Certificate serial:       3A7C1AB22A41D8DE6AB667EF1A5ED962031E5C91
Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 28 Jun 2024 08:00:01 +0000
ROA not before:           Fri 28 Jun 2024 07:55:01 +0000
ROA not after:            Fri 27 Jun 2025 08:00:01 +0000
asID:                     9341
IP address blocks:        103.137.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl
                          rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7c:1a:b2:2a:41:d8:de:6a:b6:67:ef:1a:5e:d9:62:03:1e:5c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
        Validity
            Not Before: Jun 28 07:55:01 2024 GMT
            Not After : Jun 27 08:00:01 2025 GMT
        Subject: CN=E1C4E55ABF5F376D8BBED2DF1D4EBE52577EE8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:e7:63:3c:c8:a7:b7:7a:85:69:0d:69:25:
                    61:46:b3:ff:b4:89:6d:80:f3:6e:97:54:5e:9d:bd:
                    27:80:2f:11:a8:41:62:5c:69:bc:48:b4:08:2c:88:
                    5c:bf:5c:e6:22:c6:f8:97:18:44:6f:8c:c4:04:b5:
                    f8:92:c0:a7:40:f0:39:07:a0:ba:61:bc:e5:39:62:
                    6a:db:86:bd:85:b0:dc:d8:38:95:db:6a:bc:f3:af:
                    42:df:e5:f3:f2:cb:d1:ff:82:ae:cb:50:4b:dd:67:
                    ff:2a:fc:db:7e:d9:5e:ca:fa:51:87:d4:cd:12:7d:
                    76:f2:6f:45:4f:8c:e1:77:e8:7e:75:4f:e2:25:21:
                    0a:66:52:6d:09:b2:06:94:c6:32:a1:4f:65:17:38:
                    d3:26:7b:87:9c:4a:6e:d7:89:82:10:92:90:2d:cd:
                    a0:fc:a8:18:7a:97:3c:35:c7:11:f2:ac:b3:78:58:
                    13:4e:9b:3f:27:b4:90:76:69:01:a3:2b:66:3e:21:
                    18:c4:65:48:5f:11:c0:1f:98:de:7f:d7:d0:77:e3:
                    46:42:e3:c9:df:90:82:80:75:35:33:e5:61:9a:3c:
                    0f:40:e0:f1:f2:33:46:b7:e5:9d:95:68:9d:e6:7e:
                    0b:e4:ae:f9:23:ed:8d:7e:2c:8b:5e:a7:96:ff:90:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:E5:5A:BF:5F:37:6D:8B:BE:D2:DF:1D:4E:BE:52:57:7E:E8:B2
            X509v3 Authority Key Identifier:
                keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:86:70:02:b6:38:ee:8d:56:bb:e4:1a:43:8c:89:6c:3b:33:
         1e:6d:23:0d:d4:a0:85:1b:6b:5d:67:ec:20:8d:f5:9d:45:7d:
         ec:40:f2:a3:67:5d:69:4d:08:49:5a:02:21:c9:9a:12:62:9e:
         d5:83:19:8d:9f:ed:b5:e2:af:b6:32:48:b0:ca:01:74:0c:1d:
         c1:0a:a3:c8:fe:35:20:90:2b:2c:e6:88:4f:a0:02:b9:17:d3:
         83:a9:3f:35:3e:e1:a4:ee:6f:04:13:6e:6e:38:fc:9e:b5:f9:
         6e:16:fd:c7:d0:f7:b6:ff:2e:2c:7d:35:02:78:93:7a:57:90:
         99:6a:f4:db:3e:52:f6:25:43:51:87:82:11:e1:c5:30:64:e7:
         f6:25:85:ff:bf:be:eb:bf:1e:a2:f9:a6:38:b9:a4:fe:c0:18:
         05:7f:9b:e2:7a:1c:fa:1a:56:10:50:09:6e:75:5d:e8:20:0c:
         a7:ad:5e:a2:ae:c1:20:aa:3f:62:c3:87:86:f7:50:9c:5a:f9:
         08:cb:3b:bc:b6:78:1c:4b:5c:cc:ba:19:3b:47:ed:3e:d8:34:
         ed:c2:31:4e:10:33:ae:3d:ee:22:4d:23:5e:5c:26:3b:c7:c7:
         b3:ab:b4:68:a4:ee:21:a6:6f:fd:93:e8:d1:ad:8e:7d:06:1a:
         d5:d3:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org