Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa
File:                     3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa (raw, json)
Hash identifier:          KaIqoFGG6Z4Rr8vH9tZ57syVFGhgG/z8lSgxkhR6Tg4=
Subject key identifier:   F1:95:9D:85:0E:B8:A0:66:88:CE:A2:D5:1D:6C:7E:BC:C4:49:F6:DF
Certificate issuer:       /CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
Certificate serial:       1E317D833A7BBA089B54554D2C0911D752E985C5
Authority key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa
Signing time:             Sat 15 Jul 2023 09:00:42 +0000
ROA not before:           Sat 15 Jul 2023 08:55:42 +0000
ROA not after:            Sat 13 Jul 2024 09:00:42 +0000
asID:                     142366
IP address blocks:        103.170.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl
                          rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 09:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:7d:83:3a:7b:ba:08:9b:54:55:4d:2c:09:11:d7:52:e9:85:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C
        Validity
            Not Before: Jul 15 08:55:42 2023 GMT
            Not After : Jul 13 09:00:42 2024 GMT
        Subject: CN=F1959D850EB8A06688CEA2D51D6C7EBCC449F6DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:66:61:0b:ad:ea:1e:e8:ea:cc:cc:38:48:
                    ca:09:a5:e9:fe:cf:d9:b6:46:af:4c:e6:32:a1:e8:
                    d3:e9:88:89:cc:c7:75:ea:0d:26:6b:60:78:ef:e0:
                    98:d8:13:b1:12:4d:7b:fd:e6:cc:65:43:98:1e:c2:
                    28:00:1e:47:a2:a2:90:b0:1d:a7:d7:a9:83:5c:7c:
                    2a:d0:fc:d2:e0:35:fb:44:94:ed:5e:66:7d:5a:ea:
                    d9:44:45:5a:3d:51:ae:ed:c5:b6:93:1e:e1:4b:96:
                    e3:bb:9a:fb:19:34:d0:1c:e3:16:95:53:5f:e0:c9:
                    b0:75:c9:c7:82:5a:3d:92:3d:cc:e1:5c:61:4b:ce:
                    df:f4:7f:0e:2e:41:f5:e9:76:5e:32:a2:ec:e7:26:
                    79:b0:1a:aa:68:98:bc:f0:2a:35:36:6a:e6:5a:fe:
                    db:9b:87:ba:86:10:e3:f1:bf:1c:22:9f:fc:19:99:
                    48:86:4e:ec:1b:7c:c2:8a:7d:0c:44:8e:7a:a2:da:
                    ac:e6:ee:91:b0:10:5a:8f:dc:0b:16:75:04:7f:c4:
                    f8:b0:a8:1d:ed:22:fc:df:90:58:61:b6:9d:e8:80:
                    42:a7:35:37:46:07:6e:8c:09:5a:26:18:1e:e9:0a:
                    ac:9d:97:03:81:a6:52:9a:3e:d3:a1:2c:99:11:61:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:95:9D:85:0E:B8:A0:66:88:CE:A2:D5:1D:6C:7E:BC:C4:49:F6:DF
            X509v3 Authority Key Identifier:
                keyid:01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/3130332e3137302e33302e302f32332d3233203d3e20313432333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:cc:85:17:46:4a:ac:04:4b:7b:61:12:4b:93:20:23:57:60:
         ea:1f:dc:b2:49:3c:76:68:15:48:81:2f:6a:de:d1:7e:2d:5b:
         70:c6:4b:11:a7:3d:37:0a:5b:21:b8:49:bd:80:83:0c:14:4b:
         36:25:4a:b0:21:91:f5:f7:8f:10:8e:5b:5d:ec:a0:e9:b1:39:
         ad:15:fb:eb:4a:90:9c:38:5a:e5:76:fc:a1:27:69:1e:be:ad:
         3c:a9:c8:78:23:08:e8:bd:d6:97:e5:33:7b:97:a3:63:48:e0:
         7e:a5:e5:1d:36:84:f4:0e:d4:6a:55:e3:bb:69:1b:43:e9:20:
         83:4c:f0:d7:9e:0c:5d:f8:4d:ba:b4:ae:0b:eb:c6:bf:da:24:
         68:39:c6:74:11:e1:ff:21:d3:a7:2d:89:94:b1:43:68:a1:99:
         ee:f6:b8:9f:b2:93:f8:89:65:86:e1:0d:07:7d:db:0b:58:a5:
         62:ca:bf:3b:33:12:69:26:1b:54:04:90:22:1b:3a:45:17:2d:
         4f:c8:de:f2:93:7d:d7:8f:7b:af:fb:55:81:6f:0c:3c:5d:48:
         d5:73:22:32:fe:35:ec:e9:71:21:34:7b:82:c8:a8:9b:d4:10:
         12:16:de:83:da:cb:a5:b4:fd:4a:9b:87:79:58:8c:b6:d0:82:
         0f:c6:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org