Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
File:                     3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa (raw, json)
Hash identifier:          pDwJl2yVtJWqgXT5qURlhMuIafsVcF7S/Rr8QKKPemU=
Subject key identifier:   0C:08:9C:C8:72:71:88:7C:38:61:CA:38:98:36:C4:B1:D1:CC:44:19
Certificate issuer:       /CN=6592459773B9BF90E892EF4DE9361A991482809F
Certificate serial:       117C4A926CDE6C9E11CC2F10C10EC0BC76237590
Authority key identifier: 65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa
Signing time:             Fri 07 Jun 2024 04:01:12 +0000
ROA not before:           Fri 07 Jun 2024 03:56:12 +0000
ROA not after:            Fri 06 Jun 2025 04:01:12 +0000
asID:                     150998
IP address blocks:        103.211.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl
                          rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7c:4a:92:6c:de:6c:9e:11:cc:2f:10:c1:0e:c0:bc:76:23:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6592459773B9BF90E892EF4DE9361A991482809F
        Validity
            Not Before: Jun  7 03:56:12 2024 GMT
            Not After : Jun  6 04:01:12 2025 GMT
        Subject: CN=0C089CC87271887C3861CA389836C4B1D1CC4419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a4:89:3f:58:c8:00:c6:c5:61:26:d6:5c:af:
                    c6:38:42:3c:d3:72:a1:9c:f2:6a:23:ba:e6:32:52:
                    d7:58:45:4c:26:72:a5:cb:07:08:6d:a4:06:01:50:
                    e0:8a:46:17:e8:84:36:02:ce:84:f5:a8:fe:4b:eb:
                    a7:dc:1f:07:31:97:23:98:73:61:0b:d8:a5:18:88:
                    76:24:0b:31:d4:6e:5f:63:6f:85:f6:52:eb:19:42:
                    2f:ed:e3:16:ae:99:b6:9b:ca:da:4b:22:df:15:b8:
                    f8:36:fa:01:ab:d1:5a:c1:3a:63:73:d6:1e:c1:00:
                    17:7d:59:67:e4:ec:a0:5b:ca:87:46:42:a3:33:ee:
                    b6:c9:10:16:97:4f:f7:bd:e0:8f:ab:01:58:5a:f2:
                    1b:d6:7b:cd:6a:ef:c2:78:3f:0b:fa:4c:4a:80:85:
                    4f:bd:be:c2:50:e9:93:c8:4d:74:e7:b7:32:7e:90:
                    8a:7e:3e:0a:da:be:1d:d7:41:d2:e9:1e:c8:4e:f9:
                    04:c7:e0:ea:af:3d:e6:7c:cb:9c:dd:83:17:42:c6:
                    d8:0b:0b:41:54:03:a8:7e:95:32:c5:32:28:48:3d:
                    51:2f:5a:a3:33:0f:a1:d2:5a:95:e1:bb:a3:6a:79:
                    46:3a:fe:7d:ec:ea:7b:66:08:86:aa:34:ee:f2:9e:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:9C:C8:72:71:88:7C:38:61:CA:38:98:36:C4:B1:D1:CC:44:19
            X509v3 Authority Key Identifier:
                keyid:65:92:45:97:73:B9:BF:90:E8:92:EF:4D:E9:36:1A:99:14:82:80:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/6592459773B9BF90E892EF4DE9361A991482809F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6592459773B9BF90E892EF4DE9361A991482809F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a878c062-b092-4025-9b68-bfeb9b65a5a0/0/3130332e3231312e3130372e302f32342d3234203d3e20313530393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:99:5b:28:8e:86:67:cc:95:9b:34:c7:8b:9a:0a:84:60:ff:
         eb:6a:ab:6b:e9:52:52:65:bd:55:52:5e:26:d1:88:bb:cb:9a:
         6e:1a:c7:79:fc:35:63:51:1e:a0:cc:9d:fa:2d:8c:94:1c:12:
         8a:b7:1a:ec:87:1d:bc:3f:b2:f3:a8:3e:a0:69:97:d3:1a:3b:
         71:cc:b3:7c:7c:8d:9e:29:f9:31:af:c0:24:e0:e0:cc:86:35:
         e7:d9:57:39:41:be:27:66:a9:96:70:38:12:89:a7:3b:ec:fb:
         20:b6:04:40:2a:1e:cd:d8:e2:19:1b:8c:5f:e2:78:5a:eb:e0:
         43:35:a7:5f:b6:c9:71:36:c0:ec:6d:4f:b9:3d:f9:70:28:90:
         3d:4b:93:d1:e4:07:64:da:72:85:9e:ab:ad:26:01:20:67:11:
         4f:21:a5:4a:b2:a4:3c:99:ba:8c:5d:17:5d:d4:28:e3:96:91:
         d0:40:86:1a:b5:b2:82:68:48:90:e0:f7:ed:a0:82:8f:6c:03:
         df:7f:e5:70:51:bc:e5:1b:5c:bc:de:ae:5f:73:ad:14:a8:ab:
         41:b2:b0:f5:b3:dc:59:3b:11:e7:1d:db:08:e0:12:83:37:98:
         15:10:cc:b5:0c:e5:ef:5e:d6:1b:80:3b:81:1f:66:84:f5:1e:
         51:d5:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 01:45:26 2024 by rpki-client on console-ams.rpki-client.org