Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          WFffJOCgH0Y3J50qixxNuMVx5r75z/Uvc+pFqrxFBpg=
Subject key identifier:   73:E0:C1:F9:82:33:8A:E9:83:3D:E5:18:4C:6F:10:E2:A0:C0:55:22
Certificate issuer:       /CN=B70932ED6C688D58897E32E1D5C990B20910FF02
Certificate serial:       6C385A337C001692CF256A55962F8D77EB4F1923
Authority key identifier: B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 09:01:54 +0000
ROA not before:           Wed 03 Jan 2024 08:56:54 +0000
ROA not after:            Wed 01 Jan 2025 09:01:54 +0000
asID:                     135478
IP address blocks:        103.129.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl
                          rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:38:5a:33:7c:00:16:92:cf:25:6a:55:96:2f:8d:77:eb:4f:19:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70932ED6C688D58897E32E1D5C990B20910FF02
        Validity
            Not Before: Jan  3 08:56:54 2024 GMT
            Not After : Jan  1 09:01:54 2025 GMT
        Subject: CN=73E0C1F982338AE9833DE5184C6F10E2A0C05522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:6e:1a:b8:b2:e8:78:cf:da:0b:24:ff:0d:
                    93:19:6d:45:c0:d0:02:2e:ff:84:19:35:2b:28:99:
                    99:30:65:cf:87:7e:c5:4f:0c:15:29:5d:b0:d4:8e:
                    a5:6d:0f:f3:00:ee:ea:fd:38:97:9b:81:25:39:ce:
                    e2:b2:a0:db:e2:5f:d5:c0:23:5e:fc:d6:13:fc:9f:
                    be:c8:86:2d:b3:3a:b0:13:e2:36:40:b3:70:1a:2a:
                    08:98:07:aa:47:79:e7:76:bb:7c:88:54:ae:4d:63:
                    a2:28:a1:73:cb:3d:ec:d7:44:41:10:ed:4e:50:88:
                    34:9c:f5:09:4c:98:90:2a:c1:f2:38:f4:61:f2:92:
                    57:fc:81:0a:fe:51:35:45:11:2d:84:d3:7a:48:cd:
                    93:9a:3d:59:08:f4:92:22:95:e1:e9:d8:24:57:d4:
                    e8:af:1b:af:7c:b5:79:59:f0:e8:ed:2d:d7:46:be:
                    66:79:3d:b9:60:b9:5b:7b:5b:72:26:b2:33:60:46:
                    0a:56:88:d5:dd:cc:a0:1e:ec:5b:ea:de:8c:dd:2b:
                    82:2e:1a:d6:60:c7:be:35:d4:e2:d8:4e:4e:32:16:
                    4c:f0:ae:87:d3:b2:a0:71:49:8c:af:2f:01:44:b4:
                    f7:89:a4:8f:53:17:32:ed:5e:2c:1b:6a:ff:fd:79:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E0:C1:F9:82:33:8A:E9:83:3D:E5:18:4C:6F:10:E2:A0:C0:55:22
            X509v3 Authority Key Identifier:
                keyid:B7:09:32:ED:6C:68:8D:58:89:7E:32:E1:D5:C9:90:B2:09:10:FF:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/B70932ED6C688D58897E32E1D5C990B20910FF02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70932ED6C688D58897E32E1D5C990B20910FF02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a990da49-9862-41de-833e-b304f0c1ae57/0/3130332e3132392e34322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:35:dc:0f:fd:0c:fb:5c:4c:9d:f2:dc:76:4b:f8:4a:e3:35:
         82:39:3d:b6:f9:26:f3:97:7a:d2:ea:4c:fc:cd:a5:09:8c:4a:
         fd:0f:76:66:21:3c:94:3b:29:07:a7:c7:d0:80:c1:80:2a:88:
         a2:57:28:e4:46:58:e8:a2:48:8c:d5:be:ea:5c:e4:37:ce:a6:
         68:e2:68:83:8d:78:8c:cf:b6:a8:36:4f:8e:6c:d1:5a:94:e9:
         47:8d:3b:8f:7a:1c:47:27:a0:72:55:7a:1b:32:d9:5a:ee:6b:
         0d:70:40:19:87:2c:0a:ed:7a:0f:ab:5f:b7:4c:78:18:e0:a7:
         80:24:13:6a:e6:af:6c:c5:37:14:25:73:09:61:71:71:20:3d:
         cf:09:fa:87:81:9c:52:2f:ae:ee:ce:a8:80:77:55:d3:fc:e5:
         62:7d:00:f3:51:53:f7:56:57:59:31:55:77:a2:1f:9b:90:45:
         59:f4:4e:55:4e:19:d6:76:b1:5a:f4:99:3f:8f:ee:f0:59:f1:
         5c:3c:fa:9a:46:cd:8e:ea:44:16:bf:62:96:07:0d:64:5f:e3:
         a3:3d:a7:7a:4b:4b:32:db:08:05:b1:2e:e7:9c:9b:7b:5a:41:
         80:d1:7b:e8:cf:94:7d:a7:19:02:78:4e:f8:04:05:6e:29:4c:
         dc:12:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:50 2024 by rpki-client on console-ams.rpki-client.org