Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa
File:                     3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa (raw, json)
Hash identifier:          9SqRFgAKSZtglj8SJMT6xDo8TLDgBaPNb3W5M5mh30o=
Subject key identifier:   41:10:56:98:C8:13:98:A1:A7:9A:FE:7F:FD:D7:25:7F:EE:70:D1:6B
Certificate issuer:       /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
Certificate serial:       081C147E66E943C48DFD8DFF33D522E4E2E5D8AA
Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa
Signing time:             Mon 31 Jul 2023 00:09:25 +0000
ROA not before:           Mon 31 Jul 2023 00:04:25 +0000
ROA not after:            Mon 29 Jul 2024 00:09:25 +0000
asID:                     135484
IP address blocks:        103.77.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl
                          rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1c:14:7e:66:e9:43:c4:8d:fd:8d:ff:33:d5:22:e4:e2:e5:d8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C
        Validity
            Not Before: Jul 31 00:04:25 2023 GMT
            Not After : Jul 29 00:09:25 2024 GMT
        Subject: CN=41105698C81398A1A79AFE7FFDD7257FEE70D16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:1c:ca:de:78:78:d6:64:f8:98:3b:b0:8a:
                    b5:98:32:98:2b:c2:e6:6c:e4:01:e4:24:cf:c1:44:
                    a0:bf:e6:4a:bb:02:f7:2e:85:be:ad:ac:07:3a:c0:
                    01:55:53:02:ef:71:1c:6e:f3:a9:d7:0d:75:c1:0f:
                    17:70:4f:b3:cd:0a:61:0d:4e:ba:69:1b:08:47:22:
                    01:29:85:1c:a7:d7:7b:0f:a2:c4:46:7b:c5:e0:ab:
                    52:81:73:27:00:dc:de:4d:c2:45:09:83:35:bb:88:
                    37:bf:5b:d4:5a:73:50:76:09:6f:36:a4:5b:e0:c2:
                    aa:b3:27:23:77:35:83:5a:a6:9f:30:79:21:d9:30:
                    6f:55:8a:b5:ba:ff:4b:95:41:69:ee:72:c4:ab:5b:
                    7d:67:ef:c3:57:04:80:7b:f5:8d:bf:23:41:51:4a:
                    0a:58:c3:eb:f2:b4:5a:41:dd:d0:93:3a:cb:95:7e:
                    10:67:99:f6:89:07:8a:83:a9:60:f3:d2:12:1f:d2:
                    6e:aa:1e:82:c6:8f:d7:ec:87:81:05:f6:34:43:e0:
                    0b:4b:ea:7d:5f:29:4c:b0:ba:5f:be:21:53:10:04:
                    1a:6a:e5:15:b8:93:ed:49:33:98:e5:0b:f5:50:54:
                    01:5d:2d:30:a5:2b:f3:43:dc:b1:8c:dd:04:19:71:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:10:56:98:C8:13:98:A1:A7:9A:FE:7F:FD:D7:25:7F:EE:70:D1:6B
            X509v3 Authority Key Identifier:
                keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/3130332e37372e3135362e302f32322d3234203d3e20313335343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:dc:63:55:2c:95:a3:33:bf:14:90:93:d9:9c:09:a0:d0:
         55:51:99:63:70:b2:da:cf:82:ea:17:d9:b0:65:20:be:ca:0a:
         9b:8a:9e:63:1a:5f:6d:56:92:61:4b:eb:0a:f8:00:1a:a0:32:
         05:12:bb:56:b7:38:8c:d1:e9:93:59:30:41:5c:ce:16:c5:e3:
         16:49:95:78:f4:bc:1f:97:a9:f3:98:6d:e6:ba:7e:59:9e:02:
         4e:4d:c3:2f:8c:8f:37:7d:1a:8d:56:c0:b0:35:2c:8f:01:ed:
         73:63:62:fe:4f:d3:e3:51:2c:f8:c4:c2:1c:c2:e2:c3:9a:f7:
         dc:1f:c7:b5:76:5a:d7:67:ab:5e:30:a9:40:f3:1c:a5:19:98:
         d9:a9:ae:74:39:66:83:e1:c1:01:48:f6:bd:fe:cf:be:de:20:
         b9:b7:68:67:bc:6b:ca:b4:9a:56:16:36:18:6d:81:d9:89:0d:
         26:2d:66:ac:d4:f4:08:0a:60:7a:01:9d:74:95:9a:9d:90:cb:
         35:19:77:a9:3d:fc:7f:f6:e8:61:54:c8:99:d2:dd:9d:18:3b:
         52:0f:d4:11:7d:9e:75:4a:0d:5f:64:d2:dc:17:03:43:dc:bc:
         8c:3d:d1:4f:db:99:45:7a:ea:0f:72:6f:a3:63:fb:c5:34:ef:
         2f:77:7a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:32 2024 by rpki-client on console-ams.rpki-client.org