Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa
File:                     3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (raw, json)
Hash identifier:          gyHvJiGPrCyRe6bWIbMNzP3jXe0J5XXRW8d1Cg5iP3c=
Subject key identifier:   90:79:8A:05:7A:D1:2C:F4:2D:99:8E:51:BD:4C:B2:52:A8:A7:53:91
Certificate issuer:       /CN=6DBEA32A7EE18535066521365EFB05C4148698C9
Certificate serial:       095F332D338BEC50E4321694E007EFAB03575501
Authority key identifier: 6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa
Signing time:             Mon 01 Jul 2024 01:03:56 +0000
ROA not before:           Mon 01 Jul 2024 00:58:56 +0000
ROA not after:            Mon 30 Jun 2025 01:03:56 +0000
asID:                     138829
IP address blocks:        103.137.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl
                          rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5f:33:2d:33:8b:ec:50:e4:32:16:94:e0:07:ef:ab:03:57:55:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DBEA32A7EE18535066521365EFB05C4148698C9
        Validity
            Not Before: Jul  1 00:58:56 2024 GMT
            Not After : Jun 30 01:03:56 2025 GMT
        Subject: CN=90798A057AD12CF42D998E51BD4CB252A8A75391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:29:c1:19:c4:d2:85:7c:43:e8:d3:dd:5c:
                    c8:fd:a3:b3:f1:07:33:54:1e:d1:f1:fe:ca:f8:4e:
                    82:22:4f:98:f5:d4:62:70:87:fc:9e:c8:15:9d:56:
                    94:2f:78:ce:45:e9:de:a3:5e:32:0b:56:2a:e8:d4:
                    a0:b9:cd:20:47:2d:e5:f4:6d:cd:f2:42:d9:db:a2:
                    10:f2:16:af:79:d0:f7:64:de:39:31:3b:63:0f:e8:
                    49:1f:26:d6:52:3b:c1:d0:6f:58:6e:63:fd:bc:f2:
                    0d:69:09:e1:e7:9b:c9:cc:b9:22:7e:0f:84:b0:f4:
                    99:8e:dc:66:1b:93:86:bc:0e:5d:26:d0:1d:4f:fb:
                    c9:a5:17:df:51:2e:5b:5a:88:c1:f2:6c:00:18:b0:
                    27:f2:78:1d:b1:3f:d4:16:02:2e:80:b1:d3:9f:fb:
                    ee:c4:1a:81:36:b2:bc:78:90:03:48:66:b4:ed:ab:
                    30:8c:e7:c3:0c:ba:4a:90:aa:af:a9:55:d5:c7:b2:
                    ed:76:02:cf:ca:a6:2c:3d:fa:7d:94:f8:91:c3:8e:
                    be:e1:a8:39:63:ca:39:21:85:cd:78:2e:44:b5:75:
                    be:14:51:43:50:be:5d:94:49:8c:6b:08:4f:8b:94:
                    22:30:9c:82:eb:30:c4:d8:bd:85:68:79:4a:d6:2d:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:79:8A:05:7A:D1:2C:F4:2D:99:8E:51:BD:4C:B2:52:A8:A7:53:91
            X509v3 Authority Key Identifier:
                keyid:6D:BE:A3:2A:7E:E1:85:35:06:65:21:36:5E:FB:05:C4:14:86:98:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/6DBEA32A7EE18535066521365EFB05C4148698C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBEA32A7EE18535066521365EFB05C4148698C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:92:b4:9b:7f:e9:50:86:59:d4:7d:ca:84:35:d7:12:46:
         fb:81:d0:7c:62:cb:31:da:54:63:e9:0f:6d:8c:f0:6b:ad:d5:
         67:0a:ec:09:21:0c:59:de:f6:cb:82:3a:82:86:b0:0d:2d:59:
         e5:71:70:2f:e8:5d:38:29:26:ce:9a:d2:cf:ae:39:87:e2:c8:
         19:87:05:12:4c:b0:08:63:ef:3e:b3:f7:e2:f3:ed:17:4f:2e:
         a2:e5:87:98:a5:8f:c5:b0:60:65:65:2d:21:81:ba:7b:67:ea:
         b5:70:5d:4e:58:15:da:fd:c6:17:f5:c7:86:8b:a5:52:8e:a2:
         8c:22:c6:4b:ec:c9:42:da:25:39:f1:52:81:6d:69:41:48:ea:
         44:43:b9:16:b4:75:2c:fe:02:d8:66:70:3d:15:e9:36:30:13:
         2a:4a:fa:57:d7:e8:e2:6c:09:ba:d1:ce:72:08:ad:ac:01:3a:
         f4:c1:0e:39:0d:c0:ed:d2:89:b3:34:bd:eb:1b:8b:d4:1f:3e:
         08:52:82:72:82:a2:aa:53:ed:69:19:cc:94:b1:ab:61:58:a7:
         dc:2a:31:16:82:3b:8e:9e:fc:62:91:98:08:e9:0a:1b:32:c4:
         14:3a:58:f5:7a:3e:71:e1:16:e8:8f:c3:fb:14:03:6a:4a:7c:
         0d:1e:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:21 2024 by rpki-client on console-fra.rpki-client.org