Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa
File:                     3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa (raw, json)
Hash identifier:          hDB00TLneDpVkLNbe7aAfk3b6UUvF3I8dBjAf/SLFFI=
Subject key identifier:   5E:57:A3:BE:FA:53:DE:B5:47:A5:64:8C:30:D9:1F:51:09:19:37:E0
Certificate issuer:       /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
Certificate serial:       13C650C558B1C182259397B07AE39E5F3FD76256
Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa
Signing time:             Wed 07 Aug 2024 04:00:35 +0000
ROA not before:           Wed 07 Aug 2024 03:55:35 +0000
ROA not after:            Wed 06 Aug 2025 04:00:35 +0000
asID:                     136111
IP address blocks:        103.94.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl
                          rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c6:50:c5:58:b1:c1:82:25:93:97:b0:7a:e3:9e:5f:3f:d7:62:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
        Validity
            Not Before: Aug  7 03:55:35 2024 GMT
            Not After : Aug  6 04:00:35 2025 GMT
        Subject: CN=5E57A3BEFA53DEB547A5648C30D91F51091937E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:32:bb:49:4b:45:fd:0c:f5:de:ae:a8:e5:
                    78:0f:7c:8a:f9:25:51:61:7d:2a:33:0b:2a:20:5a:
                    c4:dd:44:76:9e:48:bf:5d:44:87:bb:fb:1e:11:b3:
                    ae:ce:75:b0:af:73:07:c5:c4:32:96:f8:16:da:9a:
                    36:51:be:40:f4:f2:a4:e7:4e:15:ff:97:e0:10:48:
                    94:5b:24:cd:24:5a:96:81:bd:e5:aa:bf:15:21:a4:
                    46:80:90:1c:60:35:ef:ad:7f:c8:dd:f0:3d:a3:3a:
                    e2:13:5c:1a:3c:d9:6d:02:00:8c:80:0a:5d:39:11:
                    3f:5e:21:92:fa:13:1a:f9:18:be:78:c4:59:a7:b3:
                    72:7f:69:15:75:24:b9:b8:a3:db:a9:b6:cc:0f:6b:
                    5d:fd:7d:31:6d:ef:bc:fd:ba:4f:b6:58:93:43:12:
                    38:3e:ca:c2:1f:bf:0c:ea:be:04:47:8b:ee:1a:3e:
                    e1:a3:33:c5:14:04:8b:0b:ac:c9:4a:2a:83:51:20:
                    2f:14:09:2c:05:e2:58:bc:3c:bd:17:b3:c0:3b:5e:
                    dd:e7:81:f9:1e:80:8c:96:84:f3:c7:59:87:65:37:
                    fe:6b:f3:52:3e:be:f9:29:d1:79:54:a3:a6:ae:85:
                    af:1d:a0:d3:93:38:07:23:0e:94:94:f3:3d:f0:bb:
                    1a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:57:A3:BE:FA:53:DE:B5:47:A5:64:8C:30:D9:1F:51:09:19:37:E0
            X509v3 Authority Key Identifier:
                keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231322e302f32332d3233203d3e20313336313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:b1:5b:8d:90:bd:63:1f:23:ce:76:55:91:8f:46:02:9c:
         5a:5e:d2:f1:ef:80:dc:1e:70:f8:19:93:b2:f2:c5:5f:5a:ff:
         85:32:a7:03:41:f6:12:fa:0a:38:70:b1:5b:56:5c:88:cd:65:
         e1:fb:dc:e8:6f:67:81:84:d8:6d:ad:db:44:95:c2:52:14:a8:
         61:59:6a:fb:1b:b8:2a:ec:61:68:30:e2:d5:a9:52:68:a6:96:
         6e:ec:89:a7:82:15:44:d5:d5:dd:dc:06:dc:df:f8:27:aa:cb:
         4a:7b:13:a6:ff:1c:71:ca:20:50:42:73:52:b0:50:d9:4e:aa:
         0e:05:84:07:51:14:8a:4c:2c:66:9a:37:65:95:ee:50:4d:29:
         22:65:b0:e6:fd:40:9b:aa:7f:48:83:51:43:16:c1:52:6c:24:
         c0:41:82:78:c8:9a:15:9d:1d:45:ac:3f:08:fc:38:78:79:30:
         35:e2:b3:af:d1:c0:b8:e4:d3:18:10:c8:b1:2f:6c:ee:60:97:
         81:39:6e:43:8c:ca:92:76:ee:14:ae:dc:ce:eb:e9:73:84:18:
         a7:eb:f8:26:bb:4f:ef:a5:40:bb:9f:18:99:00:ec:a9:f1:e3:
         3b:b3:23:9f:b1:e7:54:1e:56:f0:00:b4:a8:a9:a0:72:e7:d4:
         c7:d2:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org