Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa
File:                     3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa (raw, json)
Hash identifier:          57JdrG+xBkKf+bas4gtaeBfmv4s/pwVp4claa1W1f2U=
Subject key identifier:   EB:91:D2:2D:F4:39:2E:09:3E:34:48:2C:38:E6:A2:2C:92:78:25:EF
Certificate issuer:       /CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
Certificate serial:       1806EF5690CC8ED91E4A2AC39531D394F78B28C3
Authority key identifier: 39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa
Signing time:             Fri 25 Aug 2023 08:00:01 +0000
ROA not before:           Fri 25 Aug 2023 07:55:01 +0000
ROA not after:            Fri 23 Aug 2024 08:00:01 +0000
asID:                     136111
IP address blocks:        103.94.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl
                          rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 04:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:06:ef:56:90:cc:8e:d9:1e:4a:2a:c3:95:31:d3:94:f7:8b:28:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399315B18BA7D0DD666DCA8C3DBBE013575AF7D1
        Validity
            Not Before: Aug 25 07:55:01 2023 GMT
            Not After : Aug 23 08:00:01 2024 GMT
        Subject: CN=EB91D22DF4392E093E34482C38E6A22C927825EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:6a:55:1d:fc:ed:b6:e8:0f:2a:29:fa:73:
                    63:a8:9a:f8:90:ea:82:ef:ca:56:b9:21:aa:1c:dc:
                    1a:92:13:0d:5d:7e:26:df:73:44:cc:1c:4d:b2:63:
                    46:f4:dc:67:32:be:f4:d6:3d:cb:45:71:f4:e2:75:
                    e5:e4:c4:b4:69:66:a3:41:44:f0:13:98:ab:2a:24:
                    04:79:4b:18:46:c7:37:e1:96:a7:43:ae:01:c2:a3:
                    fe:20:97:ee:1f:85:e9:bf:4a:39:52:ba:23:79:58:
                    6a:e7:27:1b:63:cd:22:da:d0:07:94:3c:af:fb:e7:
                    60:d2:fc:dd:a6:10:b4:cb:c0:97:a7:51:71:fe:32:
                    72:f8:4d:a0:24:8c:ed:90:65:a7:cd:c6:08:db:b5:
                    5e:bd:7a:49:ce:17:fc:94:52:6a:0e:23:7d:9d:63:
                    c0:cf:05:e2:9c:a8:ef:53:50:31:25:69:63:d2:66:
                    39:fe:42:60:28:e3:7f:f3:82:3f:22:bc:41:b3:14:
                    ad:bb:85:16:f8:58:ff:f1:62:85:02:fb:c8:2c:51:
                    4a:93:53:b1:f3:80:06:fa:58:17:84:74:a1:6b:ea:
                    bf:53:08:46:d6:70:60:25:37:bb:4f:dd:04:78:60:
                    f6:93:a3:a1:1a:61:0e:7b:86:62:6d:f2:77:ca:9e:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:D2:2D:F4:39:2E:09:3E:34:48:2C:38:E6:A2:2C:92:78:25:EF
            X509v3 Authority Key Identifier:
                keyid:39:93:15:B1:8B:A7:D0:DD:66:6D:CA:8C:3D:BB:E0:13:57:5A:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399315B18BA7D0DD666DCA8C3DBBE013575AF7D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2f28879-4844-42de-b2d9-a9666de282ea/0/3130332e39342e3231332e302f32342d3234203d3e20313336313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:c7:43:d3:28:fd:b3:bc:2f:28:76:86:57:db:7b:93:13:
         4e:8c:28:46:ee:4f:5c:4c:73:56:d9:65:16:d9:1b:39:51:9e:
         2e:04:32:b9:72:80:26:e6:98:3a:1b:8e:da:44:6b:aa:2d:a8:
         69:5a:c5:eb:e9:61:56:f6:1d:d6:c4:f0:ad:ae:23:6a:bd:3c:
         b1:27:95:55:e0:38:f4:da:3e:06:8a:05:93:20:8e:89:ac:c7:
         5f:e5:81:f3:1c:10:e0:07:c1:0d:c5:80:ea:be:0f:94:4a:3f:
         ae:65:50:48:b1:1a:b2:2f:20:24:ad:ff:12:11:cf:28:1c:28:
         70:ad:cf:a4:01:c7:aa:71:d0:02:57:36:fb:a9:fd:f5:46:5d:
         09:bc:fb:95:3a:33:ff:12:e2:55:7d:a1:59:d1:8b:79:0a:e4:
         ef:30:85:e1:ff:4e:ed:10:35:d4:fb:f9:e7:6f:ce:f1:79:fc:
         4f:8a:33:02:67:ce:a7:15:08:87:a2:0a:54:d3:48:76:61:1c:
         1f:39:b3:ea:a7:8c:d6:4c:5f:45:2a:d4:c5:53:23:d0:7d:9d:
         2d:45:8d:96:2a:0b:49:20:ec:2a:4e:1e:62:13:96:62:fe:c9:
         a2:f8:cd:3d:6c:d7:7c:8b:75:97:fa:11:de:85:89:34:06:e0:
         74:a0:1b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 03:00:07 2024 by rpki-client on console-fra.rpki-client.org