Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
File:                     3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (raw, json)
Hash identifier:          Nnj8KTcoEReTLw1P68EAB/1cFuKKJhBcLhOnp9fxKLc=
Subject key identifier:   FD:89:F6:98:78:A8:DE:B3:A1:49:31:D2:BF:06:17:76:7D:24:53:61
Certificate issuer:       /CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
Certificate serial:       0C7062D6D2E4C2ECAED4D16EDA2DF1393BA10B48
Authority key identifier: B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa
Signing time:             Thu 16 May 2024 10:48:52 +0000
ROA not before:           Thu 16 May 2024 10:43:52 +0000
ROA not after:            Thu 15 May 2025 10:48:52 +0000
asID:                     151599
IP address blocks:        103.7.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl
                          rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jul 2024 00:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:70:62:d6:d2:e4:c2:ec:ae:d4:d1:6e:da:2d:f1:39:3b:a1:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6
        Validity
            Not Before: May 16 10:43:52 2024 GMT
            Not After : May 15 10:48:52 2025 GMT
        Subject: CN=FD89F69878A8DEB3A14931D2BF0617767D245361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:5a:07:5d:7e:72:08:35:bc:69:dc:15:c7:
                    30:af:96:63:90:e9:dd:b2:0f:cf:c1:d4:ca:a4:4d:
                    de:4f:f3:c3:c1:fb:c5:6e:8d:a7:c0:dd:1a:cd:32:
                    c8:5d:c0:67:27:c3:01:6c:74:32:46:e9:af:5a:8a:
                    2e:5f:af:f0:61:1c:a2:03:35:2d:41:c9:49:5d:cb:
                    9c:6a:5a:49:a9:22:34:e7:a3:99:72:26:18:ee:4d:
                    8a:54:08:61:3d:a2:76:7b:6a:90:3b:ef:09:39:e0:
                    e8:51:94:57:a0:10:2a:4f:ae:71:10:92:92:0d:82:
                    1d:29:17:e2:52:9f:51:f8:62:de:5f:e7:1a:5e:8a:
                    be:8f:6a:85:7a:82:75:70:8e:1b:fb:ff:29:1e:95:
                    ef:6d:9c:b6:10:96:6d:7b:4a:db:8d:89:ab:37:d3:
                    17:51:7c:5b:8f:9c:21:66:1d:38:63:29:a8:fb:25:
                    5e:50:c4:fb:23:22:d8:7f:ec:bc:7e:28:73:90:76:
                    f8:a2:f4:b6:46:72:bf:24:c7:f3:07:6a:bc:bc:b7:
                    bb:2c:15:c3:84:d7:cf:cf:10:3e:68:57:0e:9c:f7:
                    85:11:4b:39:f8:7d:66:df:4c:11:9e:63:bb:6e:96:
                    9c:39:7a:a9:a7:32:a2:14:3d:94:56:37:5d:e4:f4:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:89:F6:98:78:A8:DE:B3:A1:49:31:D2:BF:06:17:76:7D:24:53:61
            X509v3 Authority Key Identifier:
                keyid:B1:78:40:2B:ED:E3:EC:5A:5E:E2:E0:E7:1F:73:6A:13:60:C0:6A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B178402BEDE3EC5A5EE2E0E71F736A1360C06AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/3130332e372e3130362e302f32332d3233203d3e20313531353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:4a:37:30:9e:46:a1:04:f7:c2:85:0f:c8:49:59:00:09:
         7f:d8:c6:08:a0:84:47:79:f1:42:d0:1d:a4:4c:f6:51:f9:74:
         35:f6:ed:da:cf:ff:52:a0:36:e9:aa:19:18:2d:62:a1:90:cd:
         37:96:0c:5b:c2:c2:ae:60:09:45:42:b0:15:a6:85:a6:55:35:
         31:f8:5f:73:6d:22:b1:f6:3a:5f:81:cb:1d:c1:09:cf:b3:e3:
         d8:f5:e6:e5:85:ec:b6:a4:dd:1d:ba:33:26:64:6c:b4:f6:9a:
         c6:9e:6d:fa:2b:a3:25:0f:d5:e2:ca:6d:0e:14:b1:74:8b:a6:
         d0:91:78:ed:24:e4:a2:be:eb:2d:e0:b6:ba:ff:cd:db:12:61:
         a0:f7:ae:d3:c7:b0:82:45:c1:77:1e:db:93:ca:ab:4f:5d:e5:
         c0:dc:07:c6:01:2c:20:95:bf:ae:eb:dc:d4:9e:6a:64:99:93:
         c4:37:be:de:c4:87:37:0c:d4:6f:4e:98:49:a5:c4:68:02:f7:
         d3:6d:50:81:19:f3:2a:b5:b7:bf:c6:e4:29:cc:4d:5a:81:be:
         bf:9a:81:de:93:5c:bd:0b:77:f8:09:37:c4:2a:de:da:35:1b:
         d3:65:dd:52:e5:f7:05:0c:5c:70:8d:6e:64:7b:f9:2a:25:c7:
         68:07:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:18:47 2024 by rpki-client on console-ams.rpki-client.org