Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
File:                     3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          ymDn5uQSaStDSlWpMf+fpZ+9dnqak37pAmGd83foXBQ=
Subject key identifier:   1C:36:6C:92:AB:71:C2:2B:10:92:52:27:10:62:E2:69:DA:8A:E4:F5
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       4BDFD31A653FCA4310311557DE082E8CA9FCCECA
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
Signing time:             Mon 31 Jul 2023 00:09:42 +0000
ROA not before:           Mon 31 Jul 2023 00:04:42 +0000
ROA not after:            Mon 29 Jul 2024 00:09:42 +0000
asID:                     133803
IP address blocks:        103.147.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:df:d3:1a:65:3f:ca:43:10:31:15:57:de:08:2e:8c:a9:fc:ce:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jul 31 00:04:42 2023 GMT
            Not After : Jul 29 00:09:42 2024 GMT
        Subject: CN=1C366C92AB71C22B109252271062E269DA8AE4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:62:39:1d:0b:4c:60:12:cb:43:f3:2a:5d:a8:
                    10:c5:de:a2:33:87:66:0d:7c:c1:e5:10:ce:2a:d7:
                    a3:30:84:e6:60:12:43:3b:7a:3d:98:a5:ab:ab:5c:
                    2c:23:47:fe:23:a6:eb:67:30:80:3c:e1:83:4e:a8:
                    35:1e:a4:47:cb:8d:11:29:1a:e8:66:c1:38:78:cc:
                    ed:41:c0:8c:aa:c3:47:d8:c7:84:2f:0a:bc:fb:5a:
                    7a:57:04:99:52:fa:17:f2:fa:e9:c3:f1:25:db:13:
                    cd:d7:ec:4a:1c:89:da:2f:dc:66:c0:13:fa:34:07:
                    5d:5e:0d:65:5d:3f:5e:e4:ed:75:89:20:d1:10:ec:
                    82:4b:46:90:5d:49:70:91:79:58:47:89:99:17:9f:
                    d5:a7:a1:17:13:05:db:7c:53:fd:25:76:e9:dd:aa:
                    b2:89:d8:cf:4c:c9:8a:a5:de:7d:c3:60:4e:24:7d:
                    6f:5f:b2:54:53:4d:a5:c0:d4:96:1e:99:35:f2:b0:
                    bd:56:1b:85:8e:f0:22:c0:8c:38:90:37:77:e7:06:
                    46:15:42:4f:87:99:47:82:e0:0f:b3:46:da:2c:26:
                    be:88:16:b3:dd:2b:f8:83:2a:31:64:98:8f:67:87:
                    cd:0f:b5:e1:72:27:ac:d7:fb:f5:64:b3:72:a4:bf:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:6C:92:AB:71:C2:2B:10:92:52:27:10:62:E2:69:DA:8A:E4:F5
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:de:08:cf:b5:21:93:cd:27:9d:3e:59:71:8a:02:f8:41:3d:
         ab:95:53:ad:14:e2:03:81:3a:b9:04:65:05:0b:47:65:e2:17:
         87:c6:89:44:f0:00:61:67:3d:57:5d:25:e5:ed:6a:75:c4:e8:
         d4:93:8e:7f:d2:a1:11:fe:b4:c3:28:81:cb:27:fa:34:db:01:
         00:95:7c:dd:5c:fe:ef:a1:26:a0:a8:08:b3:cb:72:4b:ac:bc:
         0a:70:f2:ab:39:3b:88:5b:93:59:ab:fb:f3:57:18:be:1c:a0:
         90:5d:16:31:45:1e:c3:69:04:3f:50:9c:23:f7:a9:48:17:d3:
         c3:4d:ee:d5:d8:42:f3:3d:fa:dc:b8:c3:f7:b4:fb:23:9d:a1:
         81:df:61:ff:77:91:3e:56:f5:be:b1:c2:d4:6d:1a:13:2b:8c:
         ee:49:4b:a5:ab:04:1b:8a:f3:77:6f:dd:3a:14:77:82:5b:20:
         4b:d9:36:ce:0a:16:78:30:c2:20:41:fa:dc:1c:1a:8e:a0:aa:
         f2:6f:6f:64:0b:05:44:5e:2f:bc:c2:65:e8:fe:77:81:30:56:
         70:3b:71:36:88:68:a2:65:5e:01:6d:50:fa:87:f3:ce:51:5b:
         d0:69:4c:18:d4:d7:06:7a:76:07:64:07:ca:45:e7:95:70:dd:
         3a:eb:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:16 2024 by rpki-client on console-ams.rpki-client.org