Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
File:                     3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (raw, json)
Hash identifier:          npoy3cAqaGQT3/56tohle7c3xZWB2NxuHHagwsky4rY=
Subject key identifier:   FA:95:F4:F9:03:FC:57:A3:4D:3C:7B:7E:E9:83:3B:1A:A6:36:12:5C
Certificate issuer:       /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial:       42F614D6730E1FCF2D3521BBE63D2D279EAE1FC7
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
Signing time:             Fri 14 Jul 2023 13:00:02 +0000
ROA not before:           Fri 14 Jul 2023 12:55:02 +0000
ROA not after:            Fri 12 Jul 2024 13:00:02 +0000
asID:                     149318
IP address blocks:        103.178.84.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
                          rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:14:d6:73:0e:1f:cf:2d:35:21:bb:e6:3d:2d:27:9e:ae:1f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
        Validity
            Not Before: Jul 14 12:55:02 2023 GMT
            Not After : Jul 12 13:00:02 2024 GMT
        Subject: CN=FA95F4F903FC57A34D3C7B7EE9833B1AA636125C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:16:29:92:d5:28:1d:1b:92:36:09:56:26:
                    d5:5d:3b:9f:6a:63:5d:e3:08:0f:84:5b:1c:cd:35:
                    2a:bf:45:89:33:d8:e9:6e:17:e1:da:85:1d:0f:57:
                    02:07:88:ba:94:52:94:56:a6:fb:52:3e:4d:fa:47:
                    63:b6:31:12:66:81:79:da:90:9d:8b:08:ea:78:8c:
                    87:4d:33:cd:ea:e7:2c:fd:5b:ae:92:a9:aa:1f:f4:
                    26:2d:62:12:0c:e2:da:b8:f2:c5:94:ce:07:9d:83:
                    f1:5b:17:c5:99:14:38:48:9b:d7:34:95:00:c8:4a:
                    e6:10:20:c2:d5:9d:9c:db:b1:05:86:d6:06:d3:37:
                    55:b8:5e:20:99:10:15:84:9d:23:28:43:b6:be:35:
                    c7:65:65:92:48:b5:cc:f6:dc:3e:67:55:17:93:de:
                    9d:80:8e:a4:9a:ad:bd:9c:0d:7b:b1:ac:7d:f1:15:
                    97:44:51:11:16:47:88:72:6c:9f:61:3f:bc:0a:dc:
                    87:24:1c:36:7c:93:33:93:51:77:a8:fe:f8:d2:d5:
                    63:b1:88:41:39:4b:81:ea:57:78:d6:dd:4c:71:76:
                    52:af:d2:56:25:ca:f4:d1:a2:b0:9c:8c:35:6a:f6:
                    6e:7e:83:da:34:a3:68:85:a6:3f:ac:0e:dc:eb:71:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:95:F4:F9:03:FC:57:A3:4D:3C:7B:7E:E9:83:3B:1A:A6:36:12:5C
            X509v3 Authority Key Identifier:
                keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:72:61:3f:9f:ad:58:b5:6c:92:1f:da:b3:60:05:64:c6:51:
         70:76:b6:a2:99:bc:14:f1:55:7a:94:3c:20:80:88:b6:45:c8:
         51:69:51:39:71:e0:a5:3c:59:29:80:d2:c9:dd:45:aa:0d:3e:
         23:47:6d:23:ee:c1:37:de:8d:d9:90:e5:48:b9:54:64:78:d1:
         40:8a:cb:ac:a7:b0:a3:30:d0:dc:96:6a:5a:bd:f6:11:6b:35:
         27:49:0f:06:e1:f7:62:db:ef:dc:f4:09:cd:d4:28:76:bd:0e:
         3d:12:1d:ec:57:8d:0c:c5:3b:7d:84:34:5a:65:43:28:4a:94:
         82:69:89:c0:fc:20:cd:6a:16:38:24:2f:63:8d:a5:b2:3c:f3:
         b8:34:8b:f9:fa:0d:1b:06:81:60:fb:cf:aa:09:b3:92:33:b5:
         64:8b:35:6a:d3:27:85:08:55:65:c3:7f:92:78:eb:13:20:ff:
         57:ee:9e:73:8a:e0:0e:95:04:98:83:06:6b:b3:78:57:b8:03:
         90:12:63:89:c6:14:d6:ed:b1:d6:34:83:5c:88:9b:01:2a:36:
         74:34:63:a1:4b:a3:e5:3c:b4:b5:af:c9:24:39:8e:db:9d:1b:
         36:63:b2:28:dc:b5:c6:e6:68:ea:bc:2a:a8:6d:d4:10:3f:76:
         43:d7:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org