Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa
File:                     3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa (raw, json)
Hash identifier:          Roi7tFQ4rn/GCyTar7FYv/O+Ry9zgdEIG4iEuX2tMRU=
Subject key identifier:   B1:85:BB:96:EC:44:89:03:DD:84:06:3E:99:49:F0:27:A2:8A:7F:CE
Certificate issuer:       /CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
Certificate serial:       0A2042052F1D18A940D8532930D964CA6EDCE0BB
Authority key identifier: 3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa
Signing time:             Sat 15 Jul 2023 12:00:01 +0000
ROA not before:           Sat 15 Jul 2023 11:55:01 +0000
ROA not after:            Sat 13 Jul 2024 12:00:01 +0000
asID:                     136820
IP address blocks:        103.98.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl
                          rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:42:05:2f:1d:18:a9:40:d8:53:29:30:d9:64:ca:6e:dc:e0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2173CCE67F75D29F1CAAA739E6CC6727D6E088
        Validity
            Not Before: Jul 15 11:55:01 2023 GMT
            Not After : Jul 13 12:00:01 2024 GMT
        Subject: CN=B185BB96EC448903DD84063E9949F027A28A7FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2b:81:1c:94:fc:8d:85:8e:ce:f3:d0:ee:38:
                    41:d0:84:6b:a9:59:a1:67:bf:0a:df:0b:4a:42:0d:
                    d4:92:72:5c:a3:15:ad:c8:05:4c:c1:12:3b:27:ce:
                    a2:bb:33:5a:3a:57:1f:67:16:47:2c:33:91:e2:ba:
                    a2:5f:92:3d:ea:8c:cb:a7:14:40:e6:d2:72:d8:9e:
                    0d:30:b3:e2:33:3d:4a:82:b9:e6:a4:0b:45:20:f7:
                    6a:ae:98:19:e3:c6:ac:0c:2b:2a:be:72:9a:d6:e5:
                    10:22:88:b6:10:9f:ee:0c:5c:3d:99:48:f4:21:75:
                    89:0a:17:a8:ef:97:25:9b:97:81:b0:40:c0:6c:47:
                    04:a0:6d:98:87:8d:d6:b7:2f:4b:b1:fa:7e:e2:81:
                    e3:2c:f2:11:af:ac:5d:60:bc:c7:34:82:52:ca:49:
                    90:90:75:4b:c6:e1:98:ad:b5:5d:c9:5a:c9:ab:31:
                    d8:fd:a6:37:e1:36:92:c5:90:3a:99:9c:b0:65:56:
                    58:1f:cf:6e:f1:58:4e:31:b0:6f:e0:b9:a8:84:ae:
                    7d:28:c6:f2:bc:57:be:22:8b:7d:8d:b0:e2:98:1e:
                    1a:cd:f3:25:7c:92:0c:d6:bd:b0:0a:42:e5:2b:46:
                    37:b5:38:a8:54:d0:b2:22:24:65:20:c8:72:c2:b9:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:BB:96:EC:44:89:03:DD:84:06:3E:99:49:F0:27:A2:8A:7F:CE
            X509v3 Authority Key Identifier:
                keyid:3E:21:73:CC:E6:7F:75:D2:9F:1C:AA:A7:39:E6:CC:67:27:D6:E0:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E2173CCE67F75D29F1CAAA739E6CC6727D6E088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccd53948-ddf3-449a-bf2b-cf3f7ae176d3/0/3130332e39382e3131392e302f32342d3234203d3e20313336383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:68:d8:11:dd:a8:30:93:ce:e0:08:c4:1a:40:d9:85:4c:
         d7:7c:4f:c5:60:98:2d:b1:c8:81:c4:39:79:da:15:51:e5:c7:
         b7:7b:f8:1a:53:b1:2d:15:c1:a0:e6:b1:b4:c2:3e:e2:f5:a0:
         85:32:80:5c:32:0a:c7:0e:07:94:94:0b:de:67:60:04:0e:d9:
         34:73:de:23:cb:e4:38:58:39:49:95:3b:f9:86:d1:79:e1:08:
         29:1e:bc:1a:55:bf:bb:92:6f:d0:ae:93:0d:0b:fb:84:60:49:
         ce:fc:ac:11:dd:1e:69:a1:8a:f7:c5:3c:ae:ec:c9:c8:8e:53:
         aa:bd:c6:cc:c9:b0:a7:a6:02:06:09:f6:74:6f:db:9b:bd:07:
         93:15:96:af:bd:7d:49:bb:fe:99:e0:b1:43:1a:ee:a0:c4:d1:
         1b:6e:4e:bf:a5:0a:f6:f2:8f:4b:42:21:98:d3:4b:94:0a:24:
         91:48:7f:9e:b9:09:4d:e5:64:b3:d4:ac:f0:4d:61:e2:49:43:
         28:c1:ce:02:81:46:f3:08:48:48:6b:5b:be:12:28:dc:35:e3:
         98:ab:5a:bb:43:f1:ea:05:70:97:c8:3e:ac:45:3f:f3:56:60:
         0b:86:39:f4:24:91:94:85:75:32:7f:79:3d:74:91:64:da:3f:
         78:d1:e9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:22 2024 by rpki-client on console-fra.rpki-client.org