Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
File:                     3130332e372e38342e302f32332d3234203d3e20313331363934.roa (raw, json)
Hash identifier:          QS2IjR8ld/rTaq6LAwubjQvcJcHaIkub14Cek2HhO7g=
Subject key identifier:   DC:05:AD:AA:67:98:76:7E:E3:05:AD:E1:11:F3:0B:27:CC:F0:4F:97
Certificate issuer:       /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
Certificate serial:       3FFEECEE4293A939BEDA5F9F0485A9669DAD5BD9
Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
Signing time:             Tue 12 Sep 2023 09:13:16 +0000
ROA not before:           Tue 12 Sep 2023 09:08:16 +0000
ROA not after:            Tue 10 Sep 2024 09:13:16 +0000
asID:                     131694
IP address blocks:        103.7.84.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl
                          rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:fe:ec:ee:42:93:a9:39:be:da:5f:9f:04:85:a9:66:9d:ad:5b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517
        Validity
            Not Before: Sep 12 09:08:16 2023 GMT
            Not After : Sep 10 09:13:16 2024 GMT
        Subject: CN=DC05ADAA6798767EE305ADE111F30B27CCF04F97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:6f:1f:64:de:d5:d7:33:23:76:36:93:98:
                    f8:a6:fe:27:bd:9d:72:4c:ec:40:8e:2e:c5:ec:0c:
                    71:dc:29:d6:4c:78:10:c0:46:21:a7:cb:3a:e2:27:
                    15:7e:5c:2a:c2:b9:d0:b1:2f:e4:29:ee:fa:b7:40:
                    75:f4:13:21:91:7e:c2:a4:82:8c:da:c7:4a:80:a5:
                    3a:6d:76:68:04:5e:1f:ec:c6:b7:37:93:81:19:29:
                    65:dd:c8:34:08:6d:c9:aa:88:cd:e2:9a:e4:28:77:
                    7d:fd:a6:8d:62:9d:3a:02:71:07:a5:87:77:b1:41:
                    d3:8f:18:fe:f2:39:11:83:25:f1:54:8a:be:0e:e1:
                    6e:eb:36:32:a7:cd:cb:31:46:17:73:04:12:b3:a4:
                    6a:5e:da:cc:7c:f8:6a:d8:bb:d5:6b:eb:b0:ce:9b:
                    a3:94:62:71:c6:b1:4d:47:c6:87:fc:c0:4d:0b:9d:
                    9d:9e:4a:57:43:43:1e:d4:c1:5a:2e:1c:49:e1:3e:
                    c5:a7:79:11:3f:c2:06:f9:cd:9d:bb:14:be:eb:d7:
                    93:5f:97:6f:8d:d4:ba:f2:e3:43:2e:b1:3b:43:27:
                    63:a8:e6:f1:b6:2e:63:39:86:fb:76:4a:03:c2:07:
                    73:f7:d8:a1:90:d4:76:b2:11:ef:cf:6e:c5:9e:df:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:AD:AA:67:98:76:7E:E3:05:AD:E1:11:F3:0B:27:CC:F0:4F:97
            X509v3 Authority Key Identifier:
                keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:63:52:ff:d3:77:33:57:61:31:18:35:97:59:16:f2:85:58:
         cc:fd:c0:6a:b5:4c:a8:8d:99:03:d8:12:e5:92:f5:43:c6:34:
         af:12:37:35:0e:af:8e:b1:27:af:c1:d7:bd:ce:92:da:a9:db:
         ad:7f:3a:4b:4b:76:5b:9d:68:bf:7d:cd:01:22:ee:e9:b7:40:
         50:be:f9:ae:81:6f:7a:41:66:16:98:9f:b2:c2:33:00:d7:17:
         ee:af:de:f0:f7:1a:a7:e5:fa:56:e9:a1:16:28:dc:6c:25:cd:
         6e:ed:07:b0:24:8a:ca:fc:20:4f:6e:3b:61:75:48:b4:34:9a:
         0c:1e:fe:71:ee:fb:a6:7f:a1:53:e7:93:ac:aa:b5:e6:f1:af:
         34:cb:da:ed:6d:bd:66:32:78:50:c4:61:4f:04:67:ae:a3:3e:
         d4:8e:66:0b:b8:01:98:44:08:0c:b0:ec:fd:70:b3:ea:d2:b1:
         e0:f4:6a:92:9f:5e:12:e8:6c:27:c1:7e:cd:17:54:c2:1d:ce:
         7b:b1:2d:66:30:bc:16:f0:f3:2d:c9:8d:8e:92:2f:f1:0f:25:
         90:52:8c:88:0a:b9:e9:ff:eb:ad:70:04:5a:3a:0e:1e:28:9b:
         9f:7a:7f:2e:18:2b:e7:de:ab:92:f5:9e:55:bc:06:4b:a4:87:
         b0:42:53:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org