Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa
File:                     3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (raw, json)
Hash identifier:          MTzKA92qgL7fITAowR9fXhaZsujZPsrHWpyZBMxIgJA=
Subject key identifier:   72:C5:88:51:94:D9:C6:CF:27:36:08:DA:A7:53:EC:8F:A4:32:96:B5
Certificate issuer:       /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
Certificate serial:       4CEF3E0144B574D6FC896A20EFD55DE9C75D0230
Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa
Signing time:             Mon 31 Jul 2023 00:04:01 +0000
ROA not before:           Sun 30 Jul 2023 23:59:01 +0000
ROA not after:            Mon 29 Jul 2024 00:04:01 +0000
asID:                     138109
IP address blocks:        103.126.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl
                          rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 04:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ef:3e:01:44:b5:74:d6:fc:89:6a:20:ef:d5:5d:e9:c7:5d:02:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C
        Validity
            Not Before: Jul 30 23:59:01 2023 GMT
            Not After : Jul 29 00:04:01 2024 GMT
        Subject: CN=72C5885194D9C6CF273608DAA753EC8FA43296B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:16:be:2d:cc:92:20:3a:b5:65:c3:a7:49:a1:
                    9a:54:de:57:64:b6:85:6a:e9:51:4d:c6:75:96:24:
                    e2:22:35:43:c8:93:9d:7e:42:66:86:70:cf:bf:43:
                    89:48:c9:13:a5:8e:3d:86:ea:3d:bc:9c:e3:c3:fe:
                    4e:83:01:02:ad:b1:b3:95:fe:2c:4e:5f:b7:89:65:
                    d7:28:8a:f6:a3:a3:84:87:c7:a7:8b:50:88:a0:a9:
                    b3:12:95:af:81:13:b8:3c:0c:00:9d:6e:f0:a8:56:
                    28:04:00:ee:21:5c:1f:b6:7f:b8:fd:29:f5:1f:ee:
                    0c:ef:9a:3f:f0:9c:b7:00:88:2a:fc:9c:50:c6:fa:
                    8c:81:7e:a3:e4:dd:46:bc:38:9f:8b:9a:af:48:05:
                    db:d4:5c:1b:27:7c:64:ad:2f:5f:70:26:67:2b:05:
                    fa:82:2d:c0:91:89:54:64:ea:c2:93:9d:e6:5f:08:
                    70:53:14:18:7e:2b:e6:9a:31:50:7e:a3:78:c1:02:
                    47:5e:43:ca:8f:9a:20:a4:03:1f:a9:63:a5:db:53:
                    a2:f2:0a:9a:aa:67:99:a6:04:1a:30:63:30:29:e2:
                    ed:f6:aa:89:06:44:44:67:18:1f:ba:db:16:7e:a1:
                    cf:c5:dc:09:d6:27:3a:a8:2f:c1:a3:51:26:8e:b1:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:88:51:94:D9:C6:CF:27:36:08:DA:A7:53:EC:8F:A4:32:96:B5
            X509v3 Authority Key Identifier:
                keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:a6:68:62:cc:8e:c5:c7:e6:4c:bb:91:5c:ec:ee:22:c7:
         98:c1:20:0d:4c:b7:76:7f:d0:1e:be:1e:61:3a:9c:90:29:a2:
         40:4e:6d:bd:64:e0:88:82:55:8e:79:94:e6:ff:8b:51:ee:bc:
         01:69:ea:7b:7f:b9:12:d6:5a:69:6b:95:12:b9:cc:84:1d:48:
         36:30:b8:a0:b4:76:0a:59:af:fe:61:4e:de:54:8b:38:3d:80:
         e0:a0:ba:dc:a1:c3:bc:58:70:85:36:5c:8e:5c:a7:11:54:56:
         51:21:d7:7f:33:c0:c4:4c:9b:d3:84:c6:b9:e2:a2:12:11:5e:
         57:39:52:91:7a:36:55:08:16:81:48:4d:8c:a7:91:52:c0:56:
         9d:da:21:ac:8d:9f:e5:14:5b:c3:81:8c:28:91:0d:b7:41:46:
         cf:77:23:cb:be:69:73:e0:20:5f:0e:4b:34:00:41:83:5f:e3:
         a6:3d:ed:27:ca:1b:73:41:60:9a:4b:c1:97:d7:b8:6d:e0:f7:
         b3:34:dd:76:3d:ed:8a:3b:59:12:df:5c:b7:78:aa:0b:20:6a:
         46:8f:e6:2f:46:38:55:f3:50:b4:96:e3:62:e8:60:1d:b0:64:
         d2:50:9e:9a:d0:8b:93:a1:93:24:b8:80:62:bc:37:94:cb:4d:
         ea:17:20:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:10 2024 by rpki-client on console-fra.rpki-client.org