Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
File:                     3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa (raw, json)
Hash identifier:          IU1YI+kImGr7JS6rF3mfeGLwbenBpKsV+O4vPGEbliE=
Subject key identifier:   63:7A:EB:46:48:0E:91:E9:CC:C1:40:80:8D:0D:3E:DE:B4:D1:BB:4E
Certificate issuer:       /CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
Certificate serial:       2D6C6972439AD5E108B568A9AA0860D66E648BB1
Authority key identifier: BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa
Signing time:             Thu 07 Sep 2023 15:00:00 +0000
ROA not before:           Thu 07 Sep 2023 14:55:00 +0000
ROA not after:            Thu 05 Sep 2024 15:00:00 +0000
asID:                     136878
IP address blocks:        103.105.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl
                          rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 09:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6c:69:72:43:9a:d5:e1:08:b5:68:a9:aa:08:60:d6:6e:64:8b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5D46B5BFE72F2AA1188A9096B10E01474244B1
        Validity
            Not Before: Sep  7 14:55:00 2023 GMT
            Not After : Sep  5 15:00:00 2024 GMT
        Subject: CN=637AEB46480E91E9CCC140808D0D3EDEB4D1BB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:cf:bb:8c:cd:49:b4:76:3e:36:47:45:a7:
                    51:eb:31:0f:8d:ec:1e:ad:5e:28:8c:85:cd:19:f0:
                    97:94:a0:7f:df:9b:5f:39:c3:1c:b9:ce:88:2b:45:
                    76:84:a6:7b:b8:bc:29:32:68:74:96:87:a7:04:80:
                    36:58:cd:2c:9e:03:8b:ca:3e:d7:c7:ad:31:f4:23:
                    d2:42:85:02:1c:3e:17:e5:55:d2:7a:9c:a1:96:31:
                    f4:0a:5d:23:bf:0e:cf:c4:80:58:05:29:ee:cb:0b:
                    1d:25:fb:34:d7:13:30:90:8a:83:1f:ea:43:15:64:
                    0f:79:1a:e4:83:69:c8:90:c2:31:97:2b:8d:54:e6:
                    72:03:f5:7c:75:cd:1e:bb:a4:9d:d3:2b:88:c0:f3:
                    1e:72:04:5c:60:a0:93:46:7d:0c:a9:e5:82:cb:42:
                    cb:a2:e5:04:2d:3a:9b:f9:0a:2b:d6:3d:47:51:ff:
                    c7:9d:e8:8f:21:c4:d0:98:f9:14:1e:62:4c:46:a3:
                    6d:b4:89:a4:26:69:ba:b1:f0:77:9d:8c:62:75:2c:
                    ab:a1:c6:a7:cf:4d:dc:8c:34:65:67:8a:6d:eb:4c:
                    69:b5:90:d2:21:04:18:06:87:5d:d2:bf:a2:4d:85:
                    f4:f1:18:0d:ca:35:c9:2a:d6:b2:e9:c6:a4:00:7b:
                    3c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7A:EB:46:48:0E:91:E9:CC:C1:40:80:8D:0D:3E:DE:B4:D1:BB:4E
            X509v3 Authority Key Identifier:
                keyid:BD:5D:46:B5:BF:E7:2F:2A:A1:18:8A:90:96:B1:0E:01:47:42:44:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD5D46B5BFE72F2AA1188A9096B10E01474244B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d924fa9a-e5f3-4265-9e1d-84e4535961d0/0/3130332e3130352e3139342e302f32342d3234203d3e20313336383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:82:d6:3f:db:be:3a:86:13:82:57:59:2b:b2:af:f6:53:
         58:3f:a1:c8:fc:52:35:23:29:79:60:a7:db:ff:b1:53:d9:70:
         f1:79:c1:45:7e:85:6f:cb:be:cd:93:8f:87:73:97:ed:84:38:
         d7:fb:98:4b:a3:02:f7:45:4c:98:d4:e2:69:2a:2b:da:ed:36:
         b5:60:88:9e:5f:e7:e6:95:6c:7d:07:8e:10:12:41:a9:d5:33:
         0f:25:53:41:5e:13:b7:cf:bc:c2:15:cd:49:33:f7:02:e6:26:
         09:44:e9:3b:83:eb:1b:a4:4e:58:4f:ef:27:eb:f6:0b:25:17:
         c4:9d:75:7c:8a:16:f6:d8:b1:a1:06:3f:1a:f3:10:f2:6d:b2:
         e6:c3:91:63:c0:cb:ee:c3:2f:2c:d5:f7:54:65:66:db:cd:09:
         77:78:ea:ca:5a:b0:e4:f2:71:41:20:df:cc:1f:b7:25:a6:06:
         c1:70:ec:3a:5a:3e:8b:9d:37:e9:e0:b0:ef:6b:94:c2:da:c4:
         77:92:fd:92:8d:40:80:f9:f1:43:b1:8c:1e:5e:3e:7e:49:76:
         04:26:99:4e:1c:bd:f5:0f:a7:dd:cb:9d:24:a9:71:96:c0:84:
         b9:b1:10:27:38:bd:a1:f5:53:37:db:cc:3d:af:9e:cf:a7:1f:
         09:2b:d9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 03:03:18 2024 by rpki-client on console-ams.rpki-client.org