Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa (raw, json)
Hash identifier:          Qbis+RlVnLXRHoLUTLG0VEZs8bIBOuLqKUtHN1It+30=
Subject key identifier:   C4:61:52:BE:A3:D2:15:22:83:37:2D:45:36:93:19:12:00:89:41:12
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       760C709843DCD0E7B46D34F0BE542307FDF1C7C4
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
Signing time:             Wed 04 Oct 2023 18:00:01 +0000
ROA not before:           Wed 04 Oct 2023 17:55:01 +0000
ROA not after:            Wed 02 Oct 2024 18:00:01 +0000
asID:                     137329
IP address blocks:        103.106.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 05:27:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0c:70:98:43:dc:d0:e7:b4:6d:34:f0:be:54:23:07:fd:f1:c7:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Oct  4 17:55:01 2023 GMT
            Not After : Oct  2 18:00:01 2024 GMT
        Subject: CN=C46152BEA3D2152283372D453693191200894112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5d:2e:af:ff:e1:6c:8e:5b:cf:4b:1d:64:2f:
                    09:c0:35:df:ca:74:6b:c3:d0:55:7e:90:93:b1:27:
                    bb:ad:dc:63:78:44:b8:7b:df:3d:7e:ce:c3:80:9b:
                    8d:1c:5d:3c:af:00:02:f2:b1:a0:be:aa:f3:6f:45:
                    2f:c4:25:0f:28:cd:64:64:b3:74:8f:44:b1:31:37:
                    13:76:0d:77:db:b2:a9:bf:ff:6d:2e:ee:15:ec:de:
                    60:15:6e:88:f9:13:07:2f:65:05:ae:55:43:8e:ce:
                    f8:44:75:4a:1b:99:2a:d6:4a:63:cc:9f:af:01:f7:
                    c8:19:5c:e5:f5:04:96:af:56:d8:cb:81:5e:b4:a7:
                    a1:45:7d:04:37:2a:60:35:8a:bf:53:f9:4a:35:e2:
                    57:74:2d:f9:6b:18:f0:18:c6:02:b8:a1:8d:96:1e:
                    4c:f4:4b:42:aa:b5:ce:90:54:45:99:f6:f7:2e:92:
                    de:2f:24:2b:ef:0d:ac:34:f7:60:d8:89:36:a6:a7:
                    5d:1e:7c:2b:e0:15:e1:7d:8c:6e:93:f9:d3:dd:d4:
                    bd:6a:a7:3d:08:30:08:c0:71:81:37:0f:23:2d:d0:
                    38:48:42:0d:40:70:5c:1a:3f:cb:6a:b1:05:a5:b5:
                    b2:bf:4c:b3:35:e8:10:8e:c0:b2:3a:2d:50:6c:dc:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:61:52:BE:A3:D2:15:22:83:37:2D:45:36:93:19:12:00:89:41:12
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:05:c9:2f:53:75:31:4f:c4:12:58:14:af:4a:68:0e:d1:
         56:66:a6:1f:3a:7c:4b:cd:bb:dc:62:c0:49:f8:1b:49:25:33:
         63:8f:00:d6:f8:8c:9a:9c:30:a1:56:98:2b:36:16:86:34:22:
         62:92:ee:49:7a:27:6f:05:bd:61:b3:ff:f1:a8:ac:ad:26:b1:
         7b:f7:a0:90:f9:7b:3c:e4:a4:e6:73:ec:76:b2:8b:da:3d:9f:
         a4:7c:09:13:87:a3:3d:8e:5d:b8:13:9f:c8:56:af:64:84:f1:
         00:32:56:05:bb:9e:fb:51:dc:c3:d3:33:0a:39:09:39:03:11:
         81:24:50:ea:1f:38:91:e0:bd:aa:ef:5a:c2:60:93:af:f7:81:
         0c:da:75:f2:25:3f:12:4f:63:d2:9a:2c:89:44:d9:6c:52:1f:
         ea:39:6b:33:36:8b:22:24:af:fd:3b:c0:c9:51:fd:5b:b9:92:
         04:1d:db:8b:8e:48:44:a0:49:17:9d:59:c9:cb:f8:47:15:6c:
         13:52:9c:f5:97:e5:69:c6:9b:4a:7f:2b:1e:8d:31:4e:33:12:
         23:6b:89:6c:3c:a6:e5:2b:87:34:8b:0c:e1:c1:23:8e:42:c4:
         bb:7f:ce:bb:28:8b:9f:f1:3c:fb:ce:4c:59:fd:7b:3e:e8:31:
         fd:44:4d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 05:59:27 2024 by rpki-client on console-ams.rpki-client.org