Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32332d3233203d3e20313337333239.roa
File:                     3130332e3130362e3231382e302f32332d3233203d3e20313337333239.roa (raw, json)
Hash identifier:          GjVrYNnqD8skzThzAK+3i1S51UYx4TQQ4n7cGfaRkWk=
Subject key identifier:   D8:24:71:00:AB:DB:E6:80:C1:AC:70:60:B3:A4:B9:9E:35:A9:62:DF
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       3F0F4BCABE628326E637AAB1920802EBC3490F85
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32332d3233203d3e20313337333239.roa
Signing time:             Sun 11 Feb 2024 07:00:01 +0000
ROA not before:           Sun 11 Feb 2024 06:55:01 +0000
ROA not after:            Sun 09 Feb 2025 07:00:01 +0000
asID:                     137329
IP address blocks:        103.106.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0f:4b:ca:be:62:83:26:e6:37:aa:b1:92:08:02:eb:c3:49:0f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Feb 11 06:55:01 2024 GMT
            Not After : Feb  9 07:00:01 2025 GMT
        Subject: CN=D8247100ABDBE680C1AC7060B3A4B99E35A962DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:1f:92:3d:6f:8d:00:ee:88:49:ce:d9:30:
                    aa:fe:dd:32:5f:d1:fe:77:4a:66:34:e0:6f:68:af:
                    7c:11:75:87:de:ac:47:0b:7b:c5:67:87:c5:da:35:
                    97:a7:bf:9b:15:e9:78:41:18:7b:55:87:27:90:56:
                    16:74:e4:68:cd:35:d4:e4:24:56:a0:7e:7d:76:84:
                    21:da:eb:26:ce:c8:f8:f2:b2:5a:68:1e:bd:fa:6e:
                    b3:0a:20:8c:0e:10:3a:22:af:7a:eb:9f:89:d2:53:
                    de:0f:bd:4c:51:e1:8d:9e:c4:9e:c9:b4:45:98:01:
                    17:a7:b8:1c:4e:25:54:bf:82:30:7f:b5:9e:03:2e:
                    38:c2:2f:9c:69:6f:27:25:ca:86:04:45:c0:d4:05:
                    d0:14:83:fb:60:ea:69:2e:8d:fb:fb:b7:48:d9:0d:
                    54:e1:9e:20:10:97:b1:4a:ba:91:7f:e3:4e:c6:92:
                    95:62:70:7f:dd:ec:14:ec:c7:a9:59:00:68:1b:18:
                    ee:27:15:56:95:a6:be:55:23:ff:5b:c1:29:c0:a1:
                    63:09:54:18:0d:c6:c4:d5:db:68:ce:1c:5b:df:91:
                    bb:6f:ee:20:c4:95:c7:19:f5:f3:2f:ee:86:92:ab:
                    be:88:98:0d:37:99:02:9c:a7:98:85:d9:d7:73:7a:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:71:00:AB:DB:E6:80:C1:AC:70:60:B3:A4:B9:9E:35:A9:62:DF
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32332d3233203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:34:7c:b9:60:79:74:b6:b8:8c:27:9b:a1:7b:fc:b5:a2:df:
         d8:41:33:6c:bf:68:22:6a:5b:c0:13:b9:47:b6:bd:2b:72:23:
         9d:74:f2:ca:81:00:45:f1:37:c5:03:3a:4b:e3:fb:a3:03:d0:
         10:da:90:ba:07:d0:43:ec:d7:56:96:74:66:49:17:f5:3a:a8:
         65:1e:e4:ee:31:4b:2c:9d:4b:c8:71:b1:b4:7c:0b:c6:6c:79:
         06:3d:79:e9:d7:92:f7:75:d2:ef:06:2d:ac:b1:f9:76:70:ea:
         76:34:27:19:aa:37:80:5f:8b:35:e5:24:c3:10:eb:4e:93:89:
         86:99:87:a4:e6:76:fa:c3:9f:19:5d:8e:d9:29:90:9b:c8:0f:
         44:6d:88:ee:a7:81:9e:b1:5c:47:a5:57:bf:80:b7:64:f2:4b:
         2a:4b:17:97:92:c0:c4:6d:d7:af:06:73:1b:97:b9:9c:9d:9c:
         07:eb:ea:7b:e1:51:64:c3:52:d7:a7:a4:da:36:1b:d0:17:4e:
         d8:d2:51:46:50:a4:19:51:fc:c3:28:72:42:af:0c:f1:8c:d3:
         60:15:78:09:33:cd:ce:3d:c8:fe:64:30:fe:d9:8b:2e:7b:81:
         83:ea:75:ed:a2:82:ce:0a:20:fa:d1:77:20:5d:97:4a:5d:82:
         de:47:13:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org