Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          YKOKw/bZghuxL9O5OjTxQcub7JOzDPDJOjFzdXIxnJc=
Subject key identifier:   42:81:60:1E:58:E3:5C:35:FB:89:0B:F4:13:92:C9:36:FF:B8:79:28
Certificate issuer:       /CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
Certificate serial:       6F2E246BA17879693114CB50E6CF593CA155F5E6
Authority key identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
Signing time:             Wed 19 Jul 2023 07:00:00 +0000
ROA not before:           Wed 19 Jul 2023 06:55:00 +0000
ROA not after:            Wed 17 Jul 2024 07:00:00 +0000
asID:                     131111
IP address blocks:        103.159.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl
                          rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2e:24:6b:a1:78:79:69:31:14:cb:50:e6:cf:59:3c:a1:55:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
        Validity
            Not Before: Jul 19 06:55:00 2023 GMT
            Not After : Jul 17 07:00:00 2024 GMT
        Subject: CN=4281601E58E35C35FB890BF41392C936FFB87928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:ef:4f:98:37:ae:19:52:fb:8e:36:12:02:
                    bb:e8:d0:7b:d0:53:a6:42:ac:fa:e9:60:ba:0e:d7:
                    d6:c5:b4:72:3e:02:a8:5c:49:a4:b1:aa:4a:84:d4:
                    bd:a8:04:90:f8:ed:8a:dc:76:27:81:a2:08:15:19:
                    d5:33:db:b5:e7:69:32:6d:18:eb:a2:de:80:76:60:
                    c9:bd:bb:0d:9e:02:23:18:11:fd:28:ba:fc:00:06:
                    01:3c:6b:08:07:3e:79:3f:a9:34:59:34:78:dc:4b:
                    f0:fa:7e:90:26:72:95:a7:9a:25:11:c0:ca:f9:5f:
                    ee:64:a4:72:d2:e8:e9:a9:1d:e5:ea:66:9e:e6:23:
                    a9:85:0b:a4:f2:86:2a:ed:2f:2e:4f:c9:93:f7:0b:
                    24:a0:3e:95:0b:2f:53:fc:d3:a4:7b:9a:ea:28:10:
                    9f:93:60:07:fa:50:79:35:7c:6d:63:1f:8c:04:b6:
                    f1:c6:71:c9:29:11:18:4c:b0:03:95:36:77:04:1d:
                    7a:c5:69:32:b3:db:d6:cb:5d:93:95:ce:61:ca:53:
                    c3:79:7e:53:5f:58:f9:49:67:43:02:54:de:bc:9e:
                    fa:1a:90:f6:70:2e:a7:b0:f0:03:4f:a8:d5:37:75:
                    6b:37:d6:d6:73:1c:be:1b:7a:dd:7c:37:38:75:a3:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:81:60:1E:58:E3:5C:35:FB:89:0B:F4:13:92:C9:36:FF:B8:79:28
            X509v3 Authority Key Identifier:
                keyid:75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:9f:37:4f:9e:c4:97:28:f6:fa:28:d0:0a:83:ba:47:2e:
         9b:76:18:0a:da:2a:9c:71:2c:1f:93:74:f3:67:06:83:2d:82:
         9e:11:8a:d0:7b:6a:fd:08:5e:0f:db:df:79:97:12:1e:d8:6f:
         41:19:90:3d:f3:56:a4:8d:d5:7a:98:6e:ea:c0:58:8d:ce:e8:
         27:74:20:46:aa:5b:ab:ac:53:19:f4:26:14:ce:a9:d6:e9:8f:
         cb:bb:26:c7:63:88:c3:94:c2:77:db:2a:fe:41:5d:1e:ca:b0:
         c4:95:f7:48:13:fc:ae:16:2b:d4:6e:e2:ea:b5:27:4d:e6:d8:
         e7:a7:db:b2:59:e9:6a:19:01:d4:40:86:b6:4c:41:13:ce:39:
         29:93:7a:04:86:f7:f0:3a:5d:fd:0b:5d:5b:2a:25:98:4d:62:
         01:61:08:a4:a3:a5:cc:58:2c:ff:87:b4:ca:6f:b5:ee:be:73:
         3a:be:5e:b2:47:0a:79:4c:bc:10:e4:37:7d:fc:65:b3:cb:08:
         e7:c8:b3:f0:56:f9:70:1d:00:63:5d:d2:db:01:a2:d9:0b:ce:
         27:64:3f:cb:7f:05:44:70:50:1e:f0:10:63:7e:e8:14:29:58:
         87:2c:85:7a:f6:c7:82:8a:a0:15:9d:b5:9e:e4:00:e6:e1:f1:
         48:94:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:43:21 2024 by rpki-client on console-ams.rpki-client.org