Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          wR++uxy6I1Yb7uBXBDhhyTR4kNqt8T+8c15y5MG4V6M=
Subject key identifier:   4C:9D:58:67:FC:6B:2C:D3:E7:D2:24:DF:77:9A:5C:C2:2F:36:13:30
Certificate issuer:       /CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
Certificate serial:       2097C855A591563101D18A706ACDF4B5874EAF8D
Authority key identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa
Signing time:             Wed 19 Jun 2024 07:00:01 +0000
ROA not before:           Wed 19 Jun 2024 06:55:01 +0000
ROA not after:            Wed 18 Jun 2025 07:00:01 +0000
asID:                     131111
IP address blocks:        103.159.198.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl
                          rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:c8:55:a5:91:56:31:01:d1:8a:70:6a:cd:f4:b5:87:4e:af:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C
        Validity
            Not Before: Jun 19 06:55:01 2024 GMT
            Not After : Jun 18 07:00:01 2025 GMT
        Subject: CN=4C9D5867FC6B2CD3E7D224DF779A5CC22F361330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:47:6e:b7:26:01:a4:75:09:9a:6e:d3:2d:
                    fc:fe:39:d6:f2:e3:34:57:23:d0:5b:53:f3:41:0d:
                    bf:cc:c9:76:a6:74:3c:24:ab:ff:30:e0:db:1d:9f:
                    85:82:2d:35:d0:41:79:b0:f3:43:74:c8:bb:23:b8:
                    f7:32:40:78:43:43:79:a8:3c:07:66:1f:d5:ec:ad:
                    f9:dd:a7:05:ea:1d:66:fc:8b:02:4c:2e:c6:07:1e:
                    44:d1:da:0c:07:d4:23:59:89:6f:9b:50:70:b3:a6:
                    00:2e:0e:b1:39:bb:cc:10:b5:3b:7f:d8:d7:36:ed:
                    02:d0:b2:9c:18:43:a5:40:f1:d7:fa:3f:d4:de:a8:
                    08:3d:df:53:3b:49:0a:5c:16:4a:be:62:08:92:f7:
                    09:f6:8e:a3:23:a2:ec:b8:15:5f:b4:98:43:6c:7b:
                    41:7e:4b:6a:52:2e:89:e0:ab:c1:c6:05:23:50:ca:
                    6f:ad:77:1a:fd:bb:45:36:31:29:b9:1b:82:ed:6d:
                    01:88:14:9f:00:4c:8a:cf:e9:13:ec:0b:9d:a9:85:
                    0a:e2:6f:3c:64:87:8d:93:d0:cd:a1:0f:06:cb:f2:
                    f4:3a:aa:01:5c:38:66:99:4b:0c:2a:f3:50:03:6d:
                    50:0d:10:61:74:b3:d3:72:16:54:b1:59:21:cf:21:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9D:58:67:FC:6B:2C:D3:E7:D2:24:DF:77:9A:5C:C2:2F:36:13:30
            X509v3 Authority Key Identifier:
                keyid:75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/3130332e3135392e3139382e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:20:64:c6:28:d7:c5:4f:9b:b2:82:f2:a1:e8:34:5b:5c:
         b8:c7:e4:f3:55:07:8d:3e:7e:9c:34:25:38:d4:29:43:9b:b3:
         f7:29:8f:02:4c:b7:98:7b:76:2a:2d:fb:02:1b:04:57:b1:2b:
         59:3e:32:06:1f:84:9b:a5:a9:04:13:4c:d6:e3:4b:83:ee:d4:
         0d:4b:c1:09:cd:01:d6:82:de:16:55:28:b6:b8:39:b7:2c:12:
         1d:72:f1:6b:f6:81:5d:c8:35:5d:e5:13:5d:70:4b:a7:fb:a6:
         25:03:a9:d7:1c:9d:ec:1f:18:2e:67:2e:14:2b:86:af:8d:45:
         55:6b:13:b3:a9:53:69:8b:6e:ec:d6:64:fa:b9:55:9e:2b:38:
         2d:78:b9:c1:eb:9c:60:e6:fc:96:33:c5:0c:46:4b:a0:9c:7e:
         13:bc:d3:02:07:81:fd:f9:12:d9:15:37:e8:e6:04:33:d3:8a:
         56:36:5f:9d:b2:23:7c:86:ae:2c:9d:69:d8:52:d0:27:32:94:
         d4:28:45:25:e0:b8:93:21:2b:f1:0c:ec:e5:c1:30:6e:2f:91:
         26:b5:49:d9:42:a0:35:05:b1:30:36:87:9d:e1:bc:e5:2d:9e:
         c2:0e:dc:07:d4:7b:88:19:f1:80:50:17:d2:50:52:7a:10:46:
         80:e1:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:50 2024 by rpki-client on console-fra.rpki-client.org