Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa
File:                     3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (raw, json)
Hash identifier:          OZrP27yzgWKqPoAEGs0v4CAXgOUaO1EOrWFFI4WURJI=
Subject key identifier:   92:83:2D:28:74:95:19:C7:98:A8:B7:B3:55:89:01:A4:0C:FA:77:F9
Certificate issuer:       /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
Certificate serial:       46BD139682B766ECEE3C7510D17379C62D82DA61
Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa
Signing time:             Mon 31 Jul 2023 00:01:08 +0000
ROA not before:           Sun 30 Jul 2023 23:56:08 +0000
ROA not after:            Mon 29 Jul 2024 00:01:08 +0000
asID:                     136835
IP address blocks:        103.100.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl
                          rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bd:13:96:82:b7:66:ec:ee:3c:75:10:d1:73:79:c6:2d:82:da:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
        Validity
            Not Before: Jul 30 23:56:08 2023 GMT
            Not After : Jul 29 00:01:08 2024 GMT
        Subject: CN=92832D28749519C798A8B7B3558901A40CFA77F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:9c:7a:83:8c:58:88:32:4f:6e:a9:a1:f8:
                    d7:99:22:99:7e:1f:cd:04:8e:40:14:93:5c:04:0c:
                    42:cd:dc:ba:bc:4e:c2:07:e2:e9:91:b6:5a:36:88:
                    f8:59:a6:81:c8:7e:8f:d1:57:fa:83:e9:5a:13:28:
                    95:30:7e:cf:3f:ae:a4:55:02:92:6d:95:9a:51:1c:
                    6a:f7:eb:4e:ff:7d:5b:36:1c:46:90:33:7e:89:9b:
                    bb:19:27:d3:3f:81:d0:41:b7:d6:89:67:d5:ef:18:
                    0c:80:14:63:e1:c2:29:f7:04:db:6e:a4:4e:7e:c4:
                    0a:2e:0f:48:56:28:05:86:c5:dc:07:d7:31:c6:95:
                    cb:54:df:56:23:89:4f:0d:ed:1c:de:ce:c8:8d:bf:
                    02:d7:0f:7e:1f:ac:2f:a1:da:cb:36:3b:69:ff:6e:
                    e8:84:20:9a:93:05:b4:6b:3b:f5:ae:f4:dd:f4:7f:
                    fc:17:a0:c9:33:4d:93:a3:70:95:0b:ea:aa:59:23:
                    85:02:19:65:74:9a:57:07:ee:1a:19:f9:66:66:69:
                    b1:16:fd:89:aa:7c:d9:bd:05:a2:80:8b:8a:f5:0a:
                    e7:97:27:56:0d:73:74:44:a3:ed:e1:fa:36:b8:60:
                    10:df:3e:88:f8:2a:60:9f:87:e1:21:89:09:16:8e:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:83:2D:28:74:95:19:C7:98:A8:B7:B3:55:89:01:A4:0C:FA:77:F9
            X509v3 Authority Key Identifier:
                keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:18:36:d0:35:6e:f6:05:69:b1:0a:53:85:6b:87:cc:7b:1b:
         4f:60:35:32:c6:be:c1:91:ea:90:3d:2b:ea:dd:7d:e0:4d:78:
         5d:67:5e:e7:cd:fc:53:4c:bd:05:87:e5:2e:b9:5e:8f:46:6d:
         a8:95:42:55:c3:d4:f7:2a:e4:62:f7:64:02:49:05:5c:08:d5:
         96:d1:c5:f4:98:a7:5f:2c:80:7b:6c:16:34:fe:09:2b:6f:05:
         82:71:54:70:87:fc:87:48:ee:06:7f:c5:e6:32:40:12:8a:17:
         30:e7:27:85:5c:0d:b0:a2:97:09:ce:36:1d:41:3c:72:8c:ac:
         7b:f9:e4:87:65:cb:7c:c5:dd:19:b4:01:15:9b:b1:45:4b:87:
         39:7c:74:70:45:59:ff:e1:56:18:40:ab:bb:7d:31:3b:aa:bf:
         34:05:ec:4d:80:92:94:e0:e9:55:0a:2f:51:c0:e9:9f:51:fd:
         69:14:88:7f:0f:2d:e8:37:a8:42:7f:83:3b:7d:49:79:1a:fa:
         80:3b:97:77:a3:0a:21:d0:7d:5f:e1:f0:f1:33:6c:36:35:09:
         2f:ab:fd:49:fc:14:6c:37:ea:e8:0d:18:95:66:d2:06:a7:d0:
         f4:e4:36:e7:ee:3f:b6:17:4f:63:ab:ba:37:10:58:0c:33:ab:
         4d:4f:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:23 2024 by rpki-client on console-ams.rpki-client.org