Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa
File:                     3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa (raw, json)
Hash identifier:          jJMnAyeGRN0i+vjNH0WT1rSDe067PXeLwSlJYDkZqgk=
Subject key identifier:   32:7A:43:80:DB:51:F9:C3:F0:88:E2:B5:26:E1:08:E3:10:B3:E3:69
Certificate issuer:       /CN=D4DD8244BC2EB2B187B4181226714505DF8F4452
Certificate serial:       69D30E913548E01E3C8D2CE2E01FE929BF72D1D7
Authority key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa
Signing time:             Mon 03 Jul 2023 14:42:10 +0000
ROA not before:           Mon 03 Jul 2023 14:37:10 +0000
ROA not after:            Mon 01 Jul 2024 14:42:10 +0000
asID:                     142365
IP address blocks:        103.170.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl
                          rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d3:0e:91:35:48:e0:1e:3c:8d:2c:e2:e0:1f:e9:29:bf:72:d1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452
        Validity
            Not Before: Jul  3 14:37:10 2023 GMT
            Not After : Jul  1 14:42:10 2024 GMT
        Subject: CN=327A4380DB51F9C3F088E2B526E108E310B3E369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:53:5b:4e:2c:48:bc:b4:cf:af:39:6c:c1:
                    a3:ab:99:2f:ab:c6:3b:35:d6:40:44:64:39:14:39:
                    dc:32:53:33:6a:65:58:1d:87:88:a8:22:be:07:bd:
                    78:b6:06:52:53:83:bb:ac:6f:2b:2a:d2:ac:87:22:
                    c7:68:16:e7:29:17:06:5e:93:9b:9e:55:7b:5d:fd:
                    6f:c3:7f:f0:27:a2:5a:eb:66:7d:aa:eb:fc:7f:f8:
                    72:36:7b:1c:87:c2:8e:58:ad:0e:22:23:30:2b:52:
                    53:44:3e:65:2b:04:93:6b:2a:38:24:aa:89:48:cc:
                    09:75:1b:f5:37:60:57:6c:f7:4b:dc:a1:cd:17:38:
                    de:0c:d5:0a:4c:8b:dd:39:f6:85:4a:14:3e:5e:d7:
                    cc:ec:5b:c8:ee:0d:c7:60:87:6f:aa:96:d8:2f:ba:
                    2a:1d:85:07:6d:76:1e:48:8f:08:f6:9a:ca:16:5f:
                    9d:1b:c9:aa:47:40:0a:b3:ca:cd:9e:1d:2e:de:76:
                    44:63:35:5b:4d:5c:25:90:69:5e:16:5d:8e:34:c8:
                    a4:37:f8:06:23:93:60:80:56:dc:d1:31:47:54:49:
                    eb:59:50:30:ac:8c:00:c4:ac:1f:e7:ee:9f:d3:5b:
                    fd:08:a9:63:71:c9:6a:df:3e:77:c2:a8:95:46:91:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7A:43:80:DB:51:F9:C3:F0:88:E2:B5:26:E1:08:E3:10:B3:E3:69
            X509v3 Authority Key Identifier:
                keyid:D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/3130332e3137302e3138362e302f32342d3234203d3e20313432333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:e7:24:74:40:ce:91:58:da:fd:40:82:e1:01:5e:ce:b8:
         6c:0b:6d:ff:10:06:a8:cc:80:91:6f:ce:39:16:c2:d8:7b:75:
         74:26:53:e9:50:a4:97:a2:a1:01:d5:35:ba:7a:b9:55:95:00:
         89:2a:0d:65:e6:f1:8b:2b:55:95:87:22:cc:90:e3:b0:6b:70:
         03:ba:53:35:cd:9a:7c:7e:ae:3b:8d:04:99:3a:e7:cf:ee:06:
         22:4d:bd:33:a3:11:54:44:8c:91:75:93:63:b1:09:59:a3:da:
         4d:47:c5:b8:3d:65:d9:41:21:a4:79:85:55:46:fb:5d:aa:e0:
         fc:4e:2a:35:15:ee:2f:c2:64:c9:fa:c3:4e:0f:4b:2a:bc:0e:
         f9:63:f5:68:47:29:5c:a0:cc:ce:ff:92:a9:52:34:a0:38:f4:
         1e:4a:6c:67:6b:f4:d4:c2:f8:a4:e9:6a:ad:d5:17:20:11:60:
         fd:92:fb:b7:b8:12:0f:fe:28:ba:0d:c7:cf:8c:d0:35:39:96:
         bf:19:eb:6e:da:c0:30:e5:78:e5:b3:d1:c3:5d:56:f1:27:72:
         d9:e5:9e:53:ad:1b:67:15:4a:4e:bf:fd:d4:64:a3:96:6f:e7:
         f0:ed:1e:a5:57:2b:9e:7d:c2:49:67:56:c5:98:c6:3b:29:89:
         db:86:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:36:13 2024 by rpki-client on console-fra.rpki-client.org