Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa
File:                     3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (raw, json)
Hash identifier:          +ktPfyO2j4OODEI23CQFGa7iOeiwX23b+DVVexH2dGM=
Subject key identifier:   0C:7A:8E:95:BA:C9:9A:2E:FE:24:32:89:7A:90:88:19:6B:03:20:39
Certificate issuer:       /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
Certificate serial:       1784012E73441D723D3EB80A8EDF99247FE2A680
Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa
Signing time:             Thu 14 Sep 2023 09:00:01 +0000
ROA not before:           Thu 14 Sep 2023 08:55:01 +0000
ROA not after:            Thu 12 Sep 2024 09:00:01 +0000
asID:                     147124
IP address blocks:        103.175.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl
                          rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 06:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:84:01:2e:73:44:1d:72:3d:3e:b8:0a:8e:df:99:24:7f:e2:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8
        Validity
            Not Before: Sep 14 08:55:01 2023 GMT
            Not After : Sep 12 09:00:01 2024 GMT
        Subject: CN=0C7A8E95BAC99A2EFE2432897A9088196B032039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:a3:2f:23:c0:1e:e9:20:7d:97:3f:b3:c7:
                    cd:c1:5c:fa:08:55:54:8f:4e:67:e1:1c:e2:8a:11:
                    e0:58:f4:f3:b1:e7:e1:9b:1a:2f:46:49:a3:d7:4e:
                    43:e4:83:ac:85:80:b5:86:66:45:1b:d7:e4:77:d7:
                    8a:48:19:36:d4:65:ce:11:61:c9:0c:4e:f9:62:cf:
                    2c:c5:d0:c4:e2:b3:f6:c4:a6:0e:f0:67:d1:b0:00:
                    96:35:9c:78:16:c5:56:e5:a8:53:c9:cc:d3:40:08:
                    28:dc:1a:3a:71:23:90:78:8c:13:1f:ce:5e:65:93:
                    e9:27:41:71:da:56:b6:01:09:32:bf:ca:c3:fc:75:
                    11:74:e0:b2:b0:76:b9:57:41:21:83:a4:3b:73:ef:
                    71:40:58:3c:67:ac:ae:a2:9c:21:68:90:86:20:a9:
                    2a:04:fa:81:b1:0b:39:51:b5:f6:22:42:b4:80:cd:
                    f9:a4:e3:f7:4f:b0:ae:7c:b7:39:a3:cd:8f:66:95:
                    82:a8:37:fd:9f:d2:ee:84:47:0f:b4:69:2c:60:66:
                    a2:92:15:0b:63:bc:03:85:f1:71:0b:52:c7:8c:c5:
                    9e:88:f3:70:b3:b0:ac:90:62:d9:97:a0:e5:e4:d2:
                    3f:b4:d3:c9:4f:68:b4:3f:3e:7f:83:35:ad:a6:18:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:8E:95:BA:C9:9A:2E:FE:24:32:89:7A:90:88:19:6B:03:20:39
            X509v3 Authority Key Identifier:
                keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:13:6d:f6:09:b0:16:75:8e:c8:24:32:7d:89:b9:53:23:d2:
         00:82:b3:fb:a8:b0:6d:90:fa:f0:22:e1:4b:34:35:f9:16:6b:
         1d:14:39:76:c8:0c:90:b2:58:af:3c:06:a5:57:83:f0:21:38:
         78:a1:7c:fc:26:23:ae:df:2d:d9:e5:71:08:73:b3:62:84:53:
         7f:4a:6f:e5:22:80:f9:03:b4:b9:20:6f:5b:64:eb:0a:dd:88:
         07:97:1a:93:bf:cb:9e:c9:47:26:c6:c3:20:22:31:b6:1d:23:
         ca:4f:ce:1e:2c:e7:64:a3:5b:d0:7a:ba:83:5c:7c:f6:fb:94:
         e2:6d:75:7e:7f:84:80:25:7a:5c:a6:fb:4e:ab:3d:c1:df:56:
         1a:36:33:e1:58:c7:7b:66:24:91:b4:e7:04:41:6d:94:da:69:
         8a:92:b9:a0:db:07:66:d5:db:db:28:c7:c3:db:f5:ff:a2:23:
         35:83:40:9a:77:7f:da:46:d8:48:f1:a9:58:85:0c:48:7e:12:
         f7:fa:ba:55:8f:98:65:3c:e2:61:15:85:78:72:46:f8:57:93:
         e0:17:14:bf:4c:0a:80:ac:af:e5:5e:98:1e:0b:02:17:c3:15:
         fe:0e:ec:4e:6c:7f:a1:98:93:2b:5c:7d:68:e4:23:e7:27:7d:
         48:05:53:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org