Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa
File:                     3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (raw, json)
Hash identifier:          9Jr17fRheLWbH/neYztHitL7n9rOL20WrmBV9zDAJKI=
Subject key identifier:   72:09:70:49:C1:84:F8:DB:26:B8:B9:D1:9C:16:8C:14:F0:BD:98:B8
Certificate issuer:       /CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
Certificate serial:       72EF8E242B7944AB0256C4674AD529A0587F3DBA
Authority key identifier: 19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa
Signing time:             Mon 31 Jul 2023 00:07:25 +0000
ROA not before:           Mon 31 Jul 2023 00:02:25 +0000
ROA not after:            Mon 29 Jul 2024 00:07:25 +0000
asID:                     45302
IP address blocks:        103.30.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl
                          rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 22:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ef:8e:24:2b:79:44:ab:02:56:c4:67:4a:d5:29:a0:58:7f:3d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A196F5E5BABA31926C5AEEF44FC16387E65C3C
        Validity
            Not Before: Jul 31 00:02:25 2023 GMT
            Not After : Jul 29 00:07:25 2024 GMT
        Subject: CN=72097049C184F8DB26B8B9D19C168C14F0BD98B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:86:14:8c:26:eb:f8:9c:8b:83:2b:2e:70:
                    96:c6:90:17:04:1d:7e:25:32:f0:18:c1:43:92:da:
                    e1:3c:b9:82:ea:63:6b:d1:7e:cb:ae:7b:b6:52:9b:
                    9d:13:47:a5:ba:78:49:0b:75:71:11:35:95:5b:20:
                    eb:24:17:05:50:44:0d:de:ec:62:ab:e6:4e:9e:12:
                    b5:30:9a:63:86:8f:46:38:1c:1b:2e:be:ef:1a:9e:
                    bd:26:b8:3c:15:0b:ca:64:5f:59:09:2a:39:32:9c:
                    37:fb:c9:bf:ef:e8:af:86:59:ef:72:e6:b0:64:84:
                    0b:c3:ae:50:dd:94:ba:57:5e:6f:08:56:00:81:19:
                    a8:4b:27:45:50:b1:f3:2f:5b:3a:f2:3e:37:24:7c:
                    4d:94:e9:5b:1b:af:59:90:8a:df:19:fd:c8:d1:b8:
                    06:11:83:f8:a7:9d:9d:4b:bf:15:3d:9d:b5:4c:c4:
                    58:7b:89:ec:0a:86:91:e3:6a:5f:62:96:61:b5:e2:
                    11:48:f6:30:1b:a7:48:fa:1e:70:67:22:ac:fa:ce:
                    c1:01:c9:f1:92:36:d6:ba:68:82:ab:36:7b:62:49:
                    ae:c0:b0:8e:85:12:31:81:21:00:f6:1b:eb:4c:16:
                    c3:4c:13:db:8a:d4:0b:64:da:d8:a3:04:78:00:a1:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:70:49:C1:84:F8:DB:26:B8:B9:D1:9C:16:8C:14:F0:BD:98:B8
            X509v3 Authority Key Identifier:
                keyid:19:A1:96:F5:E5:BA:BA:31:92:6C:5A:EE:F4:4F:C1:63:87:E6:5C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19A196F5E5BABA31926C5AEEF44FC16387E65C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:6d:7c:61:90:18:d3:92:28:05:66:71:43:db:aa:f9:ef:
         99:a6:e4:6d:3a:64:d0:8a:5a:f3:54:f8:df:76:84:01:58:07:
         63:ce:d7:bc:44:19:9c:92:f4:74:5b:51:02:c4:02:b2:7c:7a:
         a4:cf:a8:dc:9f:d9:4d:19:9c:7b:db:e5:91:e7:88:d0:d0:ab:
         7b:61:d7:b7:cc:6a:62:44:30:d9:bf:14:70:34:cb:7a:fa:aa:
         88:1a:59:b9:19:f3:25:b3:f4:6e:38:62:80:6d:e8:23:e0:68:
         1c:ee:f7:27:71:a7:06:49:f3:3c:4c:b8:bd:98:cb:08:3d:fd:
         6c:81:ec:c4:ea:c0:04:6e:b6:01:5b:0e:ad:b6:15:3b:9f:6f:
         30:39:93:6f:b7:e9:7b:58:df:fd:3a:b8:99:b5:95:44:e3:f7:
         bf:2a:71:6f:a2:3f:dd:e1:ae:3b:88:1a:f7:a0:d3:8f:82:d3:
         47:86:3c:9a:eb:29:34:a1:ed:41:70:a7:a2:bb:e1:aa:02:e7:
         5d:b6:3a:b8:fc:3e:1b:86:45:e7:a9:44:f7:d0:04:b0:92:41:
         cd:7f:7f:3e:6f:25:4e:3d:c4:02:5a:81:a6:41:56:d1:d7:ae:
         a7:c5:7c:9b:ef:a9:5c:7d:95:2d:0e:20:d0:97:25:a5:2c:82:
         4b:33:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 17:48:09 2024 by rpki-client on console-fra.rpki-client.org