Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa
File:                     3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (raw, json)
Hash identifier:          +JrUKkE/T5/16OXJhgr0oldYZ1ozOl5vQzbn7e8DhIU=
Subject key identifier:   22:9E:4D:9E:2D:BB:53:65:7D:0C:E9:86:5C:5A:84:E5:65:4F:6F:0A
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       777573E04B0896907320037A3366BC9E767F7ED0
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa
Signing time:             Mon 31 Jul 2023 00:09:29 +0000
ROA not before:           Mon 31 Jul 2023 00:04:29 +0000
ROA not after:            Mon 29 Jul 2024 00:09:29 +0000
asID:                     139401
IP address blocks:        103.142.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 01:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:75:73:e0:4b:08:96:90:73:20:03:7a:33:66:bc:9e:76:7f:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jul 31 00:04:29 2023 GMT
            Not After : Jul 29 00:09:29 2024 GMT
        Subject: CN=229E4D9E2DBB53657D0CE9865C5A84E5654F6F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:50:12:d3:18:f2:3a:11:29:9d:5c:c0:0a:
                    76:04:93:1f:c9:82:0d:47:06:cf:c8:8e:a5:c7:cf:
                    2a:a7:7b:44:08:38:50:c6:c6:66:8d:40:80:32:a6:
                    25:92:47:9f:5e:7e:f6:f9:bf:39:ab:be:20:2e:dd:
                    91:2d:27:4a:2a:a7:f9:0d:00:49:01:bd:38:8c:7a:
                    92:8f:15:0b:5f:ba:e2:b3:73:eb:e8:3d:69:18:aa:
                    d0:56:cc:2b:a0:d3:39:ce:51:82:47:ea:f3:39:60:
                    82:c0:91:01:fb:de:57:b3:b7:f7:62:96:e9:25:1b:
                    8e:f0:b4:b7:58:cd:89:b0:f0:6b:61:75:ba:c1:c3:
                    88:3e:3c:13:04:59:19:b9:1d:32:0b:84:fe:dc:69:
                    14:9f:be:93:d9:50:5d:74:9a:bf:e7:3c:61:f3:82:
                    86:4b:50:32:49:49:ed:4d:63:e4:82:3c:47:23:78:
                    da:9a:c4:2b:77:72:34:2d:90:36:69:36:95:65:1f:
                    73:70:a4:29:30:a7:e2:1d:82:aa:af:35:21:ff:fc:
                    7f:21:b5:65:56:98:2e:45:7c:94:a0:8d:d0:56:4b:
                    f1:b9:12:50:9c:aa:ce:4f:7f:80:7f:ef:cd:01:d7:
                    a0:1f:fc:c7:78:a6:9b:23:b0:7e:7c:7f:37:f5:3a:
                    0d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9E:4D:9E:2D:BB:53:65:7D:0C:E9:86:5C:5A:84:E5:65:4F:6F:0A
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:b4:86:75:b5:9d:eb:c9:ef:61:28:9e:ae:fc:35:e9:72:
         9c:cd:18:75:13:1e:1d:95:cb:03:ca:c6:22:0b:15:52:33:b8:
         5f:9f:ae:a0:a8:43:87:d9:d4:8e:65:8b:a4:b5:d8:f6:7b:e8:
         7b:0d:53:6e:96:66:29:ab:2f:dd:9b:1d:ae:bc:58:10:54:50:
         4d:72:06:46:44:e2:8f:e7:97:35:53:38:9c:1f:54:f4:8f:02:
         18:59:19:d5:15:c8:7d:f1:24:7c:e7:fd:68:b7:a1:03:2f:00:
         4e:f8:d1:32:5c:7a:9b:0b:ae:3b:37:c2:fe:09:e9:8d:3d:36:
         6e:b1:77:ff:6e:da:78:cc:c8:ce:8e:48:e3:0f:85:24:38:ff:
         98:e1:04:42:ca:40:89:90:e5:f1:7e:9d:71:57:ba:61:ed:52:
         0b:76:69:d5:79:8c:ff:a3:25:cf:d3:13:17:0f:fd:51:4c:c1:
         b8:7c:86:6a:b7:d2:70:b3:51:c8:8f:f3:fa:d2:c9:26:db:dd:
         3b:2d:32:6a:0e:13:de:6a:e3:7f:46:54:3c:c1:44:a4:e2:50:
         c0:91:9b:06:0c:a4:04:cc:27:fb:5b:34:0c:06:96:01:67:5e:
         20:09:c4:f8:e6:0b:fc:17:e1:4a:df:fc:58:28:0e:6d:a7:d2:
         88:12:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:48:20 2024 by rpki-client on console-fra.rpki-client.org