Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa
File:                     3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa (raw, json)
Hash identifier:          l6dcHsM8q9pR31Iz4BIDJk5EP2dSYBd8NQChlZik0as=
Subject key identifier:   4C:5C:44:88:AE:BC:D0:19:DA:0C:8E:3C:D7:11:23:EF:5C:B3:8F:8E
Certificate issuer:       /CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F
Certificate serial:       471EA01D1F9D3F5487F49D8BC9F1E26DB4B30472
Authority key identifier: FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa
Signing time:             Mon 31 Jul 2023 00:08:34 +0000
ROA not before:           Mon 31 Jul 2023 00:03:34 +0000
ROA not after:            Mon 29 Jul 2024 00:08:34 +0000
asID:                     138849
IP address blocks:        103.137.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl
                          rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1e:a0:1d:1f:9d:3f:54:87:f4:9d:8b:c9:f1:e2:6d:b4:b3:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4A38DAAF15E8284373FD82AE59B27383D4A68F
        Validity
            Not Before: Jul 31 00:03:34 2023 GMT
            Not After : Jul 29 00:08:34 2024 GMT
        Subject: CN=4C5C4488AEBCD019DA0C8E3CD71123EF5CB38F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:fb:cb:e7:c7:8a:99:de:f3:7d:9c:b3:09:
                    9b:88:65:67:37:5a:bd:65:9d:c7:48:b0:11:fe:c0:
                    e5:9e:e6:8a:c4:5f:fc:1e:36:b0:4f:06:65:c0:42:
                    f9:b3:8e:0f:6b:79:fb:2f:b8:c5:7d:52:de:32:00:
                    aa:17:76:b0:f0:65:ff:a5:e9:96:ee:4f:18:3a:f9:
                    24:f9:89:d2:35:f2:c7:d3:2c:c2:d1:96:24:0f:d7:
                    7d:73:dc:8a:0d:fd:bf:8d:8b:53:a0:b3:1c:fd:55:
                    fa:60:a8:0f:24:74:ec:42:e9:11:72:d4:60:d8:8d:
                    ea:ce:73:be:7e:78:aa:c9:0a:f6:4c:6f:bb:9a:b3:
                    4c:69:5d:0f:6e:df:7b:3d:42:d0:51:00:84:42:42:
                    f0:22:76:01:f3:79:e0:f1:04:fa:91:65:50:56:99:
                    ec:3f:98:00:f6:b5:9d:77:c5:f1:fc:5f:ef:30:2b:
                    52:eb:be:4c:ff:e7:9a:e3:03:e3:1a:e0:f1:24:45:
                    13:55:cb:24:d0:ab:d1:7e:b6:03:e7:87:14:04:69:
                    26:1f:5e:c6:68:a1:06:e7:be:ae:1c:e6:74:33:b9:
                    02:49:05:6b:09:da:23:d9:45:1e:76:3c:c6:c5:99:
                    40:5e:de:61:26:49:00:71:57:0c:a9:39:2d:06:a8:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5C:44:88:AE:BC:D0:19:DA:0C:8E:3C:D7:11:23:EF:5C:B3:8F:8E
            X509v3 Authority Key Identifier:
                keyid:FC:4A:38:DA:AF:15:E8:28:43:73:FD:82:AE:59:B2:73:83:D4:A6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4A38DAAF15E8284373FD82AE59B27383D4A68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0546183c-d9ef-4c33-be99-e84bedb10b68/0/3130332e3133372e3134342e302f32332d3234203d3e20313338383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:81:80:25:ae:2f:21:08:ff:94:83:9b:55:48:90:61:9a:
         50:79:42:30:66:a3:84:79:21:ae:a3:03:68:a1:14:24:a6:b3:
         0b:c2:83:60:1a:ba:4d:fc:dd:2b:4f:15:31:27:48:59:94:7c:
         e7:e7:f6:60:0d:31:aa:e6:50:77:71:7a:ec:4f:46:9a:d5:33:
         60:3e:30:9f:49:da:b7:75:0f:4c:ef:1d:ae:86:2b:ac:ca:11:
         33:aa:d7:06:49:b8:0c:e2:c4:c2:c5:c4:79:52:b9:80:5d:18:
         07:21:ce:5b:55:41:ff:e6:03:b1:ab:69:b2:57:cf:21:8f:f5:
         72:bd:eb:05:cf:51:4f:c5:34:a5:cd:2c:91:ec:77:c5:66:e9:
         e7:75:38:c5:00:f5:e2:d7:52:7c:48:2a:1c:d3:08:9e:06:22:
         dc:4a:b9:23:fe:52:21:9d:74:1c:26:58:b3:92:6c:88:a6:4a:
         5c:93:18:f8:bb:d5:26:20:7e:be:25:da:be:2b:43:e9:71:ec:
         60:89:e7:78:4a:f2:24:15:80:ee:22:8e:ba:a4:e4:ef:a8:26:
         19:8f:cd:2f:03:9d:36:4d:2d:84:1a:d7:b4:2b:58:7d:d4:92:
         8c:ff:b1:94:d6:66:bb:8c:d8:9b:cf:44:e1:4c:90:c1:1a:00:
         8e:55:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 13:26:16 2024 by rpki-client on console-fra.rpki-client.org