Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa
File:                     3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          tmgxCvdv6St6Kn+L3Wphcsye6a7NOrVTnnRbsHk776U=
Subject key identifier:   50:9E:19:A2:39:86:C3:BA:E4:95:08:6E:FD:AA:D5:71:F7:BD:11:43
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       7FF0455CBB0BD7444C413302D81F0142184FE60B
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa
Signing time:             Mon 31 Jul 2023 00:09:28 +0000
ROA not before:           Mon 31 Jul 2023 00:04:28 +0000
ROA not after:            Mon 29 Jul 2024 00:09:28 +0000
asID:                     135451
IP address blocks:        103.65.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f0:45:5c:bb:0b:d7:44:4c:41:33:02:d8:1f:01:42:18:4f:e6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jul 31 00:04:28 2023 GMT
            Not After : Jul 29 00:09:28 2024 GMT
        Subject: CN=509E19A23986C3BAE495086EFDAAD571F7BD1143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:da:81:e3:43:8b:3b:b1:b5:cc:16:a6:ef:
                    a5:ed:06:e4:ef:69:dd:7c:b8:b2:4c:3f:44:92:cd:
                    76:46:f1:44:5a:f7:44:e2:c9:6a:dd:32:de:6e:f5:
                    6f:44:de:6d:7a:e9:1c:9e:bf:d2:c6:9e:a2:f4:57:
                    82:a3:d6:78:ee:98:31:40:eb:05:fc:eb:4f:a6:d0:
                    da:87:50:30:bf:33:a8:39:a0:ab:48:f3:bb:87:a8:
                    ce:00:c8:68:b5:e8:3c:45:19:7b:87:40:4d:06:e1:
                    ad:5c:c5:c4:d7:f8:9e:a3:e4:c7:be:6c:6f:a8:32:
                    22:c5:f7:8e:6b:04:05:20:62:e4:2a:36:19:b6:7f:
                    0b:be:5c:b9:21:d6:70:e6:8c:08:e5:62:f5:fc:23:
                    10:b5:9c:03:e7:b9:d4:94:5f:28:40:a1:45:40:10:
                    7b:7d:5e:74:46:6b:10:4e:be:99:e6:40:8e:e6:2b:
                    29:cc:2d:84:66:a6:af:84:8f:3e:ea:8d:68:81:73:
                    05:28:a7:f7:17:ca:dc:f0:f0:9a:9b:e7:47:53:9c:
                    8f:8d:a6:94:ee:2c:bd:c1:fc:93:ef:77:b6:15:b3:
                    f7:44:35:72:a0:8d:7e:70:e9:65:22:75:48:cc:37:
                    e1:b8:bd:e3:29:24:36:61:55:8f:f7:06:6a:c6:95:
                    55:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:19:A2:39:86:C3:BA:E4:95:08:6E:FD:AA:D5:71:F7:BD:11:43
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:84:ed:97:cd:1a:dd:35:5a:35:25:c3:e5:a5:b2:3e:8a:c1:
         81:71:9f:07:8a:f0:47:5a:39:a4:07:6e:b9:dd:e0:08:42:c9:
         0e:46:b3:5f:8e:aa:96:34:86:f8:02:9f:b1:b0:85:4e:94:76:
         ab:4e:17:4e:88:4f:03:58:90:87:8c:c3:c3:30:89:79:5b:32:
         af:6e:82:44:3e:95:df:e4:f5:3c:80:a0:26:fb:97:d9:60:b6:
         95:88:16:e5:62:fa:dc:bf:62:dd:7a:9c:3b:be:45:15:78:a0:
         5c:eb:96:65:61:7d:b4:9d:46:aa:98:11:04:e8:e8:bc:ed:54:
         cc:fd:7f:87:3a:56:8d:bd:30:50:09:e8:90:c1:3a:e9:2d:db:
         9c:f6:67:c3:24:fc:18:6f:1b:38:f1:d1:1d:dc:16:ff:7a:68:
         1c:bc:10:46:1e:dc:77:7a:a6:e7:af:ec:c5:18:be:cd:97:4c:
         a2:25:c3:51:47:5d:a1:d4:81:e8:84:20:18:1c:40:71:dd:ec:
         32:89:32:0e:30:5f:b4:35:be:56:6f:a9:40:3e:d7:d9:eb:e8:
         26:70:8b:4f:89:f5:f1:dd:54:c1:7e:d7:45:e8:b8:6f:15:e3:
         0e:8d:dc:0a:c8:5a:dc:01:71:7e:c9:b3:53:08:b5:6a:68:8f:
         4c:3c:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org