Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa
File:                     3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          bJ98Iqs/5dstISBU6icQBhdFSwzyMfXqJH4V9McGY7U=
Subject key identifier:   3A:E5:C4:5C:A0:90:2E:E7:F2:E5:EB:B0:47:E1:5C:56:26:C2:05:BC
Certificate issuer:       /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
Certificate serial:       3087B4A245237A28149B6D8F0C4B8300CFC31DFB
Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 17 Sep 2023 10:00:31 +0000
ROA not before:           Sun 17 Sep 2023 09:55:31 +0000
ROA not after:            Sun 15 Sep 2024 10:00:31 +0000
asID:                     17995
IP address blocks:        103.139.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl
                          rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 03:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:b4:a2:45:23:7a:28:14:9b:6d:8f:0c:4b:83:00:cf:c3:1d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799
        Validity
            Not Before: Sep 17 09:55:31 2023 GMT
            Not After : Sep 15 10:00:31 2024 GMT
        Subject: CN=3AE5C45CA0902EE7F2E5EBB047E15C5626C205BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c4:a4:25:fb:f7:55:78:f4:a1:9f:02:c4:0d:
                    15:4f:83:a1:c3:ae:77:a4:82:f7:8f:c7:0a:fb:18:
                    ff:34:c8:fa:8b:1b:37:39:76:bd:29:2e:63:c6:8d:
                    f5:b6:32:b4:15:5a:d3:58:20:8b:3c:33:b3:ed:a0:
                    41:31:c4:cc:eb:a1:89:90:03:e6:0d:59:a8:ed:74:
                    4f:f4:a7:55:f7:a0:e5:5d:08:98:a4:dd:be:4d:b6:
                    e6:fb:3e:bb:65:d8:93:47:c6:72:28:dd:ef:33:05:
                    76:ca:33:ab:9c:8b:7b:1b:b6:91:17:5c:d8:c4:d2:
                    07:a5:ee:69:4a:9e:74:cb:e8:50:2a:bc:2e:4b:7b:
                    41:34:7b:cb:9f:70:75:12:9f:72:98:a1:f3:47:ea:
                    a6:27:1d:bd:d5:4e:61:84:b8:03:27:a3:0a:b9:11:
                    62:3b:8b:60:a3:99:e6:c0:03:3f:3a:f4:fb:5c:82:
                    ab:b4:64:4e:79:5d:7b:99:e1:da:6e:aa:84:aa:74:
                    39:3a:89:01:79:64:c9:5c:1c:e4:cb:91:67:98:b0:
                    1f:96:00:82:60:da:bc:32:c8:05:0f:01:bb:63:5c:
                    f7:10:ad:1d:04:1d:36:ca:78:17:91:7e:89:82:90:
                    83:c9:79:3d:00:4e:86:ce:06:5a:49:92:e4:62:1c:
                    b8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:C4:5C:A0:90:2E:E7:F2:E5:EB:B0:47:E1:5C:56:26:C2:05:BC
            X509v3 Authority Key Identifier:
                keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/3130332e3133392e34362e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:cb:91:a7:18:a1:e5:be:0f:4c:d7:cc:a5:cb:d5:5f:19:
         0a:7c:cb:67:71:7f:04:70:b0:71:c3:57:d0:c8:ce:0a:ce:98:
         2a:c0:50:b3:f0:38:0b:41:8c:3e:3f:3d:cb:92:16:5b:2f:c7:
         99:08:f8:01:27:86:c8:a8:23:dd:8f:45:fa:12:a8:5f:48:8d:
         69:e8:33:4c:49:b8:a8:e9:6c:eb:19:0e:78:8a:c1:6d:fb:5c:
         fd:0c:8b:6b:c6:77:77:28:23:9c:a7:09:32:0a:36:9e:10:2a:
         25:92:78:5e:0f:47:7d:ee:e5:8a:43:3a:a7:a3:1a:d8:4b:da:
         1f:8b:23:a2:cb:14:8f:c9:e2:04:90:e3:2f:ac:c9:42:f2:c5:
         f5:a9:c1:8b:95:44:7b:5f:16:c4:11:69:17:d8:15:d7:7a:5c:
         cd:9b:9f:09:76:30:c5:cc:c6:60:1f:3f:de:1a:18:79:c8:75:
         72:9a:4f:ea:cf:e5:08:5d:ba:03:82:93:db:cb:03:79:60:9b:
         5c:ba:63:00:f6:ae:1e:33:bb:7d:7a:2b:95:38:99:f3:bd:d8:
         df:9f:e7:e6:8a:57:37:44:69:47:ba:5b:d0:d5:e0:3b:b0:6c:
         5f:2b:b1:06:b8:d1:8d:7a:e9:a4:12:b1:5f:35:22:df:eb:db:
         1a:c5:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:50 2024 by rpki-client on console-ams.rpki-client.org