Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa
File:                     3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          f3xc9QY+XKSDQ09BIL5EmE9pqqX3BS/XyvVTI8Q6Msc=
Subject key identifier:   C1:D5:A9:1D:34:FA:91:BF:AE:4F:61:41:5C:E0:CE:E6:3A:D8:07:F4
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       5B206B3F4D4AAD575E3F766FE071812F82BA213B
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa
Signing time:             Mon 31 Jul 2023 00:02:35 +0000
ROA not before:           Sun 30 Jul 2023 23:57:35 +0000
ROA not after:            Mon 29 Jul 2024 00:02:35 +0000
asID:                     46026
IP address blocks:        103.135.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:6b:3f:4d:4a:ad:57:5e:3f:76:6f:e0:71:81:2f:82:ba:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jul 30 23:57:35 2023 GMT
            Not After : Jul 29 00:02:35 2024 GMT
        Subject: CN=C1D5A91D34FA91BFAE4F61415CE0CEE63AD807F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:90:31:aa:20:34:2e:16:a1:32:c2:57:e6:
                    b0:53:e9:83:20:22:6f:da:51:b1:88:56:26:7d:95:
                    a7:14:e2:0e:55:e0:b0:03:07:e2:f6:47:93:34:fa:
                    5a:c2:af:00:36:d0:fb:79:22:53:06:2a:f4:68:60:
                    0a:c1:ed:8a:64:99:ea:a2:fd:f7:8d:26:bd:c8:8b:
                    98:90:9a:b0:7e:ae:f7:15:75:ef:ad:d5:53:0f:6b:
                    c8:16:56:0c:73:5b:8b:10:af:fd:b4:b8:c6:49:5e:
                    d0:44:d2:5f:4e:db:24:46:1e:64:4d:86:fb:52:03:
                    ce:24:f3:c4:27:ea:f0:86:7a:80:73:36:7f:07:1e:
                    3f:d9:49:b9:ae:01:14:3e:29:b3:c2:f1:41:d5:cf:
                    ae:55:f7:f0:21:d3:0c:fd:f8:6e:f8:6c:11:dc:c4:
                    b9:61:ca:39:bd:86:3c:f1:61:8e:11:64:53:41:ff:
                    d0:da:07:c1:df:9a:7a:cd:27:61:9b:d1:27:17:ac:
                    21:62:f1:df:d6:bc:70:53:21:eb:46:c8:71:19:62:
                    c9:38:76:24:44:a2:93:73:33:ed:d6:60:56:99:83:
                    26:03:7b:9d:35:29:ce:d4:60:90:bd:a7:6b:c3:f1:
                    ad:9f:f4:e2:66:36:f8:5a:5b:13:6d:d7:21:ad:eb:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D5:A9:1D:34:FA:91:BF:AE:4F:61:41:5C:E0:CE:E6:3A:D8:07:F4
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37332e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:24:82:8e:03:4f:cc:f5:69:3d:69:cb:35:e0:3b:4c:da:e3:
         ea:17:9c:e4:57:8a:4a:fd:a8:30:9d:de:55:c2:0b:84:7a:d0:
         fa:d4:08:c9:e6:fc:71:ce:ba:30:62:c6:80:9a:47:81:40:44:
         d8:74:34:78:8b:77:a2:df:6b:52:06:ce:d8:cc:e3:bd:f2:f3:
         9e:56:e1:84:a8:8d:0a:af:b3:8e:31:c8:8d:f9:a8:f7:c3:15:
         4b:36:03:8c:e9:62:02:4d:f7:d6:f0:2f:00:fa:35:77:61:f2:
         17:c9:f3:c6:f7:3e:6e:dd:ec:bc:3c:3a:48:5d:7f:a1:68:0b:
         35:42:8d:31:8e:ec:cd:0f:cf:b0:a2:bc:54:dc:62:fe:d0:18:
         11:ec:75:89:1d:67:37:d4:c5:58:15:fc:a8:13:63:d8:60:95:
         9a:3b:91:2b:8e:97:e3:b1:ba:b9:66:74:23:37:88:88:e6:a1:
         8b:86:05:2d:79:d9:51:f4:d6:4e:a0:e7:a7:e1:6d:4a:cc:30:
         16:90:36:65:80:21:5d:51:90:93:ea:6f:d6:1d:b7:7b:89:40:
         20:b6:5e:47:9d:77:d1:50:c2:aa:a8:fc:37:07:40:7a:92:c9:
         e7:43:6e:6b:c9:31:ad:0b:c3:4f:9e:c4:8d:74:b6:14:10:cc:
         04:75:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 05:34:30 2024 by rpki-client on console-ams.rpki-client.org