Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa
File:                     3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (raw, json)
Hash identifier:          T6yKct+rik7nVDoRlgHJo4H5NaJ5jLgCDOKAYElvC2U=
Subject key identifier:   4A:F8:2B:E7:74:6F:69:24:A2:AC:4C:A0:22:C9:B7:37:B9:DB:D9:C6
Certificate issuer:       /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
Certificate serial:       1E3E788FB6A1E608E2DA4879DE23D9A1D28DF31B
Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa
Signing time:             Mon 31 Jul 2023 00:02:32 +0000
ROA not before:           Sun 30 Jul 2023 23:57:32 +0000
ROA not after:            Mon 29 Jul 2024 00:02:32 +0000
asID:                     139425
IP address blocks:        103.144.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl
                          rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3e:78:8f:b6:a1:e6:08:e2:da:48:79:de:23:d9:a1:d2:8d:f3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
        Validity
            Not Before: Jul 30 23:57:32 2023 GMT
            Not After : Jul 29 00:02:32 2024 GMT
        Subject: CN=4AF82BE7746F6924A2AC4CA022C9B737B9DBD9C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:45:93:99:bd:4f:19:d7:7a:ae:a5:19:75:
                    1f:35:a6:51:13:0e:f7:89:dc:2f:1c:80:d2:53:d9:
                    72:9d:a9:bf:47:23:8a:c2:ee:ad:2c:61:d8:3a:15:
                    9b:b2:2f:16:bf:4a:de:55:ae:40:dc:94:57:18:91:
                    42:a0:a6:2d:9a:1c:b0:26:0f:60:fe:7d:4d:84:7f:
                    f3:3d:38:d7:3c:28:5d:79:68:0c:8d:b9:82:79:5f:
                    14:56:96:1b:e9:05:74:3c:8d:d9:60:d1:5e:62:b1:
                    45:fd:0d:f9:5a:c3:48:4b:ad:fe:d2:16:f2:e7:58:
                    cb:0d:5b:77:e8:2e:ce:7f:15:1e:41:8f:55:93:a3:
                    42:96:d9:7a:33:75:93:5e:68:77:19:53:fc:72:0a:
                    33:5a:3e:49:14:68:9b:95:60:96:ed:f8:0d:70:6b:
                    6b:7a:f9:9f:0f:11:4b:b3:d8:68:6a:01:c8:14:a5:
                    79:c5:9f:cd:13:2c:6a:67:0c:dd:54:ba:da:e7:96:
                    e7:51:38:72:b0:7d:e5:4d:c4:52:e7:91:ab:a6:c8:
                    b0:ce:74:f2:ee:a2:d8:51:4c:c1:be:36:5e:31:b5:
                    47:63:0d:c2:c9:c8:92:8c:d3:10:28:1b:19:12:88:
                    35:ce:90:7b:3b:09:34:12:39:92:88:60:7e:d2:5b:
                    e3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F8:2B:E7:74:6F:69:24:A2:AC:4C:A0:22:C9:B7:37:B9:DB:D9:C6
            X509v3 Authority Key Identifier:
                keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:56:61:37:dc:ed:59:a7:5f:3d:69:1f:b2:3c:ad:62:57:f0:
         2c:36:66:8f:06:29:c3:6c:3e:11:eb:55:91:4e:81:a5:c2:16:
         41:d9:85:df:d9:95:9c:c6:54:c1:4b:73:90:f8:23:d7:99:22:
         62:d3:48:76:2d:44:50:21:84:0d:bc:dc:ca:65:01:05:06:c1:
         9a:c8:6f:88:04:0e:8e:8d:51:5d:eb:06:9c:49:0b:3d:cb:31:
         d9:d6:ff:79:37:aa:db:b9:95:fa:2f:4c:be:c3:7c:c2:71:24:
         22:66:6b:aa:1b:cb:db:b6:02:f3:3f:3f:7c:72:c7:9b:a7:7f:
         aa:1b:ed:09:f9:00:44:67:b5:1a:22:7d:d7:22:4d:94:e0:47:
         84:42:40:c5:4d:b0:30:99:50:b1:c9:6b:d6:a9:be:aa:65:25:
         9d:07:3d:04:3f:15:85:b9:fb:7a:d9:ef:49:9e:66:3e:b2:cd:
         82:d7:c9:64:2d:49:e3:4c:86:34:46:d7:f5:d8:c9:fe:63:a5:
         d3:0a:94:20:01:b2:44:5f:5d:a9:65:d9:b0:af:4b:26:b0:e0:
         cc:1b:7f:1e:a2:bd:29:c0:3b:e0:77:de:09:7f:61:76:18:ee:
         9c:a0:99:2f:2b:63:66:6c:b8:f9:c0:6c:69:69:f3:ec:b8:52:
         38:8a:2f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 00:10:35 2024 by rpki-client on console-fra.rpki-client.org