Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa
File:                     3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          93STvYwP33sQVD8uCooaJ5TZI+YUUwkh4BNTAhbmnIU=
Subject key identifier:   41:C6:84:9C:9E:62:7F:03:F1:7A:3A:3A:4B:A0:F4:59:64:B6:DA:77
Certificate issuer:       /CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
Certificate serial:       060563F83E13A2BB59B46CE0989F0058D0B72A96
Authority key identifier: B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa
Signing time:             Thu 16 Nov 2023 08:00:00 +0000
ROA not before:           Thu 16 Nov 2023 07:55:00 +0000
ROA not after:            Thu 14 Nov 2024 08:00:00 +0000
asID:                     134658
IP address blocks:        103.210.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl
                          rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:05:63:f8:3e:13:a2:bb:59:b4:6c:e0:98:9f:00:58:d0:b7:2a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11E5C9B4E322460FD701387F25B9EAEFE67C3EC
        Validity
            Not Before: Nov 16 07:55:00 2023 GMT
            Not After : Nov 14 08:00:00 2024 GMT
        Subject: CN=41C6849C9E627F03F17A3A3A4BA0F45964B6DA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:99:53:c5:b7:c6:2b:d7:0c:e5:31:1a:c6:
                    c0:8f:8c:b1:04:dd:f0:d7:41:62:5e:36:43:38:25:
                    af:76:5f:24:9e:65:2e:e2:23:b0:d0:e4:e3:92:f6:
                    f0:7d:ad:b8:e8:6c:7a:a6:f1:f5:a5:fa:83:47:42:
                    08:8e:4d:fd:f7:79:75:2d:30:62:11:7e:66:9d:6a:
                    f5:7c:86:d4:69:53:ed:b1:71:b5:18:c7:f3:89:08:
                    62:43:83:0a:89:c9:34:13:2d:60:8c:a5:58:db:95:
                    e3:0e:a7:ec:c6:89:0a:54:44:bd:7e:38:e5:69:bf:
                    d5:c9:e0:3f:4b:74:4b:0d:e1:9b:e6:f3:9e:e2:81:
                    e1:b6:c9:db:6a:0a:d6:ae:4c:3f:78:7f:07:d6:ae:
                    54:cc:12:80:a3:50:37:9c:3c:86:25:ea:30:13:c6:
                    6f:9d:80:8f:8a:93:0d:7b:83:bc:7d:dc:6e:ba:3e:
                    6c:4c:53:c4:84:8e:d1:a0:d9:26:35:5c:4b:9a:b1:
                    b4:26:96:77:6d:b0:3d:d3:7e:4c:23:3a:1f:27:72:
                    a1:29:f5:5d:3a:1f:ee:d1:e5:a3:ea:c1:47:19:26:
                    25:d1:d9:b6:e8:bf:9e:d4:f5:16:2f:30:62:98:30:
                    3e:38:15:f1:eb:c6:35:08:d8:63:bc:bc:32:4e:fb:
                    b1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C6:84:9C:9E:62:7F:03:F1:7A:3A:3A:4B:A0:F4:59:64:B6:DA:77
            X509v3 Authority Key Identifier:
                keyid:B1:1E:5C:9B:4E:32:24:60:FD:70:13:87:F2:5B:9E:AE:FE:67:C3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11E5C9B4E322460FD701387F25B9EAEFE67C3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d487360-8735-41d7-97a8-dbb34d79eff4/0/3130332e3231302e3132312e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ab:35:2f:89:37:c3:68:45:9b:13:29:af:90:04:75:bb:d8:
         43:24:ed:2a:3a:0d:22:38:1c:bc:35:20:63:9d:3b:95:b3:12:
         bc:aa:32:b2:a6:86:c9:b6:c4:89:c4:65:2d:e8:ad:37:80:bf:
         0a:8e:f0:ae:95:5a:a1:a5:94:a7:cf:3f:b0:e5:bd:5b:ed:9e:
         26:e7:dd:de:e2:2f:2e:e1:59:b6:c3:4e:cb:43:ac:08:7b:22:
         03:d5:be:26:46:7c:95:be:54:89:a7:46:3c:ca:40:92:a4:de:
         31:7a:f7:1a:ed:9c:8d:3e:73:b7:15:61:bc:69:a0:34:a7:5e:
         30:79:a1:ad:69:34:5b:16:5a:7f:4f:4e:1b:02:28:8c:6d:de:
         14:30:9a:13:2b:37:54:3d:18:91:a6:90:f2:eb:f7:55:f6:f6:
         4e:68:8f:8b:a7:04:8b:ae:c2:2f:97:53:60:6f:12:1f:00:03:
         86:4a:e5:10:bd:af:b3:58:9e:b7:ef:73:d0:b0:9d:6a:c6:94:
         e9:95:2d:12:3a:85:30:79:bc:ca:8a:56:a0:1e:11:6a:2d:84:
         af:3e:5a:24:ae:97:86:af:0b:80:00:24:b5:f4:d1:f2:39:4b:
         ca:ee:70:ee:6b:b1:6f:69:77:a0:42:d8:42:c5:41:23:a5:07:
         48:d4:47:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:09:21 2024 by rpki-client on console-ams.rpki-client.org