Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa
File:                     3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa (raw, json)
Hash identifier:          reizZnbHONKEdch7NjVLI/Y6SPRaU0acq8ELVtJqimA=
Subject key identifier:   FE:19:29:58:7D:93:65:95:2B:59:07:B8:33:60:A5:50:A7:C5:30:92
Certificate issuer:       /CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
Certificate serial:       52FD40CE7272442582A2552BFC84D158781FAA76
Authority key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa
Signing time:             Thu 16 Nov 2023 09:00:33 +0000
ROA not before:           Thu 16 Nov 2023 08:55:33 +0000
ROA not after:            Thu 14 Nov 2024 09:00:33 +0000
asID:                     136121
IP address blocks:        103.154.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl
                          rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fd:40:ce:72:72:44:25:82:a2:55:2b:fc:84:d1:58:78:1f:aa:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383
        Validity
            Not Before: Nov 16 08:55:33 2023 GMT
            Not After : Nov 14 09:00:33 2024 GMT
        Subject: CN=FE1929587D9365952B5907B83360A550A7C53092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c8:9b:16:4d:dc:7d:f8:4e:47:94:6e:51:98:
                    3d:02:85:c0:08:b3:89:a0:14:bf:78:02:b1:b4:52:
                    e4:29:6e:16:38:99:f2:39:69:0d:51:12:d5:32:93:
                    51:c9:fb:b9:7e:14:ba:ee:37:cd:b0:bf:36:0e:48:
                    76:e2:97:5f:65:5a:54:77:b5:15:8f:31:f5:69:74:
                    73:4d:b4:ca:8b:6c:d5:cf:7f:e5:61:7c:73:e8:3f:
                    f2:bb:2d:b3:fe:21:12:57:4e:4b:15:8d:de:77:78:
                    36:13:b7:83:2f:96:d7:c4:46:bc:7d:f6:e3:34:a2:
                    0c:23:c8:b3:38:15:8d:af:28:9e:7d:08:4f:5f:c3:
                    ea:62:b7:99:fd:33:3f:aa:c2:51:fe:35:0e:ad:95:
                    73:9a:ad:1a:d1:d5:55:3f:06:fa:63:d6:72:c2:b0:
                    8a:23:75:e5:76:4f:0a:6e:8f:8e:51:25:e4:34:68:
                    b9:e7:26:fd:33:f7:2f:3d:e2:32:98:a4:ee:19:9c:
                    ad:23:50:fd:14:96:d4:d6:e9:9b:bb:c8:dc:75:89:
                    fa:28:2c:0b:00:0a:c3:da:96:7d:7a:83:71:86:5d:
                    90:fe:c2:93:55:b7:b9:ae:8e:c0:c4:e3:42:55:d1:
                    40:8c:11:12:0e:5e:7b:56:18:d1:43:41:81:10:59:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:19:29:58:7D:93:65:95:2B:59:07:B8:33:60:A5:50:A7:C5:30:92
            X509v3 Authority Key Identifier:
                keyid:94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/3130332e3135342e3233302e302f32332d3233203d3e20313336313231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:9d:38:51:cf:46:89:ae:0a:9c:74:37:26:4c:de:75:ba:bb:
         e0:e3:54:67:2e:46:3f:db:ab:5b:e2:94:90:9d:b2:d8:cf:2d:
         33:23:08:2d:14:ec:b9:e4:03:72:31:1b:55:4e:be:30:55:cb:
         c8:ef:d6:d5:85:d9:e8:9d:93:fc:f2:a0:52:64:d5:5b:60:bf:
         50:4c:76:1e:76:1b:e2:39:3b:20:51:29:89:d2:6e:4a:f4:84:
         0c:8e:98:09:18:02:e3:69:15:23:a1:7e:d2:01:99:9c:95:28:
         40:4b:05:9a:3c:e1:eb:69:f7:b1:e2:0f:e3:cf:d0:46:d6:b9:
         31:2b:1f:59:c6:a0:e6:c4:b0:bf:29:56:3c:2f:c7:5e:69:39:
         9f:51:13:67:bf:91:ed:83:9f:69:e0:f0:bb:7c:15:e4:ef:c3:
         11:f7:0c:6d:d1:9f:e6:5e:ef:85:24:3a:fd:cf:9f:69:c5:2f:
         58:29:c1:9a:dd:86:29:d3:47:0c:e0:72:fb:da:b7:61:75:a9:
         20:98:60:8a:02:ef:b5:50:2a:de:27:9c:5e:7c:e0:47:fa:ef:
         d3:29:13:f2:7f:83:de:c1:12:91:29:6a:82:78:75:e1:88:76:
         0c:70:63:8a:3f:b7:b9:ef:c8:41:bf:26:24:9b:0c:f5:b9:8f:
         6c:5f:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org