Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          gGZP+rpRJYoNqx6hBHbvNYirWhhUIWGaIEesRlltJc0=
Subject key identifier:   66:6A:72:AE:BE:BB:66:5C:A1:8B:9E:B2:77:79:54:0A:BF:19:7D:3D
Certificate issuer:       /CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A
Certificate serial:       252E1F7C67EBB9E77A4DF39B9217C0182F478B33
Authority key identifier: 10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa
Signing time:             Mon 31 Jul 2023 00:13:38 +0000
ROA not before:           Mon 31 Jul 2023 00:08:38 +0000
ROA not after:            Mon 29 Jul 2024 00:13:38 +0000
asID:                     136052
IP address blocks:        103.214.112.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl
                          rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 15:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2e:1f:7c:67:eb:b9:e7:7a:4d:f3:9b:92:17:c0:18:2f:47:8b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1095EA78703826ACF5FA2241EB2B1B66A2C4485A
        Validity
            Not Before: Jul 31 00:08:38 2023 GMT
            Not After : Jul 29 00:13:38 2024 GMT
        Subject: CN=666A72AEBEBB665CA18B9EB27779540ABF197D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:36:71:2c:03:f4:34:6c:55:ac:85:0c:35:
                    6e:ed:53:c1:7e:c0:6c:c7:5f:63:3b:84:6a:5e:e0:
                    3f:ea:f7:72:db:7c:e5:9d:4b:c1:bd:35:bb:41:ce:
                    d4:46:1e:6d:8c:21:c0:16:f4:54:e3:ee:b5:50:43:
                    fc:38:b3:96:33:c2:ae:e5:89:29:c6:5b:76:ee:5e:
                    df:be:3b:75:8b:0c:68:23:a1:f8:50:81:e1:8a:dc:
                    f0:31:7a:e7:1d:2c:d1:05:8e:14:b2:45:e1:86:75:
                    85:28:ec:f1:46:c9:09:09:8d:b3:69:01:f6:27:c2:
                    6c:9d:cf:5f:35:b7:e2:c7:24:6f:06:e4:e6:cf:52:
                    da:aa:51:40:09:c5:8c:1a:01:d1:ce:0d:aa:0c:8b:
                    86:1b:26:ff:24:63:5d:14:0a:49:51:b6:5f:f9:3c:
                    b7:45:b1:e9:73:ae:20:af:8b:db:d4:64:d3:85:6b:
                    2a:22:89:5b:c2:1e:7c:cd:d9:54:0b:9b:32:a4:1d:
                    5a:f7:eb:ad:d6:9b:b1:8d:d8:35:65:66:52:df:0b:
                    b2:b1:e5:21:48:82:6e:34:44:d5:eb:cc:5e:0a:2d:
                    55:62:6c:a2:df:d7:af:bd:f4:6f:69:58:66:4d:d2:
                    4e:2e:86:86:66:62:28:a8:7a:c5:6f:72:46:dd:9f:
                    84:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:72:AE:BE:BB:66:5C:A1:8B:9E:B2:77:79:54:0A:BF:19:7D:3D
            X509v3 Authority Key Identifier:
                keyid:10:95:EA:78:70:38:26:AC:F5:FA:22:41:EB:2B:1B:66:A2:C4:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1095EA78703826ACF5FA2241EB2B1B66A2C4485A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/595dd573-31f4-416c-a1b7-698d6b1697ad/0/3130332e3231342e3131322e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:13:f7:62:51:80:ec:ce:7d:80:5b:35:0c:ae:08:1f:18:
         bd:5a:44:bd:88:78:41:d0:c5:67:f1:dd:16:5f:35:b9:10:a6:
         60:1a:bd:58:02:5d:31:c9:70:dc:1d:81:23:50:e8:e6:9b:a5:
         26:5c:5e:79:bf:14:7f:50:09:15:4e:db:40:f7:84:f6:ab:ec:
         50:b1:85:76:31:93:bf:83:36:79:4c:c2:d6:70:89:05:c7:c6:
         74:aa:d9:88:5a:8b:63:f0:4e:0a:3f:05:99:9a:2a:4d:23:be:
         16:bb:0b:fa:06:3a:5b:f6:f7:c9:96:55:c9:93:f7:b8:f1:ac:
         4d:f6:84:10:f8:48:1a:60:84:ca:a1:ad:a0:91:09:1e:fb:ab:
         ae:68:b2:ed:a6:c3:c6:af:0e:76:5f:d6:a8:8d:70:b6:47:28:
         55:06:13:f3:28:51:29:58:f5:30:07:a0:47:8c:27:f6:4b:78:
         e6:d6:c2:39:7d:0f:35:65:8a:99:ac:79:93:a4:05:16:e4:07:
         22:b2:2c:17:34:09:59:77:fa:b2:aa:f5:76:d1:3e:f9:84:2a:
         f2:38:4b:e2:53:21:38:cb:04:e5:51:61:82:75:6a:20:aa:d6:
         bc:a6:1c:6d:51:f6:5c:df:94:a6:e2:f0:d4:93:eb:c1:7b:90:
         73:85:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 11:19:52 2024 by rpki-client on console-ams.rpki-client.org