Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          92PUeRgr/PdQEUP4i2ZvRoG4s2iOoHixbIIhUgrJ6ts=
Subject key identifier:   F2:04:8E:0D:49:2F:DE:7C:59:43:71:F5:38:18:E8:6A:4A:6C:04:99
Certificate issuer:       /CN=13BAA0DF960A8AD207C380328B5666205D55F24C
Certificate serial:       717B4F8E7E1F959E6CC19A65DB64A43922B5B297
Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 10:01:30 +0000
ROA not before:           Fri 01 Sep 2023 09:56:30 +0000
ROA not after:            Fri 30 Aug 2024 10:01:30 +0000
asID:                     17995
IP address blocks:        103.169.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl
                          rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 04:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7b:4f:8e:7e:1f:95:9e:6c:c1:9a:65:db:64:a4:39:22:b5:b2:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C
        Validity
            Not Before: Sep  1 09:56:30 2023 GMT
            Not After : Aug 30 10:01:30 2024 GMT
        Subject: CN=F2048E0D492FDE7C594371F53818E86A4A6C0499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:9a:56:b0:81:7c:1b:31:e4:8f:db:b8:a0:
                    28:12:e6:f3:99:52:5e:30:91:26:35:31:f5:ea:07:
                    83:1b:c1:ff:82:5f:f3:a0:57:29:59:81:1d:13:7c:
                    99:22:d3:93:64:21:cd:93:4a:5c:7b:72:43:6b:fa:
                    7d:c2:fc:d1:04:5c:43:49:0b:4e:dd:e2:32:4b:d2:
                    77:fd:23:4a:a7:68:f6:ce:b2:14:0e:f7:c2:f8:ef:
                    bc:c8:f4:99:6c:e8:ee:f5:9d:36:82:4f:d1:ea:ef:
                    c1:13:81:18:8e:ac:d8:51:e1:46:15:05:59:a3:cb:
                    57:4a:ee:69:99:90:49:77:1a:35:03:48:08:58:84:
                    f4:c9:e1:0c:df:b4:0f:e7:e8:35:69:ea:ca:49:ca:
                    10:fa:5c:dd:e2:5f:34:49:3b:01:0c:32:12:4b:00:
                    49:10:94:15:28:50:93:59:39:5e:ce:6c:fa:76:a2:
                    a0:e2:97:8a:9c:70:46:ad:9f:22:b2:76:d9:73:b1:
                    6b:29:63:a2:0f:d9:61:50:b9:3a:2f:1c:60:3b:64:
                    93:7d:88:87:6f:39:9f:f3:8e:3c:c4:3c:15:f3:14:
                    a8:b5:86:98:0d:48:8d:f0:b7:5e:b4:bb:2e:e8:8f:
                    d8:b3:14:2b:27:86:e8:53:2a:39:ba:07:d2:a1:38:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:04:8E:0D:49:2F:DE:7C:59:43:71:F5:38:18:E8:6A:4A:6C:04:99
            X509v3 Authority Key Identifier:
                keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:75:23:17:2e:a8:db:64:8a:7c:55:d6:32:af:93:e1:e9:
         81:fe:99:8c:90:20:8a:51:89:c0:45:8e:35:e0:28:22:3c:65:
         62:25:6b:56:60:a3:c9:16:6f:df:cd:e8:bc:5f:f3:de:20:fc:
         7a:e7:94:58:25:95:a7:af:62:4a:84:5a:aa:a5:87:53:85:a9:
         f8:23:63:8f:31:52:65:8c:1c:17:c0:c5:cd:09:5d:45:ad:0d:
         96:17:cf:4e:29:4b:7d:29:91:28:ed:bc:29:48:70:2c:00:6b:
         c1:57:9d:a5:fe:47:55:55:25:af:fc:71:f6:bc:2b:4b:66:b0:
         65:77:df:f9:50:8c:dd:a8:89:5e:df:81:0b:e1:1e:73:50:74:
         0a:9e:34:fe:da:65:39:4a:3b:c1:30:59:bc:f4:45:28:49:bb:
         35:49:6b:d8:63:b5:68:53:2e:c1:02:d1:94:be:85:74:3d:bd:
         1c:3f:ec:69:e1:fb:45:cd:aa:52:5d:05:e6:cd:2b:22:07:9a:
         3a:d0:0b:21:6f:9a:ee:0d:b6:9c:c2:39:01:58:52:34:d2:f5:
         3c:9c:65:23:98:0f:4e:57:be:5f:9f:30:ba:96:fc:8d:cc:e6:
         84:1f:50:8c:af:52:f1:63:69:ef:f1:56:99:5d:4d:44:df:10:
         27:6a:b5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:45 2024 by rpki-client on console-ams.rpki-client.org