Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa
File:                     3130332e35342e302e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          XdzGNZSD6Dstux5d8o6J7itDTxcfkk6PFjXTU4NNbz0=
Subject key identifier:   62:54:A3:22:5E:98:3E:73:0A:12:F4:B4:C2:A3:4D:63:A9:2C:8C:A0
Certificate issuer:       /CN=1FA59BCEE428AFC03264229113A5539024697A14
Certificate serial:       531ABB453672C85ECDFCFE4BB3017BFB2E665B67
Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa
Signing time:             Mon 31 Jul 2023 00:07:15 +0000
ROA not before:           Mon 31 Jul 2023 00:02:15 +0000
ROA not after:            Mon 29 Jul 2024 00:07:15 +0000
asID:                     55697
IP address blocks:        103.54.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl
                          rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1a:bb:45:36:72:c8:5e:cd:fc:fe:4b:b3:01:7b:fb:2e:66:5b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14
        Validity
            Not Before: Jul 31 00:02:15 2023 GMT
            Not After : Jul 29 00:07:15 2024 GMT
        Subject: CN=6254A3225E983E730A12F4B4C2A34D63A92C8CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dc:e8:fd:5b:06:d9:6f:e1:21:8a:09:69:35:
                    f2:29:94:cd:3b:b2:de:d8:d9:36:0d:52:9f:c6:a8:
                    a4:05:cf:1e:04:c9:e3:e0:1d:80:2f:33:8f:9b:9d:
                    71:78:14:aa:ef:47:f9:17:fa:a9:bd:45:da:c1:8f:
                    6c:b3:5a:39:2f:aa:ff:54:1c:0f:9d:ac:e8:7e:c2:
                    6c:5d:cc:df:33:8f:10:62:df:cf:5e:6d:af:1c:cd:
                    2e:20:62:47:93:74:e1:83:cd:3f:34:e6:6a:a9:cd:
                    6f:2c:87:2e:aa:84:58:99:7b:5b:86:81:59:ca:e7:
                    a0:4a:73:d5:3d:ad:78:7b:2d:90:28:f3:bf:34:6e:
                    15:7e:95:48:d8:9b:07:80:04:97:0a:7c:eb:b2:8a:
                    85:49:2d:ec:63:ce:ab:7a:bc:96:0c:53:5e:c2:35:
                    4b:b7:37:a7:a8:aa:b6:6c:3a:0f:ee:a7:47:e1:e6:
                    19:cc:b2:04:30:4a:16:82:6c:5b:99:65:a9:1c:23:
                    e0:07:ea:1b:d8:df:6f:98:d0:2e:9b:90:b5:3c:f1:
                    d0:e9:c1:65:fe:80:0b:b8:b0:bd:b1:e5:a4:9f:e7:
                    e2:fb:62:d3:19:00:db:c7:ec:dd:16:83:bc:2f:a2:
                    42:07:6b:9a:aa:a3:b4:26:22:f8:7a:fd:f0:5e:a6:
                    6c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:54:A3:22:5E:98:3E:73:0A:12:F4:B4:C2:A3:4D:63:A9:2C:8C:A0
            X509v3 Authority Key Identifier:
                keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:81:7a:7c:44:8e:56:88:c4:55:f3:f3:b9:d8:0b:17:f5:
         f4:25:d6:ee:eb:42:79:87:c4:96:9a:56:21:ee:db:05:93:35:
         85:3b:20:81:7b:99:6e:4f:dd:38:5b:61:bb:ec:7c:59:71:18:
         74:b4:86:e0:77:f8:79:dd:47:7f:9c:4b:37:c4:95:83:d5:db:
         2b:29:3f:70:a1:04:ab:47:90:5d:82:7f:fa:bf:f8:b1:d2:fe:
         cb:13:2b:ee:93:e2:c6:4c:9a:38:d7:83:ee:2d:39:d9:b1:45:
         ae:de:cc:b9:9f:63:e3:06:29:77:1e:80:96:54:40:ea:f8:18:
         06:75:ad:32:cc:a4:64:02:16:64:a7:84:e5:42:4c:3b:03:23:
         5a:2f:53:d2:8a:83:7a:9a:ba:e9:f9:5a:ce:31:3d:16:7f:6b:
         94:62:d9:16:25:2d:e3:b5:8a:4e:bd:01:f0:23:cb:74:c2:36:
         c3:90:aa:e6:8d:41:60:01:57:fb:52:5f:af:ee:7e:20:8e:9e:
         9a:67:7a:15:28:6c:cc:77:fa:d2:7f:87:ef:f7:c6:33:8e:a6:
         78:f2:91:b1:f4:df:08:9d:f2:b3:9c:d1:bb:26:3f:ff:c3:61:
         33:14:c1:4f:cd:c7:91:c8:c1:42:34:6c:1a:34:59:eb:d1:89:
         c0:78:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:41:02 2024 by rpki-client on console-ams.rpki-client.org