Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
File:                     3130332e35332e37362e302f32322d3234203d3e20313333383137.roa (raw, json)
Hash identifier:          RqVG/+fevGlzeGifywjaerpBfQu8ZmqLalIOCMIkhYI=
Subject key identifier:   4B:66:51:74:B0:F1:65:F8:9E:EC:7F:F8:A1:37:BF:2A:A2:44:40:55
Certificate issuer:       /CN=651790FFFC1688AFA384D136FC4792AD18879019
Certificate serial:       2E7CE10EC7B1AB134D1C48596E02D4EC81F5260B
Authority key identifier: 65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa
Signing time:             Mon 31 Jul 2023 00:03:08 +0000
ROA not before:           Sun 30 Jul 2023 23:58:08 +0000
ROA not after:            Mon 29 Jul 2024 00:03:08 +0000
asID:                     133817
IP address blocks:        103.53.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl
                          rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7c:e1:0e:c7:b1:ab:13:4d:1c:48:59:6e:02:d4:ec:81:f5:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651790FFFC1688AFA384D136FC4792AD18879019
        Validity
            Not Before: Jul 30 23:58:08 2023 GMT
            Not After : Jul 29 00:03:08 2024 GMT
        Subject: CN=4B665174B0F165F89EEC7FF8A137BF2AA2444055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:45:3c:11:e0:45:3c:8f:5a:81:7d:f0:46:
                    42:84:9c:e9:42:3f:5b:ea:af:04:24:67:cb:8a:1e:
                    1c:e7:e2:16:dd:68:88:30:a8:ae:de:3a:cf:7e:f1:
                    fa:4e:4a:b4:50:a0:f5:8e:7a:df:fb:aa:a8:59:3c:
                    2d:23:8d:3f:c2:ed:0b:91:89:b5:8c:0a:63:9b:b1:
                    bc:32:7c:50:81:eb:b8:f8:be:d9:78:21:c2:4b:68:
                    c0:4c:4f:10:11:b3:95:8f:9c:af:3a:37:ad:62:66:
                    a0:6e:72:3a:be:88:6e:74:f0:f6:d0:69:98:60:7c:
                    22:a7:76:4c:67:65:9f:0c:ea:b4:61:31:24:ea:92:
                    58:68:d8:54:b9:3d:90:2f:98:41:b7:d7:e6:5b:e7:
                    de:be:12:18:3e:60:81:a3:a3:ce:2f:b3:b2:10:4b:
                    f0:e3:f3:ef:65:f5:ee:1f:d9:a7:5b:e5:58:89:76:
                    64:62:53:75:64:ff:4e:a1:e6:96:bb:d7:e7:d0:91:
                    80:bd:3c:9f:12:52:54:1f:08:18:35:16:83:2f:83:
                    56:18:a4:6c:dd:43:c8:bb:a1:46:61:86:f7:32:9d:
                    78:6a:cc:e6:d1:1d:ac:c4:66:fc:38:f9:3c:09:02:
                    dd:89:9c:24:9c:e0:df:17:7d:c7:16:08:85:b3:4a:
                    ec:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:51:74:B0:F1:65:F8:9E:EC:7F:F8:A1:37:BF:2A:A2:44:40:55
            X509v3 Authority Key Identifier:
                keyid:65:17:90:FF:FC:16:88:AF:A3:84:D1:36:FC:47:92:AD:18:87:90:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/651790FFFC1688AFA384D136FC4792AD18879019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/651790FFFC1688AFA384D136FC4792AD18879019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66f7ef34-4991-4bb1-96b4-be43f1ecabb4/0/3130332e35332e37362e302f32322d3234203d3e20313333383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:e8:30:64:c0:83:b7:aa:2f:3b:08:d0:30:fd:a1:fa:c6:4c:
         0a:f6:6b:bf:7a:65:17:4c:1a:3f:33:ef:dd:3e:a2:93:e5:17:
         5b:c4:b6:bc:4e:80:6b:c6:f7:90:ca:81:45:c1:9b:3d:7a:61:
         52:17:06:93:55:04:f7:1a:4d:c0:6e:f2:a0:5b:a6:86:e7:d8:
         73:69:b6:b6:99:c4:c2:31:26:55:ee:72:03:5a:24:c8:d4:a9:
         d2:77:60:70:13:c6:9c:bf:04:2b:df:82:2a:ab:dd:c4:9e:32:
         ee:37:44:3d:24:2a:aa:b9:78:58:58:78:fe:43:58:ed:de:f5:
         4f:13:a5:69:78:3b:30:fe:85:1b:e9:fe:d7:2a:b6:0c:c3:9a:
         80:c6:ab:a1:f8:96:aa:15:bc:20:67:6c:86:99:17:bf:ff:37:
         e5:50:e5:e8:12:39:2f:63:21:a2:ba:e1:d5:33:bc:fb:fc:57:
         5e:03:94:ac:e8:ee:4f:48:f0:3f:81:0b:a2:3d:67:eb:bb:8f:
         57:54:27:86:2e:99:ee:3c:39:c2:91:02:4f:b6:3b:ce:b4:2e:
         96:01:b8:17:31:45:1e:ed:6d:4d:14:4c:7d:e9:64:dc:0f:2b:
         50:45:92:3f:0b:ea:ff:83:05:68:f1:e1:d7:9a:03:f3:9e:67:
         30:bf:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:06:40 2024 by rpki-client on console-fra.rpki-client.org