Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa
File:                     3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa (raw, json)
Hash identifier:          oscMMuL3TiY+Ge0xaiG2hZNtHuExZD9o0Chnax1A9ss=
Subject key identifier:   3E:26:E8:E7:84:8C:FD:5E:0D:87:D7:F6:5D:BC:7B:8A:89:F4:C7:B9
Certificate issuer:       /CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
Certificate serial:       72C64C5CF77885E3117B1131CBFAAA0BC18C6B1E
Authority key identifier: B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa
Signing time:             Mon 31 Jul 2023 00:14:03 +0000
ROA not before:           Mon 31 Jul 2023 00:09:03 +0000
ROA not after:            Mon 29 Jul 2024 00:14:03 +0000
asID:                     137381
IP address blocks:        103.119.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl
                          rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 19:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c6:4c:5c:f7:78:85:e3:11:7b:11:31:cb:fa:aa:0b:c1:8c:6b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B94F48BCAB6D8B0A28B3955504975C159FAC076A
        Validity
            Not Before: Jul 31 00:09:03 2023 GMT
            Not After : Jul 29 00:14:03 2024 GMT
        Subject: CN=3E26E8E7848CFD5E0D87D7F65DBC7B8A89F4C7B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:d1:3e:3a:60:40:34:16:3a:e8:a4:32:56:
                    0e:50:d9:00:94:7d:84:e9:dd:29:82:61:35:a2:a2:
                    0f:0c:e4:f2:02:85:d1:0f:e7:38:61:3b:73:ba:08:
                    42:11:b3:9f:e7:b8:65:e6:cb:95:e5:f4:36:a7:e5:
                    1b:e2:62:35:1a:cf:d7:94:e8:2f:f1:42:ba:52:ce:
                    af:3c:13:84:4f:ab:c6:18:e5:a7:cb:9b:3a:5f:08:
                    b2:44:d1:1e:65:4b:51:4a:12:8a:33:4d:c3:cb:63:
                    08:44:3e:d5:f1:18:1e:b1:16:9d:ba:72:44:8d:a6:
                    91:04:4c:f2:25:e1:68:4d:68:0b:14:25:2d:85:98:
                    1c:fc:52:16:1b:55:2c:7a:ee:f6:77:37:af:59:35:
                    70:b3:94:6a:a6:21:e1:72:e6:d2:88:57:51:87:fc:
                    eb:cf:0e:db:6b:3d:99:3f:0f:b8:a1:4c:3b:d2:0e:
                    14:2e:f3:ef:69:44:f9:88:36:90:6d:ff:0a:04:73:
                    53:52:5f:4f:57:3a:ed:8b:9d:82:3a:0a:63:a3:17:
                    1a:8f:6e:52:31:64:ef:73:b2:7f:ac:bc:7a:2a:1e:
                    56:2c:30:4c:e0:8b:a8:8f:48:ca:cd:37:81:bc:52:
                    65:35:85:30:b2:14:6f:e2:89:2b:f1:c7:3a:4e:f6:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:E8:E7:84:8C:FD:5E:0D:87:D7:F6:5D:BC:7B:8A:89:F4:C7:B9
            X509v3 Authority Key Identifier:
                keyid:B9:4F:48:BC:AB:6D:8B:0A:28:B3:95:55:04:97:5C:15:9F:AC:07:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/B94F48BCAB6D8B0A28B3955504975C159FAC076A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B94F48BCAB6D8B0A28B3955504975C159FAC076A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/864c3155-c8ff-4207-a2dc-51e005530b52/0/3130332e3131392e3133392e302f32342d3234203d3e20313337333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:98:59:fe:23:96:f9:7e:72:ed:63:22:71:a9:9b:5d:8d:0b:
         97:8a:d3:5e:5e:8c:f1:b2:fa:65:38:ce:6f:e6:09:71:07:e1:
         86:25:e4:11:94:a6:38:83:10:99:fb:78:a1:71:0b:3a:c4:f7:
         45:f0:ba:7f:c8:47:1d:08:7a:47:b5:cb:14:11:eb:92:d3:d7:
         c4:b9:ad:4e:47:f9:54:ab:b0:10:1e:0f:12:cb:9d:b9:b4:5f:
         26:45:09:3e:aa:0d:de:8b:89:90:ab:9c:1f:4c:b8:99:1b:0c:
         85:50:d6:86:b6:a1:01:c6:3e:fa:7f:56:16:8d:23:d6:c8:95:
         6a:95:f4:6d:52:04:d1:ae:4b:92:5e:ef:c7:31:8d:88:b8:f9:
         cd:cf:cd:20:a2:6a:0e:06:a0:f1:8a:d5:2f:b7:e1:be:17:16:
         a7:92:e2:3d:77:40:1f:75:93:ec:92:2e:55:8b:05:d2:69:08:
         d5:83:54:05:ae:5a:09:4d:da:4b:95:c1:9c:a6:cf:2c:a7:c8:
         93:3f:9f:31:da:39:b4:bb:f5:af:fa:f8:30:07:19:ca:cf:40:
         a1:d2:04:ba:0e:d7:c4:35:d9:1b:b6:f3:19:27:06:ba:8b:05:
         47:e7:c1:89:02:63:a3:d9:b9:59:07:08:fa:77:ee:f7:60:47:
         06:9d:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 11:35:10 2024 by rpki-client on console-ams.rpki-client.org