Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e32322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          iNaKYL8y+2fR7EKTzm13NiR82xpX8XNzDFvoO+gsRjM=
Subject key identifier:   F1:1F:63:2C:C4:43:A9:BA:A3:83:64:1C:77:77:17:21:77:B6:89:12
Certificate issuer:       /CN=79204255412F26FC4519CA94E35B93EF4E47BC73
Certificate serial:       483675EE0717BA84EAD5D7CB99C3A103CD15CA70
Authority key identifier: 79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 08:01:46 +0000
ROA not before:           Fri 01 Sep 2023 07:56:46 +0000
ROA not after:            Fri 30 Aug 2024 08:01:46 +0000
asID:                     17995
IP address blocks:        103.164.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl
                          rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 17:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:75:ee:07:17:ba:84:ea:d5:d7:cb:99:c3:a1:03:cd:15:ca:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79204255412F26FC4519CA94E35B93EF4E47BC73
        Validity
            Not Before: Sep  1 07:56:46 2023 GMT
            Not After : Aug 30 08:01:46 2024 GMT
        Subject: CN=F11F632CC443A9BAA383641C7777172177B68912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:35:fd:d6:6c:df:02:70:f3:26:50:2d:24:aa:
                    5f:e4:57:81:9f:ed:6e:45:2f:d2:6d:52:bb:ca:7f:
                    80:20:4d:c4:9f:33:a6:b3:fa:b9:2f:02:21:ad:4f:
                    69:27:cb:33:5f:d5:d1:c7:eb:42:a1:eb:f4:5b:8b:
                    dc:a9:ba:e5:60:f0:68:61:01:99:ae:94:36:e6:f1:
                    25:58:f9:54:c3:49:d8:9c:59:33:51:28:8a:8c:25:
                    ae:56:70:0b:e3:c8:3a:de:8b:92:6e:e2:26:c4:26:
                    e2:1c:56:f4:b6:ad:f7:86:55:ad:18:3c:85:8e:a9:
                    77:4d:48:a7:70:52:d0:57:47:8d:02:56:a5:68:8f:
                    c9:cc:5d:11:44:6f:a8:5a:e5:d5:91:2c:ec:df:28:
                    2b:89:44:cc:d2:1d:63:e8:b1:59:40:05:4b:3d:d1:
                    ef:12:da:79:72:9d:07:99:39:71:d6:fd:13:ab:ac:
                    6a:42:08:49:8b:9a:c1:1b:e9:8a:18:7d:6e:a4:53:
                    78:34:51:d6:7f:90:fc:7e:55:9c:0a:ca:ca:5f:18:
                    6c:77:a1:8d:ba:96:11:b7:b3:b6:4d:59:9e:8a:fb:
                    ad:ba:ca:48:5d:f8:f1:fd:96:09:88:30:ff:66:c5:
                    6d:21:5b:cc:04:87:a6:98:45:9d:ba:ad:44:ba:1e:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1F:63:2C:C4:43:A9:BA:A3:83:64:1C:77:77:17:21:77:B6:89:12
            X509v3 Authority Key Identifier:
                keyid:79:20:42:55:41:2F:26:FC:45:19:CA:94:E3:5B:93:EF:4E:47:BC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/79204255412F26FC4519CA94E35B93EF4E47BC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79204255412F26FC4519CA94E35B93EF4E47BC73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97dc7ee5-ce67-45cd-9881-43489ab2b1a5/0/3130332e3136342e32322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:48:1b:6d:1e:74:b1:c6:7a:d6:1e:4f:01:49:67:be:92:0a:
         a5:6c:33:de:54:53:58:79:7f:db:20:c7:aa:55:a4:f6:c6:a9:
         e0:00:e4:20:2b:a3:d9:d5:f4:ed:a2:3c:09:43:8f:ae:d3:8d:
         07:50:2e:f1:dd:25:0c:f2:03:cc:22:ca:d6:6e:3b:4f:26:19:
         72:a4:02:91:7c:b1:35:da:ee:0c:60:d5:a9:c9:72:8c:ca:e0:
         ce:f3:16:d1:b3:2d:6a:83:c2:f7:37:5b:3f:62:96:88:49:06:
         bf:52:6b:87:4b:60:80:ed:db:bd:99:a3:e8:48:ed:e7:de:19:
         45:7c:b5:c5:3d:dc:c6:b2:60:51:f9:1f:0c:04:f9:73:4e:6a:
         cd:e2:03:d1:81:63:84:09:e1:9b:dc:22:c7:bd:27:0a:f3:a8:
         41:64:61:ed:fe:3f:06:f3:d5:42:59:32:55:c6:18:10:45:0a:
         28:6c:5c:cf:4e:47:30:8b:56:79:60:4c:36:e9:84:83:ed:10:
         96:91:4a:59:e5:64:2d:69:28:f7:41:e8:39:2d:e0:c5:46:62:
         90:dd:e0:b5:f0:94:91:a7:cd:7a:1c:50:30:25:01:b5:60:9f:
         3e:13:4d:64:1a:ea:fd:47:3d:38:aa:05:5c:29:6c:b0:e4:f4:
         fd:68:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:56 2024 by rpki-client on console-ams.rpki-client.org