Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          R+iE5PPBs8oPmvhWsI2MWUBF98ckOO6Irx06lbuE/ow=
Subject key identifier:   72:F6:A5:35:7C:7C:FD:D0:92:C9:0F:21:18:25:AC:EE:4D:86:39:77
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       2EC1E4B262AD478929A13C92C1599FA325F88028
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 27 Aug 2023 05:00:00 +0000
ROA not before:           Sun 27 Aug 2023 04:55:00 +0000
ROA not after:            Sun 25 Aug 2024 05:00:00 +0000
asID:                     139994
IP address blocks:        140.213.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 01:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:e4:b2:62:ad:47:89:29:a1:3c:92:c1:59:9f:a3:25:f8:80:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 27 04:55:00 2023 GMT
            Not After : Aug 25 05:00:00 2024 GMT
        Subject: CN=72F6A5357C7CFDD092C90F211825ACEE4D863977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:d0:2c:36:8c:a6:9f:17:21:59:af:4c:68:
                    aa:a6:af:45:34:2e:f9:6f:28:23:88:0e:88:a7:19:
                    75:23:4f:ad:eb:c4:49:d3:b5:85:c6:4e:95:65:e3:
                    00:38:b5:ab:ba:ab:f9:20:a7:5e:a1:36:41:c2:65:
                    69:c4:eb:c9:07:a9:e5:f8:39:27:ca:ca:f1:c7:62:
                    b3:75:53:ef:22:10:8a:64:25:d1:d5:f9:1a:a4:bd:
                    87:3e:f1:03:01:58:ca:9d:4d:e2:62:92:d7:bd:8d:
                    f6:3e:45:56:39:9a:c0:d0:a0:98:5c:14:66:7e:6d:
                    52:34:7e:45:47:6c:c1:30:55:24:bd:c7:3b:18:21:
                    ef:f9:21:2c:06:38:52:1d:da:cd:bc:fa:9f:ab:de:
                    79:92:f9:4f:01:13:69:a7:61:fa:76:df:e8:89:02:
                    29:b4:95:8c:7d:e8:ae:e4:de:16:74:7a:59:94:20:
                    07:d3:52:d0:b7:de:03:f0:11:a5:c3:bc:df:9f:ef:
                    33:da:9d:3c:04:66:a7:e6:0d:bf:bf:dd:0e:af:67:
                    dc:de:d8:52:21:43:e7:22:e9:8d:3d:90:83:78:2f:
                    b6:75:f9:62:7d:13:22:c7:bd:ce:20:76:01:48:cd:
                    5d:dc:74:7e:cc:a6:f0:ba:52:b6:98:4e:1d:f8:2b:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:A5:35:7C:7C:FD:D0:92:C9:0F:21:18:25:AC:EE:4D:86:39:77
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:12:81:49:ff:e4:17:7f:5f:53:65:28:b8:59:3c:bf:82:dc:
         cc:e2:e9:b8:74:98:54:69:d7:c8:60:d1:3a:77:2c:f4:29:60:
         c7:25:a3:90:ff:45:e7:bb:80:22:69:05:86:cd:f9:34:59:50:
         da:fb:b6:7f:a6:28:6e:06:47:4e:e0:02:c5:9c:03:ce:0c:94:
         e0:5d:d2:69:38:3a:0e:b0:e4:e1:3e:f1:ae:8d:1d:9d:6a:52:
         c2:40:0b:8d:d1:8c:d4:5b:26:55:04:bd:d1:55:de:72:22:5d:
         a0:e7:e7:6f:84:21:9c:e1:a5:8a:b2:ae:be:3d:05:89:ac:9c:
         ea:ce:05:53:6b:9d:16:d1:7c:de:52:32:2a:91:50:48:70:e3:
         31:68:36:7a:73:6e:77:1c:f2:9f:06:ed:f1:42:b5:a6:94:d5:
         c3:e6:fe:9a:04:db:a2:a8:c5:11:c0:d9:ce:4a:33:7c:2f:f2:
         22:73:82:11:30:55:f2:84:1a:ac:a3:2c:d0:e1:6c:c1:3a:68:
         ea:11:e1:48:c4:41:7e:29:13:f5:4a:d5:a5:2a:67:0b:b7:2a:
         02:32:1a:05:13:05:99:e2:33:e1:23:e1:01:04:76:5b:c4:42:
         61:a4:a2:cc:74:e3:22:77:2b:2f:6c:59:d6:dd:26:a2:da:13:
         cb:1d:6b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:06 2024 by rpki-client on console-ams.rpki-client.org