Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          2NLzyylSxJ9gmw0l7BlVemBY4vOUPb929YRrfPEVLE8=
Subject key identifier:   CD:3F:25:E7:E9:E6:13:FB:29:9D:6A:07:C4:7F:8D:B7:60:92:91:C5
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       40BEEDF2833DFAE3AE5AC6AAA8B85C9D65B89A63
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 27 Aug 2023 05:00:01 +0000
ROA not before:           Sun 27 Aug 2023 04:55:01 +0000
ROA not after:            Sun 25 Aug 2024 05:00:01 +0000
asID:                     139994
IP address blocks:        140.213.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Apr 2024 03:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:be:ed:f2:83:3d:fa:e3:ae:5a:c6:aa:a8:b8:5c:9d:65:b8:9a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 27 04:55:01 2023 GMT
            Not After : Aug 25 05:00:01 2024 GMT
        Subject: CN=CD3F25E7E9E613FB299D6A07C47F8DB7609291C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:31:9d:4c:82:71:29:9a:68:60:51:08:a9:
                    4d:17:d0:42:4b:0f:44:36:e6:4b:b5:70:d8:8b:24:
                    33:83:d8:e5:1a:81:8a:de:45:f6:2f:2a:ef:3a:90:
                    b4:0d:a9:78:45:3e:66:57:47:9c:c1:20:5d:ea:76:
                    7d:75:70:5d:01:e9:05:ef:4a:63:79:52:b3:10:e0:
                    a2:9d:ba:b5:f1:ee:76:13:a0:e4:ca:c0:0d:90:2a:
                    d6:6f:56:28:96:cf:0f:3a:76:29:07:13:34:cf:ae:
                    74:6a:8a:2c:4d:a7:f8:5c:e4:26:6f:4f:92:ab:c3:
                    80:bd:cd:7e:55:fb:d3:b6:d0:d5:b3:da:f7:77:77:
                    60:d6:86:b3:5e:a8:d8:ac:a9:2b:e3:95:ce:d2:13:
                    88:cc:01:8c:1d:23:bf:04:ec:c9:ad:3f:47:ed:a1:
                    1f:3c:d6:69:47:4e:f1:20:7c:44:07:f3:78:27:64:
                    52:00:1e:d5:6b:03:66:ba:75:0a:d1:8a:94:2b:22:
                    29:e4:9c:49:af:82:7f:25:cc:f1:71:ed:d0:85:4a:
                    9a:f2:53:92:f6:5b:ca:cf:6e:0c:4a:41:17:15:5b:
                    9d:bc:c8:42:43:0c:d5:9c:c6:8f:dd:97:f3:ec:a8:
                    92:5b:fe:4b:75:da:36:ee:a9:fb:cf:5e:67:e0:ec:
                    17:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3F:25:E7:E9:E6:13:FB:29:9D:6A:07:C4:7F:8D:B7:60:92:91:C5
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:65:24:5a:2b:54:47:36:b6:05:d3:25:87:a2:63:2c:eb:
         80:4a:03:19:f9:c9:d2:bb:5e:b6:3d:7f:0f:69:17:d4:ad:62:
         d1:56:f6:c2:22:22:17:46:97:b8:af:a9:98:ae:2a:c7:2b:6e:
         50:f6:44:3e:b9:7c:66:f4:b8:8a:61:01:ec:f3:af:6e:aa:6a:
         7a:8c:35:66:39:d0:d4:21:f7:43:88:c3:f0:74:91:a9:b4:43:
         e3:d1:e8:c2:db:46:0d:9f:11:5f:69:bf:7e:17:7c:a9:68:46:
         36:3e:d9:b5:99:d7:cf:6c:fd:2c:4e:ae:ac:9e:61:94:9b:61:
         34:43:f8:86:f9:fc:52:bd:48:7c:ed:46:d1:ff:d7:c3:1c:34:
         38:91:35:d3:ae:61:4f:f0:fa:e9:68:b3:03:70:8e:e2:38:0f:
         01:52:53:34:78:fd:21:96:f4:02:1b:9c:90:93:be:e7:34:32:
         91:ae:a2:8e:89:2c:92:2e:82:11:e3:04:a8:ed:5a:da:0c:d8:
         0e:62:ec:21:23:c3:77:6f:84:26:0a:d5:8d:b4:4b:34:c5:47:
         13:0b:61:a7:97:4a:59:15:14:cb:6c:5a:51:59:f1:7c:73:a1:
         fe:f4:22:ce:2d:9d:19:1b:94:b8:9f:5e:5a:2a:cd:b0:5e:f5:
         f1:5f:02:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 16:41:58 2024 by rpki-client on console-fra.rpki-client.org