Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          dUQoZu171YU/WaqBN1I1ujhH7vfw0JO61KinyWtJdC0=
Subject key identifier:   EC:E4:9B:13:5E:28:AC:A4:3A:B3:18:D3:60:72:D2:A0:16:2B:D5:E1
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       58458B4EF2433A5AE7B756B65994B76735868A45
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 27 Aug 2023 05:00:00 +0000
ROA not before:           Sun 27 Aug 2023 04:55:00 +0000
ROA not after:            Sun 25 Aug 2024 05:00:00 +0000
asID:                     139994
IP address blocks:        140.213.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 01:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:45:8b:4e:f2:43:3a:5a:e7:b7:56:b6:59:94:b7:67:35:86:8a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 27 04:55:00 2023 GMT
            Not After : Aug 25 05:00:00 2024 GMT
        Subject: CN=ECE49B135E28ACA43AB318D36072D2A0162BD5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:00:87:c6:d7:24:2e:2d:69:0f:e5:bc:db:21:
                    38:67:c0:6d:85:eb:22:b4:be:5d:ba:58:3c:96:30:
                    bf:86:dd:45:f0:12:d8:88:50:df:b8:88:ea:c0:af:
                    b7:75:67:af:5e:71:df:b2:2a:b5:98:9a:fa:d5:44:
                    a7:d6:60:1b:5a:82:83:52:be:e2:70:df:57:2c:b2:
                    a6:9c:13:96:7f:e6:f8:1a:14:3d:23:7c:f1:66:b6:
                    ac:0b:45:a7:da:ec:f6:70:f9:fc:63:f7:32:99:22:
                    57:bd:67:7e:f1:d8:27:43:eb:78:80:2c:ab:d6:4e:
                    2a:89:3c:d6:d8:4a:73:f4:33:b8:ff:a6:3d:02:4a:
                    97:c9:a0:b3:c5:2a:e8:5d:f7:bb:12:16:b5:d2:30:
                    e5:fe:08:85:ff:72:75:cd:e4:7e:a2:7c:55:10:c1:
                    68:ab:2c:2e:bf:21:51:89:0a:54:f5:fd:8a:4d:10:
                    22:a9:22:b0:89:8d:1b:bf:88:22:f2:2d:fe:d0:9d:
                    9b:5f:b9:83:4e:93:ec:7b:29:35:92:e4:84:ba:ad:
                    84:53:ba:6c:1b:dd:03:da:34:ec:fc:bf:91:93:ee:
                    7d:ac:54:a7:0e:32:90:80:c5:70:8f:e8:16:42:2c:
                    b9:dc:2c:6b:c2:c1:5a:ee:2e:68:70:d2:df:79:22:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E4:9B:13:5E:28:AC:A4:3A:B3:18:D3:60:72:D2:A0:16:2B:D5:E1
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:7b:77:70:b3:5d:57:13:5e:db:07:dc:44:27:e1:da:e6:cd:
         50:e3:cd:dd:61:b4:83:53:d8:a3:97:ba:ca:31:af:af:8d:08:
         30:e4:1d:49:be:3b:b8:e8:d2:0d:b0:2c:68:c3:0a:65:5b:78:
         9b:80:42:e1:62:f5:ba:5f:b2:67:df:6c:0f:9e:6c:40:65:d6:
         d9:65:9f:79:4b:17:0d:55:c4:ef:36:76:3a:6e:b4:ec:0b:ff:
         e2:4f:dd:50:82:0d:e1:0c:72:d8:84:a1:6b:d5:df:ed:1e:14:
         eb:69:e5:d7:0c:36:e1:f3:94:0b:42:95:b5:6f:9c:40:51:75:
         bb:c9:19:c1:38:6d:d1:95:d7:9c:74:f8:6a:d4:d9:91:1f:2f:
         70:1a:2c:12:90:c7:c7:5a:98:d0:ed:8a:bc:35:1e:84:e2:3a:
         bf:8c:7b:52:f3:74:8d:43:ef:eb:1b:e3:d8:0c:d4:e6:bd:cd:
         e2:5e:b2:45:57:4d:c8:65:27:36:e0:70:d8:c6:a0:e6:e0:16:
         11:a1:99:ce:27:5d:f6:43:06:93:70:20:e8:cc:c2:bb:76:77:
         c5:17:04:52:db:31:75:fb:10:3b:8b:68:84:3f:c2:db:5f:83:
         7c:6f:de:5f:aa:52:14:a4:72:ba:1e:e6:c2:c1:3c:95:eb:79:
         ce:1b:15:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:06 2024 by rpki-client on console-ams.rpki-client.org