Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230332e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3230332e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          NZtMeWjVpE7o1+yn9AOF9ts0PCVlOuWHw5srvkMSo84=
Subject key identifier:   8E:0C:FC:00:99:86:E1:E4:8B:2C:F5:67:DD:BA:48:CA:18:32:9C:5A
Certificate issuer:       /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
Certificate serial:       3A757DE1418DEAF17B02A69633E7D450D75C3F1F
Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230332e302f32342d3234203d3e20313339393934.roa
Signing time:             Sun 27 Aug 2023 05:00:01 +0000
ROA not before:           Sun 27 Aug 2023 04:55:01 +0000
ROA not after:            Sun 25 Aug 2024 05:00:01 +0000
asID:                     139994
IP address blocks:        140.213.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:75:7d:e1:41:8d:ea:f1:7b:02:a6:96:33:e7:d4:50:d7:5c:3f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4
        Validity
            Not Before: Aug 27 04:55:01 2023 GMT
            Not After : Aug 25 05:00:01 2024 GMT
        Subject: CN=8E0CFC009986E1E48B2CF567DDBA48CA18329C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:2a:e3:09:51:db:94:2f:0b:fc:21:ce:ea:
                    fb:a8:27:03:2d:8e:91:21:dc:98:f1:29:93:79:4b:
                    fa:11:6e:59:c7:58:a0:b7:ea:d6:c9:30:8a:91:f2:
                    10:14:2b:ed:3a:eb:75:1a:4e:a1:70:60:5b:f8:6e:
                    d5:1a:05:f9:8f:d4:97:2a:30:09:56:58:3c:fa:3f:
                    14:2a:b5:93:27:07:1e:24:c5:9a:e1:02:5f:34:ba:
                    f2:e3:da:31:38:26:f1:1a:37:3e:bc:41:02:7d:a0:
                    7a:b3:08:2b:f4:c1:79:8c:c7:1e:92:8e:70:3b:9d:
                    1d:1a:b6:78:95:87:7b:cd:fc:eb:85:c9:95:c3:7d:
                    67:ce:0e:92:59:0f:bf:b6:ea:34:49:99:bf:c1:d0:
                    da:83:03:d8:14:76:59:36:d7:e6:01:44:f8:30:e3:
                    1e:46:2c:df:40:36:f8:99:cf:24:4b:70:15:0a:f9:
                    d9:73:fb:0d:2c:6e:1c:92:cb:63:72:76:92:a2:78:
                    7c:07:05:3f:08:91:a0:39:82:c3:da:2b:e7:9b:02:
                    80:76:4f:cb:05:ee:df:3d:88:96:60:79:a3:ca:1b:
                    20:64:53:66:dd:3f:18:9f:ca:14:04:be:88:40:87:
                    e5:3f:05:10:ed:f2:00:98:50:a2:6e:31:cc:35:b6:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:FC:00:99:86:E1:E4:8B:2C:F5:67:DD:BA:48:CA:18:32:9C:5A
            X509v3 Authority Key Identifier:
                keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3134302e3231332e3230332e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ac:c8:d9:6b:11:6f:75:9a:7a:40:31:cb:f5:77:63:f4:3b:
         1b:c4:f6:c6:66:09:59:a9:13:b0:73:ee:e0:e4:40:39:50:67:
         41:14:f0:4c:e6:39:10:90:47:89:d3:de:8b:83:4f:fb:0c:68:
         fb:b8:67:65:06:7a:34:60:22:54:c0:d0:c5:21:da:2c:51:82:
         df:30:16:74:aa:34:67:c6:be:67:8d:e4:51:65:a3:fa:21:31:
         2f:f3:52:ba:7c:ef:8e:cd:a3:72:c6:6a:96:0c:c6:2c:e8:04:
         e3:d7:2c:dc:c9:96:cf:59:22:0c:7a:7e:05:2c:db:85:2d:25:
         65:7f:c0:1e:08:d8:77:22:55:63:5e:39:e6:d9:70:25:8c:ce:
         61:d2:9c:15:ea:65:46:53:a3:0a:25:bc:fb:51:36:59:48:c8:
         63:de:b4:f7:8b:b7:58:e1:63:16:2a:16:6c:51:21:b3:50:54:
         a2:c3:20:4f:e2:81:10:08:82:5f:6b:d3:ac:83:ca:04:5e:2a:
         a8:e9:63:ad:03:59:03:69:e7:5a:a1:f0:78:60:92:55:5f:99:
         d5:7d:cd:de:bc:60:b4:71:eb:90:9e:f2:db:03:41:99:c4:b6:
         b3:b8:2a:6d:c6:17:29:b8:de:3c:a0:31:b4:fb:90:7a:60:ef:
         fa:7d:4a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:09:55 2024 by rpki-client on console-fra.rpki-client.org