Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa
File:                     3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (raw, json)
Hash identifier:          fWXcaRSwA/btuc9bEZLzy+sPRYkGj/0HzEtgcEHJFIU=
Subject key identifier:   AA:A9:C4:7D:3E:FC:86:29:35:C6:6E:66:E2:87:A8:9F:D2:D7:4D:17
Certificate issuer:       /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial:       55C2838A945C1E556131E0D8B4B04B33CA02FAA4
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa
Signing time:             Sun 10 Mar 2024 09:55:32 +0000
ROA not before:           Sun 10 Mar 2024 09:50:32 +0000
ROA not after:            Sun 09 Mar 2025 09:55:32 +0000
asID:                     139982
IP address blocks:        103.66.62.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
                          rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 09:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c2:83:8a:94:5c:1e:55:61:31:e0:d8:b4:b0:4b:33:ca:02:fa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
        Validity
            Not Before: Mar 10 09:50:32 2024 GMT
            Not After : Mar  9 09:55:32 2025 GMT
        Subject: CN=AAA9C47D3EFC862935C66E66E287A89FD2D74D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:5d:1a:10:32:eb:1a:ce:3f:b4:05:91:37:
                    15:9e:38:e6:0c:d6:40:f3:74:7c:f0:14:7c:60:52:
                    89:95:95:15:21:ab:cb:19:aa:24:43:c9:ad:03:f3:
                    fe:b5:69:6a:99:ae:5b:d6:2b:0a:4f:df:c8:85:1f:
                    c8:a4:e2:53:ef:20:3f:fc:a8:36:fc:2d:95:97:34:
                    f9:91:2b:52:22:b4:50:0e:5d:08:bd:a0:c3:1e:32:
                    73:43:10:02:be:78:02:dc:a6:81:11:08:a8:65:18:
                    76:24:fd:6d:b0:26:e2:b1:4b:fd:33:1f:22:4b:45:
                    16:6a:46:71:8d:34:6f:8f:94:0d:3d:0e:a3:2f:46:
                    10:dd:f8:c0:5c:91:92:ac:1f:5e:db:a2:5b:22:73:
                    d7:09:13:9a:d1:cb:e9:3c:93:21:b5:97:eb:cd:c7:
                    54:c3:2f:ce:bf:41:eb:c6:f6:25:77:82:fd:f2:a1:
                    94:e8:58:6c:cd:10:05:80:25:94:70:fd:f7:cf:66:
                    ca:f6:bd:17:c9:bd:21:12:06:ac:0f:90:f3:40:1b:
                    6b:1f:81:f9:dc:26:a5:2f:4c:0f:16:b3:d9:5f:f4:
                    34:69:a6:61:a6:d1:36:1b:ce:86:23:bb:24:88:be:
                    c9:77:6f:de:f5:f3:92:c8:de:fb:de:5e:88:ee:59:
                    d0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:C4:7D:3E:FC:86:29:35:C6:6E:66:E2:87:A8:9F:D2:D7:4D:17
            X509v3 Authority Key Identifier:
                keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32332d3233203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:09:d1:57:3b:e2:53:57:df:bd:9b:7d:f1:00:92:20:40:31:
         49:a5:ca:d6:b5:20:8a:51:91:ed:2e:02:9a:a1:4c:5e:86:17:
         90:f4:b8:ed:90:e8:15:57:2a:45:6c:f3:02:68:51:73:8d:b3:
         ff:6c:b9:53:1f:c3:ac:6b:1c:03:fe:17:27:8a:df:e8:96:05:
         89:cf:b9:1f:e6:a2:ac:32:b4:ba:8b:3a:03:08:11:2f:17:3a:
         f8:81:a3:cb:8e:f8:4a:66:d1:6f:f7:ef:fa:4b:1c:bb:62:06:
         e7:d3:0e:cf:c4:9b:85:67:a0:7f:cf:3c:52:de:fa:a2:48:6d:
         a2:6a:6d:e7:b9:6b:66:de:bb:e5:71:19:97:5b:a5:b7:60:23:
         2c:d2:f2:09:32:93:45:67:ff:a9:1f:7e:b5:a4:75:94:2d:4b:
         69:f3:ae:33:60:d8:57:c5:46:6b:a9:72:c0:48:50:b3:5a:cc:
         b2:96:14:3a:75:47:13:1e:06:03:0a:f1:8e:ed:ee:85:da:2d:
         55:bf:9a:fe:af:21:44:31:43:63:a7:f0:ef:03:5b:54:fe:4e:
         37:9e:53:52:53:4a:80:9c:0a:04:ec:55:95:f5:a4:19:ea:ee:
         6d:a7:64:b6:ca:e7:f9:b9:4b:0f:d1:37:46:9f:95:8f:ce:e3:
         b3:92:6c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 06:33:31 2024 by rpki-client on console-ams.rpki-client.org