Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
File:                     3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          sS8LBB+RBu8H5jS5sgBgnqgNxe54KruQc9MlXJYFZuY=
Subject key identifier:   06:B4:9B:A0:70:0B:C9:9B:E2:D5:BE:06:E6:15:1F:46:59:95:A1:20
Certificate issuer:       /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
Certificate serial:       48E3EA3020FAC5D9E4A62042970D8E350516116B
Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa
Signing time:             Wed 17 Jan 2024 08:00:27 +0000
ROA not before:           Wed 17 Jan 2024 07:55:27 +0000
ROA not after:            Wed 15 Jan 2025 08:00:27 +0000
asID:                     139982
IP address blocks:        103.66.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl
                          rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e3:ea:30:20:fa:c5:d9:e4:a6:20:42:97:0d:8e:35:05:16:11:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264
        Validity
            Not Before: Jan 17 07:55:27 2024 GMT
            Not After : Jan 15 08:00:27 2025 GMT
        Subject: CN=06B49BA0700BC99BE2D5BE06E6151F465995A120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:8b:68:6d:80:89:7b:8d:ff:c7:3e:98:c6:
                    15:23:c8:e8:51:70:15:9f:d5:7d:ba:60:7e:9a:be:
                    bc:fb:21:e6:37:9f:f0:f5:b5:95:dd:e6:64:c0:39:
                    e9:3c:c5:56:e7:f1:39:7d:ea:29:2f:b2:7b:26:c4:
                    47:80:1e:72:7a:bb:2e:6d:a9:1e:c5:1a:55:d4:6d:
                    de:14:8a:58:fb:e5:2f:8b:e0:7c:50:ff:0d:cc:a8:
                    0c:75:2e:1d:6f:a3:61:8f:ea:c0:1e:1f:94:a4:1b:
                    52:f9:4b:35:11:b5:d6:e2:ed:c2:69:4b:f9:48:dd:
                    87:89:43:c9:f2:b2:53:b4:99:e5:fd:db:f8:bd:ad:
                    ae:bc:9c:97:30:92:73:d1:76:9c:56:1f:32:c1:1b:
                    1d:f7:1c:80:dc:8a:5e:8e:08:1e:77:64:1a:6b:64:
                    ca:24:6c:7c:f0:39:a0:4b:44:a5:64:f4:d1:70:ab:
                    92:08:87:db:9f:40:5f:f7:96:95:a9:cf:24:a0:27:
                    50:2b:a0:2c:2e:3b:b0:62:7e:3b:c7:fc:47:be:9f:
                    a9:89:d2:2b:d3:ca:61:84:3e:31:8a:57:75:9b:d4:
                    52:c7:4f:73:6f:c1:c1:62:5a:5d:49:ea:12:2e:d2:
                    a7:26:f8:20:4b:81:6e:fc:01:77:b8:7b:27:89:4b:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B4:9B:A0:70:0B:C9:9B:E2:D5:BE:06:E6:15:1F:46:59:95:A1:20
            X509v3 Authority Key Identifier:
                keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/3130332e36362e36322e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:4b:c9:dd:77:47:9a:87:c1:50:f7:6b:2a:64:9c:ca:d2:f9:
         3c:5b:7e:a4:98:b2:19:ef:59:10:8e:64:e2:ba:d8:41:15:0e:
         b9:67:c0:2c:08:fb:1b:98:39:07:c3:77:78:2c:0c:e2:79:c2:
         84:d9:14:a6:8d:db:e3:bc:d0:6c:48:33:03:2a:27:54:c4:2d:
         ea:e2:d4:7f:7f:25:4c:0d:b5:c9:89:0f:54:c5:79:e2:8d:25:
         94:80:4a:00:98:75:95:90:0c:4d:87:c5:6e:6a:db:f3:70:06:
         19:33:5f:b8:1d:70:1d:d8:2d:ed:39:83:66:fb:ff:af:28:a4:
         f6:33:10:f4:e3:ce:66:aa:04:ea:9d:8a:2f:99:e0:50:bc:2c:
         8b:81:2a:3d:b4:02:bc:d2:96:93:33:8e:af:68:ae:ba:0e:33:
         db:8c:44:ae:db:17:f8:42:a3:20:a3:f1:d2:ba:44:3f:bc:f2:
         03:f0:1b:f9:94:b7:6a:6d:3d:34:ea:d2:75:95:c0:19:52:e6:
         ca:55:a4:61:e8:d0:f6:26:3c:5d:4b:f0:24:d6:b0:b8:16:1b:
         2c:c6:78:c6:41:00:62:36:8c:46:60:59:04:f9:3c:2a:96:c8:
         d2:97:51:c0:e6:61:c6:87:52:14:47:c6:a0:2f:40:c5:20:c4:
         05:e9:92:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:22 2024 by rpki-client on console-ams.rpki-client.org