Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          2HiXjwpXGSTT4NeNVBe0CGoE2mwx6LXTb5MtW5Jnpcc=
Subject key identifier:   F2:FF:41:48:41:50:56:5C:0A:00:28:60:B3:6C:DF:29:7F:74:DA:F2
Certificate issuer:       /CN=B126A372835801BBB738696C56DCF255D032D42F
Certificate serial:       6B2770D4E6D83C26D2AAE7397D415B51313A8ABC
Authority key identifier: B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 10:01:01 +0000
ROA not before:           Fri 01 Sep 2023 09:56:01 +0000
ROA not after:            Fri 30 Aug 2024 10:01:01 +0000
asID:                     17995
IP address blocks:        103.166.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl
                          rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 20:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:27:70:d4:e6:d8:3c:26:d2:aa:e7:39:7d:41:5b:51:31:3a:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B126A372835801BBB738696C56DCF255D032D42F
        Validity
            Not Before: Sep  1 09:56:01 2023 GMT
            Not After : Aug 30 10:01:01 2024 GMT
        Subject: CN=F2FF41484150565C0A002860B36CDF297F74DAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:b6:1d:16:74:20:fb:4f:e5:85:fe:c3:a1:
                    a1:42:a8:ff:4e:92:08:58:a3:f3:60:1c:ad:94:db:
                    d9:66:33:c8:0e:40:2b:18:fd:5e:6f:fc:52:69:7a:
                    5a:b9:a7:b3:88:5e:37:ef:7b:c1:1f:dc:71:0e:af:
                    c1:96:6d:22:35:28:1c:8b:72:6d:a2:28:63:a4:5b:
                    15:e0:86:44:84:27:ea:30:2c:27:58:ef:44:01:52:
                    47:09:d4:4c:27:04:35:52:0d:80:f6:9f:71:96:b5:
                    df:a1:1f:09:d2:a7:8e:49:12:66:5b:37:a9:e1:e9:
                    7e:8a:37:b4:ba:04:3d:39:86:ee:7f:55:9c:b7:a6:
                    7c:71:3c:39:6e:b6:79:16:00:58:8e:2f:ea:05:6e:
                    93:1f:52:6a:cf:6c:dc:40:74:74:04:6f:2d:bc:39:
                    b3:86:23:fb:26:d4:10:20:9c:22:31:fe:37:8e:5f:
                    a9:0f:36:cf:10:0d:8f:83:9e:d9:2c:25:d5:a1:b5:
                    22:74:55:b7:5a:54:74:f4:64:5d:1f:a0:e2:36:cd:
                    69:38:4f:b9:72:80:7d:7a:44:33:3e:b0:13:63:e4:
                    f0:be:53:7e:1c:b0:ae:7c:ab:e1:c4:00:dc:da:cf:
                    ca:1a:ff:e5:76:38:90:8a:95:74:93:8c:73:7c:3f:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FF:41:48:41:50:56:5C:0A:00:28:60:B3:6C:DF:29:7F:74:DA:F2
            X509v3 Authority Key Identifier:
                keyid:B1:26:A3:72:83:58:01:BB:B7:38:69:6C:56:DC:F2:55:D0:32:D4:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/B126A372835801BBB738696C56DCF255D032D42F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B126A372835801BBB738696C56DCF255D032D42F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:0b:0f:52:8a:4c:e0:e9:13:7a:5f:c4:87:1d:25:53:13:f7:
         e1:27:c2:cd:13:cf:b5:35:21:0c:2e:f0:e0:78:8d:26:0e:1c:
         34:31:39:21:3b:6a:7d:0d:af:e7:9d:9a:6a:44:3c:16:4e:53:
         43:12:be:3a:e4:3b:d2:97:ef:da:34:d3:b1:05:b1:ad:a5:b6:
         d7:93:c6:62:48:9e:41:6a:fb:cb:82:47:37:8c:96:35:33:16:
         f1:fc:df:98:b2:bc:db:f3:7d:54:de:8f:a0:38:84:04:23:08:
         78:99:e9:ad:44:24:e9:41:01:8d:0f:16:e9:9a:96:c8:66:a3:
         cb:fe:20:c9:b0:6d:fb:f4:8c:8b:c5:c5:92:e0:2d:ad:04:d0:
         cf:90:ca:79:76:9c:58:3c:43:ea:55:b7:2a:c8:23:42:d0:c5:
         64:bb:4f:23:27:e2:aa:93:89:fd:d7:10:9d:8b:f6:32:61:62:
         4d:80:42:bc:d4:77:c2:27:46:dd:7f:b5:fe:d6:64:4a:f3:08:
         62:47:ba:eb:45:71:48:9f:fa:6c:9c:ae:1a:3d:3f:df:15:cb:
         56:6e:9a:e1:cf:63:c0:bd:cd:42:47:4a:2f:f6:23:56:48:b6:
         69:2e:6c:4c:36:64:7a:74:dd:04:2d:9a:df:d3:25:97:56:6a:
         aa:15:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 17:53:16 2024 by rpki-client on console-ams.rpki-client.org