Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
File:                     3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (raw, json)
Hash identifier:          OMySImfpgyCIMlwLth368LnTxjS5g3j3UZAHGZWt0KA=
Subject key identifier:   57:9B:6E:4C:56:2C:16:9B:F9:ED:41:57:09:D5:99:8F:DA:E5:42:9B
Certificate issuer:       /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
Certificate serial:       5F442F54A7D3B2F8D9F7B31ABB750A951DF9CD8A
Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa
Signing time:             Mon 31 Jul 2023 00:06:22 +0000
ROA not before:           Mon 31 Jul 2023 00:01:22 +0000
ROA not after:            Mon 29 Jul 2024 00:06:22 +0000
asID:                     138131
IP address blocks:        103.121.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl
                          rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 07:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:44:2f:54:a7:d3:b2:f8:d9:f7:b3:1a:bb:75:0a:95:1d:f9:cd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD
        Validity
            Not Before: Jul 31 00:01:22 2023 GMT
            Not After : Jul 29 00:06:22 2024 GMT
        Subject: CN=579B6E4C562C169BF9ED415709D5998FDAE5429B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:61:3b:fe:10:e9:8b:b2:03:d9:15:47:a0:
                    e1:b4:86:03:2f:a3:25:69:1c:d3:bc:c0:26:63:2c:
                    1f:ef:e6:1b:9a:75:23:cb:3a:6a:d1:c7:d1:9c:c7:
                    39:38:92:86:a4:8e:b4:cc:3d:25:c1:d0:4c:d0:26:
                    49:be:99:7d:4e:01:da:12:c1:8d:42:8f:3e:8a:2d:
                    c7:24:d5:e1:22:3b:3c:8e:82:db:59:f2:cf:8b:52:
                    61:f7:38:0f:00:c1:b3:52:f8:26:dd:82:7c:e8:23:
                    02:fb:cb:e8:0b:54:24:ed:54:7f:dc:2f:9b:29:e2:
                    68:bb:46:af:4c:75:7b:9e:d0:6b:ea:8d:e9:de:a4:
                    42:ff:cf:5e:40:71:78:b6:59:30:50:70:0f:16:ae:
                    ed:b6:1a:8a:c0:29:e8:c2:2b:53:76:a9:d0:b6:a7:
                    64:02:24:a5:6b:27:56:45:9f:d2:4f:5c:14:b3:3b:
                    95:d0:95:dd:9a:57:5f:2f:44:61:2f:95:68:2b:78:
                    a1:90:5d:2a:4a:17:70:41:f6:b6:eb:40:c6:1e:62:
                    48:2c:1c:59:d2:81:1e:10:93:cc:c6:4f:4d:f8:b6:
                    f4:c8:3c:e8:50:82:56:41:2f:fa:c3:b5:96:68:20:
                    a4:dd:fe:02:ee:52:2c:03:ff:dc:bc:19:00:00:a2:
                    a9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9B:6E:4C:56:2C:16:9B:F9:ED:41:57:09:D5:99:8F:DA:E5:42:9B
            X509v3 Authority Key Identifier:
                keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:fe:2c:ab:37:55:18:8d:67:69:58:75:4d:c3:bf:29:72:
         08:ab:b2:39:b9:14:55:00:c0:b7:d3:77:65:e9:ae:a6:fd:ec:
         d6:e6:4b:86:f5:cb:3e:4a:7a:7f:d9:73:35:da:64:15:7f:4c:
         fe:9c:74:7b:40:1a:4b:d4:85:18:35:9f:6f:df:8a:41:6d:08:
         5c:0c:32:0f:9b:0d:15:b7:52:65:73:35:d8:c9:14:da:65:65:
         c8:06:52:85:a8:80:f1:25:a9:6b:d2:82:d7:95:14:31:2a:0a:
         73:63:80:ad:9c:26:d1:a0:78:50:7f:0e:a0:12:71:86:db:f3:
         d0:67:1f:b6:ed:20:0b:5b:73:4c:58:52:29:80:ab:78:b3:60:
         a3:23:18:8a:a0:5b:81:87:a2:d4:8b:c2:39:9b:94:56:cb:0e:
         77:8f:b8:20:bd:2a:2e:10:eb:4b:63:62:fc:e3:ca:25:1b:18:
         ab:68:ab:da:4e:54:10:85:56:04:fc:ec:41:9b:f8:33:4f:a2:
         9d:9f:51:11:99:67:ad:71:79:6b:ce:f0:47:da:fa:31:16:d1:
         30:a5:a3:a4:f7:ab:fd:41:60:0d:ad:e6:88:9e:b6:5f:c4:b6:
         72:29:4c:b3:32:04:9a:8b:91:7c:a9:40:43:66:08:a6:13:28:
         b2:2a:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:43:12 2024 by rpki-client on console-fra.rpki-client.org