Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa
File:                     3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (raw, json)
Hash identifier:          t5aqcdifr99YTsNsrp+Th8qjHneTIsQfI7h4VwY+z3M=
Subject key identifier:   20:8C:35:81:05:49:AE:56:EC:C4:65:0F:14:86:37:57:4F:46:5A:D8
Certificate issuer:       /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
Certificate serial:       06C1AF10792D3A316A0A13D4CA7CC8E047D7E62C
Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa
Signing time:             Mon 31 Jul 2023 00:09:01 +0000
ROA not before:           Mon 31 Jul 2023 00:04:01 +0000
ROA not after:            Mon 29 Jul 2024 00:09:01 +0000
asID:                     139457
IP address blocks:        103.146.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl
                          rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 09:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c1:af:10:79:2d:3a:31:6a:0a:13:d4:ca:7c:c8:e0:47:d7:e6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
        Validity
            Not Before: Jul 31 00:04:01 2023 GMT
            Not After : Jul 29 00:09:01 2024 GMT
        Subject: CN=208C35810549AE56ECC4650F148637574F465AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:da:80:5a:fe:67:ab:c9:a5:2b:22:a6:a4:57:
                    c3:d1:14:3d:6c:cc:7f:3a:0c:88:87:f6:93:cd:af:
                    78:5a:4e:63:a9:b2:88:aa:a4:74:52:07:7a:29:ae:
                    c5:09:07:f7:14:25:2c:45:0c:0e:11:25:4d:cc:d1:
                    3b:32:e5:9b:52:d6:54:0a:d7:3f:7b:eb:9d:d6:f4:
                    10:a0:9a:f3:b5:d9:d1:20:99:93:21:21:62:f9:49:
                    87:15:13:7e:e3:4b:1e:58:0f:5c:49:c9:f0:75:3d:
                    22:56:2a:8f:48:b3:63:2f:67:f9:76:1c:36:ce:4f:
                    18:0e:a1:06:eb:53:8c:b8:8b:2c:1d:3a:1a:8d:aa:
                    44:c4:70:9a:bc:64:b6:4e:65:75:e6:26:0d:37:6a:
                    5b:77:10:20:78:2a:73:23:a3:f2:4c:e7:a8:e8:69:
                    36:b0:19:ff:85:b3:47:71:f5:0a:73:07:3c:fb:60:
                    73:7f:d1:1d:0c:f0:f1:0d:8f:e6:c2:22:35:93:37:
                    28:27:9a:d1:aa:63:04:1e:24:04:e7:57:f7:ab:c9:
                    6a:4d:a8:cc:e4:c5:81:20:7d:11:db:6d:84:9c:d2:
                    46:15:3d:9e:a9:1b:a5:b8:50:88:7c:72:aa:ad:b0:
                    ae:e8:55:17:f0:91:e4:e4:57:18:47:66:35:69:c7:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:35:81:05:49:AE:56:EC:C4:65:0F:14:86:37:57:4F:46:5A:D8
            X509v3 Authority Key Identifier:
                keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:d6:2e:d0:b1:91:5d:08:3b:0a:8a:ad:22:30:67:dd:06:8f:
         ef:f8:6e:95:b6:9b:ba:c4:8f:d7:a2:2a:8e:1d:e1:81:23:a5:
         4d:8f:da:bb:50:d8:34:c4:69:b4:27:2b:ae:ce:4f:e6:49:56:
         5d:cf:da:16:fd:0b:a0:93:f3:3a:30:0f:73:0c:b8:34:76:fc:
         3b:f2:d8:da:8c:69:2e:98:c0:63:a7:53:a2:08:be:b5:76:2d:
         1b:7b:38:dd:c4:c0:68:ea:25:66:07:81:1c:11:55:eb:4d:01:
         26:ea:68:38:f2:f4:32:82:3e:a3:2d:ac:cb:d1:19:48:50:d5:
         15:d5:31:26:02:1b:09:af:35:95:e1:63:0e:64:85:3a:a7:be:
         cd:c9:69:6c:04:b5:1f:e7:5d:16:ee:9b:25:1c:a5:30:9b:12:
         8d:c4:eb:e1:8d:2c:61:3c:3f:ae:9f:68:c6:d0:f9:55:21:31:
         a9:ac:a1:56:f1:5c:6f:d3:39:46:d9:ce:8b:18:58:8a:4b:4b:
         e6:dd:3b:fa:c0:ca:c2:26:a2:4c:4f:ab:eb:af:e7:b1:0e:8b:
         65:7d:4f:e3:e4:b7:6f:3e:4b:60:7e:b3:6a:74:3d:a9:aa:ef:
         b4:d9:fe:fc:61:13:97:aa:39:54:4d:c2:42:e7:af:ac:4f:8b:
         41:98:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:07:09 2024 by rpki-client on console-fra.rpki-client.org