Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa
File:                     3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa (raw, json)
Hash identifier:          W8X6r3JanpvGeoa+e5QvEzIjBLTO+VwBEX5tmADWxPc=
Subject key identifier:   ED:2C:C3:79:38:E6:47:7C:4C:52:58:02:79:1F:65:C5:A5:2E:D5:07
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       EDF79DE36AEE5717EF202C898CAFB124728414
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa
Signing time:             Mon 01 Jul 2024 01:05:26 +0000
ROA not before:           Mon 01 Jul 2024 01:00:26 +0000
ROA not after:            Mon 30 Jun 2025 01:05:26 +0000
asID:                     139401
IP address blocks:        103.142.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:f7:9d:e3:6a:ee:57:17:ef:20:2c:89:8c:af:b1:24:72:84:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jul  1 01:00:26 2024 GMT
            Not After : Jun 30 01:05:26 2025 GMT
        Subject: CN=ED2CC37938E6477C4C525802791F65C5A52ED507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:5f:3f:11:3a:40:cb:36:90:c0:4c:18:63:
                    68:ac:af:12:5e:7b:14:ef:af:ac:86:64:f5:68:99:
                    81:83:16:ee:39:c6:6a:9d:79:09:14:b7:47:63:74:
                    43:e4:ec:c7:36:e2:7d:c5:e0:b0:25:ae:b8:1b:01:
                    36:71:86:a5:f2:84:83:e6:b5:07:de:3b:ba:7f:9c:
                    40:f8:c0:35:8e:51:93:cd:2c:eb:47:df:7f:de:cd:
                    4d:8c:c0:e0:9a:07:1b:ac:f7:40:bf:1a:16:f0:8d:
                    44:71:a9:99:a3:97:ed:d2:bd:1a:c7:af:43:a6:28:
                    b3:fe:e8:92:e6:bd:e3:21:1b:1a:56:03:15:be:b5:
                    83:a4:81:8a:b4:56:4a:fc:cb:62:ac:60:2c:4d:c4:
                    77:16:bc:48:a1:3b:49:80:7f:e9:f9:b5:dc:87:28:
                    31:0c:9c:46:90:26:1b:92:63:83:af:0a:0c:c8:e3:
                    73:e9:b1:45:e1:2f:85:2e:b6:d4:29:fd:91:a8:50:
                    b2:e3:0a:4f:e2:a1:f8:49:aa:4d:5a:ae:4d:3f:9b:
                    6c:1f:4b:ec:91:d1:81:5c:bb:7f:64:b8:bb:e1:31:
                    ea:9b:71:64:ee:ef:2d:7e:de:2b:6d:94:e8:74:bb:
                    bb:c9:16:ba:ac:1b:06:ee:ef:1c:d6:14:65:13:08:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:C3:79:38:E6:47:7C:4C:52:58:02:79:1F:65:C5:A5:2E:D5:07
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32332d3233203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:cc:51:28:30:4d:1d:1b:73:27:0a:b0:c3:b6:33:7b:d0:4f:
         8e:d8:8a:78:a5:c4:dd:51:19:e0:3a:48:cd:96:58:ac:94:3b:
         9a:c7:36:f5:79:e9:9f:60:13:05:23:ab:6f:da:b7:f7:19:60:
         60:ad:11:98:b1:e3:08:ed:38:83:a4:69:46:db:af:e5:2b:21:
         63:28:e9:8b:07:6e:d0:3d:e4:a4:17:26:da:d9:e7:4f:09:2c:
         e2:fb:85:69:46:a8:78:7d:ae:0b:32:3a:6d:f0:f1:75:91:49:
         ab:45:38:93:5b:fc:f4:d1:58:ae:63:54:9d:5f:05:4b:df:fb:
         48:18:7a:0b:f5:9a:85:a4:da:00:be:7e:3a:65:02:d7:f6:73:
         10:e7:d4:37:4b:16:ac:1a:29:b2:5a:1c:90:d3:05:a2:b7:f3:
         b3:38:19:4e:55:81:3e:a6:3d:de:77:e7:3d:3b:60:7b:38:fc:
         9c:c2:f9:b3:37:50:d0:a3:ca:60:54:64:7e:22:ad:99:05:b5:
         12:7e:55:12:b0:45:80:1a:fb:bc:b2:e4:f6:ba:5c:af:4b:ef:
         68:15:f7:33:ed:df:92:c0:78:e8:37:b2:ab:e3:6c:2e:e8:f7:
         eb:81:53:e1:e9:b8:b1:6f:f9:a0:b8:f6:8d:36:75:ff:73:73:
         f0:6d:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org