Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
File:                     3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (raw, json)
Hash identifier:          f00G0Ym1ByDy1/qaeBLTX62vBHyBJkGQ88rOwSYKEAQ=
Subject key identifier:   67:52:C1:C2:13:3A:5C:85:5E:7A:13:2E:16:93:9F:39:22:E2:97:0B
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       2646A548AFA7B4C17BAE7544BA3C08249D97712A
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
Signing time:             Mon 01 Jul 2024 01:05:26 +0000
ROA not before:           Mon 01 Jul 2024 01:00:26 +0000
ROA not after:            Mon 30 Jun 2025 01:05:26 +0000
asID:                     139401
IP address blocks:        103.142.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:46:a5:48:af:a7:b4:c1:7b:ae:75:44:ba:3c:08:24:9d:97:71:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jul  1 01:00:26 2024 GMT
            Not After : Jun 30 01:05:26 2025 GMT
        Subject: CN=6752C1C2133A5C855E7A132E16939F3922E2970B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:fb:80:28:6b:8b:38:15:96:8d:17:a3:e4:
                    11:03:38:46:10:77:dd:b9:a6:33:6d:81:2d:70:92:
                    82:e1:64:dd:dd:f3:b8:bc:0b:97:07:59:b5:b4:60:
                    8a:74:e7:d9:26:e1:1f:a1:b3:2d:03:ac:bd:fc:98:
                    9d:05:9e:cc:5a:07:eb:ab:92:7b:23:98:cc:04:f1:
                    12:22:ef:cb:f6:a6:31:84:46:6d:6a:50:93:5f:13:
                    e9:d1:dc:18:bb:97:22:3b:84:19:cc:25:b0:e3:88:
                    2b:05:93:68:1d:9d:86:1a:2d:22:6a:1d:db:39:06:
                    af:a8:e4:7d:f3:9a:be:05:d0:71:0a:b1:47:8a:2e:
                    51:52:f7:dd:73:36:f6:b9:6c:05:2f:ce:b7:53:42:
                    e7:ed:f7:c8:e6:51:42:56:6f:b2:62:46:c0:1a:81:
                    3d:61:d3:6e:a0:4a:50:4e:ba:6b:67:5e:c0:dc:37:
                    4a:bf:27:b7:86:fe:ae:58:43:9b:29:e8:cb:e6:e2:
                    19:bc:a7:99:39:b9:6d:bc:22:e3:2b:29:a7:85:cd:
                    40:28:80:e2:0f:0a:35:e5:e5:5e:07:6d:42:07:dc:
                    cc:ac:35:52:7f:56:ed:6d:87:18:92:98:71:28:df:
                    5b:bf:0a:94:24:87:f0:8f:b7:80:e8:7b:dc:32:80:
                    61:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:52:C1:C2:13:3A:5C:85:5E:7A:13:2E:16:93:9F:39:22:E2:97:0B
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:fa:fb:4f:a5:2c:1c:bc:31:be:2e:18:6c:fc:88:17:70:6c:
         f5:45:46:7a:3a:6f:35:3c:f2:d7:61:30:8b:8a:d3:39:c2:85:
         47:a1:04:7b:7d:c8:33:7b:54:9d:31:3e:66:d9:94:a8:d3:0c:
         be:75:d3:ce:83:79:43:c4:0c:b5:91:6c:d6:d8:a6:2c:15:cc:
         4c:1e:0b:22:a0:59:3d:fb:54:b8:df:86:2c:b1:3f:02:51:28:
         de:d7:f9:21:94:00:ed:ff:74:2e:f2:7f:bc:f3:96:4c:8f:52:
         b2:26:92:08:89:ca:ac:51:e7:bc:c0:97:2e:bf:e0:31:de:fc:
         d3:f2:cf:ad:82:59:6a:31:45:f5:86:da:24:6f:bd:f8:ee:36:
         ac:0b:0b:9f:b5:d5:67:b9:cc:61:fb:16:c2:c3:bf:73:9d:2b:
         98:55:8d:25:92:4c:8c:58:a5:92:fb:56:c4:2f:d8:f1:19:4c:
         3c:6c:61:d4:3f:36:41:b4:69:4f:00:fe:f5:0f:2c:55:9c:a5:
         3c:04:6a:b8:0a:1c:43:ac:96:bf:26:30:3d:9e:fa:fb:a9:92:
         97:f7:eb:ce:c7:e7:97:aa:91:5b:44:ca:c8:4c:46:1c:86:a5:
         ab:1b:81:46:01:45:75:38:f9:66:74:c3:ab:95:29:c4:96:5e:
         d9:70:93:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org