Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35312e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          Wu/5ZgNf8c/KhdnlKxYnJ7hH2f8MdlxTP5yUJ79XkRs=
Subject key identifier:   DC:81:7B:73:E6:E5:91:8D:15:9C:BE:D0:4D:50:73:79:D2:B7:68:9F
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       65D50DE2F43715AC6EB5DF3A76C2266B6304B7FE
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35312e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 02 Aug 2023 19:00:00 +0000
ROA not before:           Wed 02 Aug 2023 18:55:00 +0000
ROA not after:            Wed 31 Jul 2024 19:00:00 +0000
asID:                     59273
IP address blocks:        103.226.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d5:0d:e2:f4:37:15:ac:6e:b5:df:3a:76:c2:26:6b:63:04:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Aug  2 18:55:00 2023 GMT
            Not After : Jul 31 19:00:00 2024 GMT
        Subject: CN=DC817B73E6E5918D159CBED04D507379D2B7689F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:30:77:e5:18:ec:b5:37:82:e9:3a:81:b1:
                    f2:66:c8:2f:e4:7e:74:fb:ce:8b:e8:07:fa:29:63:
                    cb:78:2d:03:b2:5b:f9:52:63:32:50:14:b1:be:ce:
                    eb:79:f3:a1:56:5a:dc:3d:3c:e4:37:4b:39:77:90:
                    a7:c5:d4:39:14:71:52:ff:af:29:5c:e8:f6:f2:e1:
                    e8:2d:29:01:5f:ed:d2:a0:9c:d1:1e:fa:f7:20:ec:
                    e5:f7:e6:d5:c9:40:3b:8f:1d:ef:d5:5b:6a:77:b8:
                    db:49:b8:68:4f:91:d5:00:f9:6b:74:10:18:d2:92:
                    45:7b:21:d8:32:04:46:e9:a4:4f:50:da:1d:cc:62:
                    d3:60:e8:ad:56:83:ae:75:85:15:0d:a1:e1:b9:2b:
                    b0:34:39:4c:46:62:f4:80:62:ce:21:19:e6:94:20:
                    6e:20:c0:17:26:60:df:6d:d0:92:5e:7a:43:ad:bc:
                    52:1a:83:de:8f:56:83:75:41:05:21:ce:81:61:49:
                    93:23:a8:e5:a7:ef:80:d6:63:4e:d5:68:d2:56:2c:
                    1b:e0:ed:f1:fe:94:36:80:3b:2b:a6:e5:6f:00:05:
                    2e:20:d8:2e:9d:87:78:7c:0d:ff:62:a3:d2:53:a7:
                    87:2a:ed:e1:8f:01:ee:82:c9:92:dc:a8:f7:d2:06:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:81:7B:73:E6:E5:91:8D:15:9C:BE:D0:4D:50:73:79:D2:B7:68:9F
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35312e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:de:7c:cf:97:10:b6:f9:28:e0:b5:77:0c:27:e2:f2:2f:d4:
         d8:19:1b:60:4a:a5:c3:7d:5a:ee:b4:69:ce:02:f6:b2:a8:e5:
         b2:73:1c:6f:59:57:02:ef:ab:cc:dd:b3:8c:d1:5f:ba:53:ab:
         56:fa:fd:70:24:5f:68:59:f9:61:68:9d:56:70:b4:58:c2:fe:
         64:0c:8d:08:55:74:13:b1:59:bc:20:90:c3:83:41:64:b7:cc:
         db:4d:2c:d8:09:3a:dd:95:02:a0:0f:d1:8c:90:ba:95:b9:5a:
         f8:0e:54:13:5e:b3:fd:59:46:b4:4d:a8:06:33:eb:8f:bf:99:
         dd:6f:62:e1:e2:f5:c5:2a:80:4e:09:01:17:b7:ed:db:cf:47:
         a8:9b:eb:29:f8:07:ed:7f:3d:a0:00:cc:9b:9e:9d:c4:b4:3c:
         05:2b:11:c3:61:22:75:08:d5:aa:8c:e8:57:0d:9e:cc:af:b1:
         76:2d:26:2d:52:6e:bf:8e:9c:5b:52:89:72:25:f4:78:16:b5:
         cc:1e:d0:bd:18:4c:b7:96:bb:68:8e:f4:be:0d:c9:a2:c6:e9:
         f8:50:3b:e6:6e:11:f8:cf:f4:ff:bc:f9:44:7b:e3:07:3a:1a:
         e2:38:f4:5f:1f:96:07:8e:db:77:3d:4e:40:3d:6d:5c:82:f3:
         c4:51:5a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:21 2024 by rpki-client on console-fra.rpki-client.org