Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136322e302f32342d3234203d3e20313338383134.roa
File:                     3130332e3133362e3136322e302f32342d3234203d3e20313338383134.roa (raw, json)
Hash identifier:          LPPz1Yc1QjTtH06aIhEfTKLJY8jVHC5UeJrzy927Ibw=
Subject key identifier:   F6:0C:3B:80:2F:1B:35:BB:A6:DA:A5:EF:31:22:C5:56:ED:62:3B:EE
Certificate issuer:       /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial:       2BCCD79256AE508CFC6359D55A0CB199586ADDB0
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136322e302f32342d3234203d3e20313338383134.roa
Signing time:             Sun 15 Oct 2023 14:00:01 +0000
ROA not before:           Sun 15 Oct 2023 13:55:01 +0000
ROA not after:            Sun 13 Oct 2024 14:00:01 +0000
asID:                     138814
IP address blocks:        103.136.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
                          rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:cc:d7:92:56:ae:50:8c:fc:63:59:d5:5a:0c:b1:99:58:6a:dd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
        Validity
            Not Before: Oct 15 13:55:01 2023 GMT
            Not After : Oct 13 14:00:01 2024 GMT
        Subject: CN=F60C3B802F1B35BBA6DAA5EF3122C556ED623BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:3d:57:11:93:27:bc:4f:e3:1f:71:19:62:
                    2c:4e:ed:81:01:c3:d9:dc:0a:65:25:84:f7:a6:bc:
                    5c:00:67:02:fe:31:5d:5e:15:0b:fe:b8:75:da:a2:
                    46:5a:95:29:70:96:4e:5e:31:6e:4a:dc:8f:bb:03:
                    12:c4:a3:1d:cf:28:35:29:69:dc:b9:82:72:05:5f:
                    2e:de:94:12:66:c3:5a:ed:ba:fb:9d:e9:51:03:d2:
                    0c:00:52:17:a9:e1:d7:40:e2:fb:0f:2b:e2:36:5c:
                    bc:8a:1b:bf:22:4f:e4:fa:fb:98:3d:33:fd:cc:4e:
                    44:bc:b9:cb:27:34:9a:d5:1b:2c:71:c5:d8:2f:61:
                    64:f3:7b:1e:c1:16:7b:77:63:1f:9b:8c:4e:9a:43:
                    57:30:fb:bb:e5:7c:ea:09:e0:a9:99:01:89:d5:8c:
                    7b:1b:2f:63:d5:db:2e:00:f4:0d:9b:38:7e:b0:e3:
                    a2:f8:65:22:b9:05:e6:9f:fd:42:7b:df:a8:b4:4a:
                    e8:9a:12:79:2a:54:cf:23:c9:64:73:87:93:c2:37:
                    2c:44:2f:4d:dd:34:01:3e:90:16:cc:3c:e3:0e:20:
                    37:93:7c:e1:a3:86:89:cd:e0:9d:54:39:0b:08:d1:
                    6f:12:32:db:0c:7f:de:4b:61:df:4e:3e:22:20:79:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0C:3B:80:2F:1B:35:BB:A6:DA:A5:EF:31:22:C5:56:ED:62:3B:EE
            X509v3 Authority Key Identifier:
                keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136322e302f32342d3234203d3e20313338383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:d8:07:8c:32:fe:2b:ad:cd:1b:56:a0:8d:0e:8c:71:bd:f6:
         40:7d:66:3e:cf:13:58:92:e9:08:10:55:c0:59:1e:bb:cd:13:
         ac:9a:94:e0:48:cb:77:1f:ab:93:5e:c0:33:b2:a5:d6:9f:41:
         04:7e:57:48:e6:81:3e:c4:73:ed:60:4d:e1:33:d5:96:1d:4b:
         f7:23:8a:ba:69:af:f1:0f:b7:06:97:50:1a:a0:a2:94:8e:ff:
         b6:1a:52:8f:9c:88:37:89:d4:c9:3c:ee:4c:da:bc:4e:ec:c3:
         30:23:67:1c:7a:a2:06:15:bd:f2:86:73:58:f3:e3:13:64:6f:
         41:26:b9:70:d1:45:90:0c:e0:1d:12:34:9c:d1:74:7f:d9:49:
         ed:88:9a:96:44:7e:dc:2c:5a:17:cb:00:83:4f:c2:c5:ef:c1:
         29:25:ce:aa:cc:d5:06:79:cb:85:8f:ea:94:98:9f:c2:ff:31:
         ac:bb:80:07:47:a8:a9:bf:ec:ce:de:f2:f2:c4:c8:b1:4a:05:
         75:b5:3b:dc:fb:60:f9:7a:d9:1b:cc:37:41:7d:6f:d7:23:60:
         ef:02:0a:3c:b9:d3:86:1f:79:87:63:e5:0c:87:b4:bc:ba:96:
         51:d0:4f:7b:9c:97:43:41:fd:11:86:56:9f:50:8d:06:ef:76:
         5c:b3:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:14 2024 by rpki-client on console-ams.rpki-client.org