Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa
File:                     3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa (raw, json)
Hash identifier:          iXY9FGC28FhdQhaxMmIAevC0Q81gv7XSTw3nz0GbyGg=
Subject key identifier:   44:0F:05:A8:67:F1:E7:56:88:B6:25:75:49:F9:B7:D5:A3:72:B7:26
Certificate issuer:       /CN=EBA04070CA27E646C332039E07557734C6732ED2
Certificate serial:       444FDCE28F07E9A9EC98AD4F079C9E1CC4B00B2C
Authority key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa
Signing time:             Sun 22 Oct 2023 02:00:01 +0000
ROA not before:           Sun 22 Oct 2023 01:55:01 +0000
ROA not after:            Sun 20 Oct 2024 02:00:01 +0000
asID:                     141461
IP address blocks:        103.111.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl
                          rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:dc:e2:8f:07:e9:a9:ec:98:ad:4f:07:9c:9e:1c:c4:b0:0b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBA04070CA27E646C332039E07557734C6732ED2
        Validity
            Not Before: Oct 22 01:55:01 2023 GMT
            Not After : Oct 20 02:00:01 2024 GMT
        Subject: CN=440F05A867F1E75688B6257549F9B7D5A372B726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:ba:ea:6a:70:57:9b:23:07:1d:8e:95:52:
                    0d:ef:29:ec:91:22:47:55:16:ca:cc:80:bd:40:a9:
                    9a:c8:7d:78:b8:fe:ae:97:f7:db:48:d8:82:f3:0b:
                    1c:69:34:a1:ac:07:b3:43:ca:24:ca:e6:d3:23:a7:
                    5b:6a:b4:a5:ce:19:3c:d3:2d:d4:c8:e0:f6:0e:9a:
                    22:45:d5:76:36:fa:5d:f9:a0:90:98:a4:f5:19:5a:
                    63:4d:78:22:4e:ba:dd:ce:8e:2e:50:dd:83:c9:90:
                    03:0f:4c:ea:9a:ab:4e:d7:3b:15:4e:e8:c1:c9:77:
                    48:f4:f5:15:5b:48:d6:1f:d4:20:3e:1f:f2:0c:f4:
                    f1:d1:b6:a3:33:56:1f:f0:f0:c2:1e:54:ab:5c:d7:
                    54:96:83:8a:24:f0:0b:21:6d:3e:6d:e9:e4:14:42:
                    bf:51:55:a5:43:04:1b:cb:16:c3:f8:f0:aa:12:c4:
                    2d:5a:9b:d4:d6:4e:4c:bf:d0:f9:51:98:74:72:75:
                    4b:31:aa:3a:f9:7d:e8:7a:f9:89:01:78:70:be:df:
                    46:1c:6f:15:00:41:83:9d:b8:6c:81:fb:30:48:b8:
                    22:a2:c8:f3:9e:31:ae:4d:63:4e:0d:a7:b1:50:64:
                    b8:20:29:c4:4e:39:88:fd:da:06:9d:8c:f9:89:94:
                    c5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0F:05:A8:67:F1:E7:56:88:B6:25:75:49:F9:B7:D5:A3:72:B7:26
            X509v3 Authority Key Identifier:
                keyid:EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/3130332e3131312e3134332e302f32342d3234203d3e20313431343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:d1:30:5f:a5:1d:6d:ff:0f:89:2a:41:78:a4:cd:97:9a:
         2a:5b:c7:65:ad:23:18:fd:8e:6c:b4:b4:a5:0e:a4:f5:40:e9:
         be:3a:79:20:27:82:cd:d7:67:8e:95:62:82:22:f8:27:07:cf:
         f0:4a:8f:ff:58:f7:a8:16:96:5e:e8:be:9c:82:7a:6b:ec:c4:
         f5:e3:4c:76:38:d2:d4:3a:5f:61:d6:04:b9:e9:21:d8:f6:0d:
         69:04:af:f8:e2:ef:20:f3:b3:ef:4c:ff:b9:f6:8b:38:9c:0e:
         60:48:f7:d9:61:91:8f:e2:c2:d8:03:3a:93:61:78:df:76:e3:
         53:c3:7b:ea:be:bd:7b:b3:23:ce:ff:d0:f1:61:c0:ea:ba:d5:
         d8:57:a6:36:14:83:6f:45:37:e2:7d:0d:a1:2b:2c:72:b8:50:
         ec:8d:51:7a:61:53:cc:f7:37:f7:a9:6a:1c:02:6d:10:fc:69:
         b6:e2:bc:72:32:49:b8:3d:a8:2f:aa:ae:e6:56:39:f3:c1:81:
         1a:46:f5:3e:bb:22:7e:af:14:e1:3b:95:67:64:3e:c8:d2:88:
         3c:9d:aa:50:f6:16:96:91:dc:34:5f:ff:f5:d2:16:99:b0:7f:
         c4:ef:43:98:00:ec:fe:00:26:f6:4a:31:6e:b6:7c:00:9c:67:
         c1:74:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 07:09:50 2024 by rpki-client on console-ams.rpki-client.org