Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa
File:                     3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (raw, json)
Hash identifier:          GIj7bGt2KJmMHJ5uNz1U02OWyC05CIB3DSBOKVVm0kE=
Subject key identifier:   A0:2C:28:27:CF:47:3A:EB:B2:03:C6:B2:1A:1B:9E:9B:1B:6E:12:F8
Certificate issuer:       /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A
Certificate serial:       0B873739871942A6CC39F7ABDA77A0D44CD4F0FA
Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa
Signing time:             Tue 06 Feb 2024 05:00:00 +0000
ROA not before:           Tue 06 Feb 2024 04:55:00 +0000
ROA not after:            Tue 04 Feb 2025 05:00:00 +0000
asID:                     139945
IP address blocks:        103.147.10.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl
                          rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 05:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:37:39:87:19:42:a6:cc:39:f7:ab:da:77:a0:d4:4c:d4:f0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A
        Validity
            Not Before: Feb  6 04:55:00 2024 GMT
            Not After : Feb  4 05:00:00 2025 GMT
        Subject: CN=A02C2827CF473AEBB203C6B21A1B9E9B1B6E12F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:f1:3a:60:73:3b:4e:70:af:45:20:f3:8f:
                    da:9b:9d:9d:82:32:c7:f0:5c:18:34:e7:c2:ec:7c:
                    e9:bb:79:cc:10:1a:50:8a:f2:f2:28:57:22:1b:e7:
                    cc:fa:c9:24:94:d0:f2:fd:0d:20:16:07:e8:0b:00:
                    d5:b7:fd:32:da:f2:b7:cc:22:80:33:07:15:d9:94:
                    90:e1:c5:ef:df:f4:cd:af:a0:7f:c2:d5:95:b5:d9:
                    12:ff:6f:0d:7f:0c:86:bb:a7:c4:ae:49:dc:3a:35:
                    a0:bb:d6:2e:be:eb:5b:21:d7:10:7d:80:b8:df:e3:
                    af:16:2b:b2:ca:c0:fa:05:ee:20:d3:f0:4d:9e:a1:
                    9f:bb:90:3d:8a:0b:c7:ce:e6:92:12:6b:f6:30:52:
                    96:3b:5d:de:68:41:c3:2f:2f:b4:64:4f:2a:3f:4d:
                    b3:4e:92:e6:36:72:63:5f:57:1b:89:1c:27:ac:4b:
                    0e:27:77:36:d8:60:97:29:6d:e9:54:9b:bf:b7:d8:
                    f9:2f:59:d3:05:d4:d9:ff:d7:81:8b:00:e9:07:ec:
                    fe:20:97:97:da:4c:b4:22:6a:87:93:03:91:28:ba:
                    4e:23:30:70:a8:01:10:e4:92:80:3c:4b:fa:da:35:
                    de:5a:d7:54:41:00:35:06:2c:f3:b4:ca:25:a6:fd:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2C:28:27:CF:47:3A:EB:B2:03:C6:B2:1A:1B:9E:9B:1B:6E:12:F8
            X509v3 Authority Key Identifier:
                keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:9d:70:c8:98:14:8c:5f:94:6a:39:07:01:43:c1:6c:60:
         4f:82:5a:d5:88:d7:f7:15:bf:ca:49:69:e9:97:55:9e:78:79:
         c7:36:02:e7:24:c1:ef:66:6e:85:eb:e1:e1:dc:31:b9:bd:1a:
         a4:b9:c5:16:57:fe:ce:6a:3d:96:b0:06:bf:2e:d4:2c:d7:7b:
         90:8f:d1:8a:e4:65:2c:74:ff:b6:0d:8b:ab:da:1e:99:20:ab:
         50:43:0b:1f:fd:58:1a:86:26:5e:81:0f:ce:e8:0f:f4:2d:d6:
         ef:f6:79:79:3d:7d:b3:62:1a:e2:e9:22:0b:bd:77:4a:10:a9:
         bf:c8:1b:f8:d0:89:51:71:22:ee:ee:2d:e4:4d:2d:26:43:75:
         bb:79:83:0d:c0:51:15:96:c4:cc:64:d3:0f:55:e8:f8:76:5a:
         4c:22:87:52:e2:90:49:64:fa:08:55:db:ec:49:3a:7a:09:ac:
         12:2f:cc:fa:aa:cd:9a:2c:c9:f5:5c:96:0c:d8:0a:ed:6b:83:
         71:cb:76:6c:25:3e:4f:4a:60:25:64:3a:fe:8b:ca:16:cf:df:
         eb:48:6e:a1:5d:f2:77:42:b0:12:c6:4f:4a:c1:a2:b9:9f:18:
         10:9a:f9:d6:01:26:70:14:7c:56:a2:96:1c:35:a2:d5:4c:2e:
         6f:b4:71:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org