Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
File:                     3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa (raw, json)
Hash identifier:          vgSJOZijG8F840g+vXqyXtkNcdCyGxB8PWHs8kOuy+A=
Subject key identifier:   DC:67:36:0E:9C:34:E0:AF:4A:46:EC:89:98:C9:20:4E:E9:1B:4C:15
Certificate issuer:       /CN=146B42876A5C2AB0705F67F1A3918D76984989AF
Certificate serial:       126340D257392CD4A07DE3F1B59BF55DFF927194
Authority key identifier: 14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa
Signing time:             Fri 28 Jul 2023 01:58:19 +0000
ROA not before:           Fri 28 Jul 2023 01:53:19 +0000
ROA not after:            Fri 26 Jul 2024 01:58:19 +0000
asID:                     149891
IP address blocks:        103.190.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl
                          rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:63:40:d2:57:39:2c:d4:a0:7d:e3:f1:b5:9b:f5:5d:ff:92:71:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146B42876A5C2AB0705F67F1A3918D76984989AF
        Validity
            Not Before: Jul 28 01:53:19 2023 GMT
            Not After : Jul 26 01:58:19 2024 GMT
        Subject: CN=DC67360E9C34E0AF4A46EC8998C9204EE91B4C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6f:b0:e1:fa:f6:e4:ff:51:a7:50:6d:e2:12:
                    4a:13:2e:d2:ae:6c:f9:4d:00:45:41:1b:b8:0d:17:
                    f8:5e:31:5f:af:74:4c:02:0b:57:2c:52:e1:1e:a3:
                    86:e6:ba:82:e9:bd:d6:05:8e:34:55:a8:49:96:a0:
                    19:a8:e7:e2:43:f7:b9:15:05:06:ec:34:2c:73:cd:
                    7c:3f:93:b8:88:e4:33:a6:f7:63:5e:10:29:1c:ba:
                    77:7c:59:58:d0:e1:73:15:e3:c2:8d:78:e2:72:46:
                    d6:5a:ae:71:4e:3c:c8:af:c9:92:97:e3:dc:03:2c:
                    d4:bc:cc:86:3b:54:7b:7c:fb:f9:54:ae:f7:a5:68:
                    29:c7:c7:0d:a7:d5:4c:af:5f:d9:cc:ce:86:99:5a:
                    14:7b:e9:ce:31:7d:bb:d2:e9:c8:77:5c:a1:1f:c4:
                    7b:b9:ce:f6:2e:36:d6:c3:42:4f:32:e5:15:0f:62:
                    d1:75:9a:74:7f:44:6c:49:4e:68:5c:3f:df:69:47:
                    bf:84:7e:4a:bd:b8:d4:18:4e:57:22:33:65:80:3f:
                    e5:36:9b:34:89:d1:9e:af:4d:97:56:f6:2d:86:d5:
                    57:1b:d1:b2:33:da:20:cf:de:29:9a:a7:3a:db:56:
                    f0:b7:6b:74:e7:db:a4:90:f3:43:b4:28:77:e9:bc:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:67:36:0E:9C:34:E0:AF:4A:46:EC:89:98:C9:20:4E:E9:1B:4C:15
            X509v3 Authority Key Identifier:
                keyid:14:6B:42:87:6A:5C:2A:B0:70:5F:67:F1:A3:91:8D:76:98:49:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/146B42876A5C2AB0705F67F1A3918D76984989AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/146B42876A5C2AB0705F67F1A3918D76984989AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1dee126f-8192-4d28-b25e-deabdb79eb21/0/3130332e3139302e33312e302f32342d3234203d3e20313439383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:6e:f1:5b:65:0a:8d:b6:e7:66:9c:2b:db:47:8c:25:59:ee:
         13:dc:e8:ce:c6:db:8a:6b:39:3e:a9:1f:62:80:b8:13:a8:76:
         28:52:34:11:03:42:37:c3:e8:e1:81:fe:56:43:a9:57:a0:51:
         88:bb:96:cc:26:88:49:64:7b:90:e4:3e:84:96:63:72:02:aa:
         7c:52:e7:5b:80:b3:eb:59:31:76:0f:b7:67:3b:f2:d5:10:fe:
         83:24:09:95:f0:20:e4:7d:09:7d:ee:1c:6d:8e:8b:a8:b3:89:
         fc:54:bf:70:cf:e3:3c:9c:99:f8:9f:c4:3a:b2:ca:a0:47:f6:
         98:c6:b4:7c:ea:29:8b:8a:df:31:03:0d:f1:f1:ae:c8:74:c9:
         d2:a5:18:3c:4c:e5:46:ba:54:b7:e9:21:a4:e1:b0:a2:e5:50:
         1a:0a:dd:31:22:2c:4d:a2:40:e1:7d:02:d5:fb:1a:cc:71:ac:
         72:af:8b:4a:2e:42:ec:ec:58:dc:6f:45:41:da:07:5b:c2:74:
         12:c6:4b:f8:f5:a7:1c:1e:32:0f:35:41:5e:d3:61:dd:20:25:
         b8:1f:1b:53:52:cd:e9:af:05:bc:d8:c4:82:ff:34:51:7c:21:
         94:c8:41:52:18:73:83:b3:8e:bd:a5:4f:ce:24:76:5e:37:71:
         20:6b:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:39:14 2024 by rpki-client on console-fra.rpki-client.org