Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa
File:                     3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (raw, json)
Hash identifier:          ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=
Subject key identifier:   97:F6:9F:EC:4F:51:A2:30:B1:9F:C8:B0:05:F8:ED:74:53:C6:0C:76
Certificate issuer:       /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A
Certificate serial:       78537238E4C517BBB7AC21789697DFCF8BCE1E1D
Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa
Signing time:             Fri 18 Oct 2024 12:54:17 +0000
ROA not before:           Fri 18 Oct 2024 12:49:17 +0000
ROA not after:            Fri 17 Oct 2025 12:54:17 +0000
asID:                     142333
IP address blocks:        103.65.142.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl
                          rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:53:72:38:e4:c5:17:bb:b7:ac:21:78:96:97:df:cf:8b:ce:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A
        Validity
            Not Before: Oct 18 12:49:17 2024 GMT
            Not After : Oct 17 12:54:17 2025 GMT
        Subject: CN=97F69FEC4F51A230B19FC8B005F8ED7453C60C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:68:1c:23:51:94:2f:9b:a5:b8:fa:24:3c:
                    c3:29:22:04:1f:6b:2f:ce:b5:40:43:34:20:a2:84:
                    e2:25:8b:07:d2:28:0f:bc:b2:94:38:02:66:a6:3c:
                    ea:14:49:9b:a1:26:39:dd:d1:2d:e3:0e:52:3e:66:
                    08:ea:43:10:37:5d:08:de:2a:8b:59:41:1f:5d:db:
                    f9:09:31:8f:68:d4:fd:4c:ec:e5:51:e3:c1:e8:38:
                    f1:09:c6:d5:e6:8d:f2:82:2b:8c:7f:eb:1b:cb:f4:
                    70:5b:32:f2:3a:3b:d9:9e:f3:32:f1:d3:9e:44:39:
                    65:e8:74:f0:d4:d4:6a:20:12:fc:f6:c0:39:d2:2a:
                    4d:70:26:9b:a4:af:d6:10:23:5d:12:24:a6:4e:21:
                    28:65:6e:e9:92:46:7e:3f:55:75:74:d9:7c:11:7b:
                    7c:83:d5:40:c8:6f:48:7e:47:36:37:b9:6b:28:03:
                    de:1f:bc:f9:5f:5d:b4:8c:51:c0:92:dc:a8:62:2e:
                    84:17:62:fd:53:3b:f2:6e:f8:c2:1b:35:7a:b8:90:
                    b4:3b:1d:22:8a:13:c5:51:e9:87:b0:fc:5a:97:d2:
                    a1:8c:9d:5c:15:ce:d1:42:0a:67:af:be:81:84:35:
                    bd:90:92:2f:f0:47:c9:83:e0:0e:6f:f1:14:1d:7a:
                    7f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F6:9F:EC:4F:51:A2:30:B1:9F:C8:B0:05:F8:ED:74:53:C6:0C:76
            X509v3 Authority Key Identifier:
                keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:b2:76:d7:6b:80:0f:9a:7d:c9:a9:9b:5f:66:04:cb:ab:94:
         02:23:c5:5c:44:08:a6:0c:36:ce:91:aa:f9:45:19:a8:a0:82:
         54:09:d4:55:83:37:24:7d:72:16:09:b1:2b:86:98:c9:18:a5:
         29:ed:b6:78:d1:36:18:7b:56:3d:46:71:e0:ff:6f:44:f2:c5:
         37:a7:e9:11:26:d7:2a:7f:74:85:5c:44:22:c3:55:b1:e1:f0:
         18:ab:f5:7d:a4:fb:a0:77:57:73:80:59:2b:c5:fb:41:b6:3c:
         90:0b:33:44:04:ee:1b:43:ae:5c:a7:d0:c4:de:2d:d6:32:72:
         39:01:96:06:28:5c:c2:7e:2f:ab:d2:89:42:78:8d:f7:08:1b:
         06:fb:fc:53:fc:ac:11:2a:fa:de:ed:91:bd:f5:1d:f9:44:4b:
         72:9b:fe:07:41:56:84:56:59:a4:66:02:4f:fc:da:dd:61:b7:
         3d:fe:a2:4d:64:48:90:7e:72:98:74:cb:cb:13:6d:a3:50:86:
         25:cc:8b:05:3d:ee:43:ec:5c:aa:f0:3e:45:20:91:99:0c:24:
         66:72:12:e1:8b:7b:85:f8:82:7a:2e:7e:d0:05:5b:89:84:9a:
         da:a9:2b:25:42:82:49:1c:a1:6e:d0:28:9e:ab:7e:26:a0:6b:
         7d:ad:aa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org