Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
File:                     3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (raw, json)
Hash identifier:          k+kwAAAIrk95zjKHnOcFnTyTETWsgdNpFJIs9mfugZw=
Subject key identifier:   75:C5:37:77:A4:75:E1:55:32:F1:BE:34:F3:A2:B2:E4:99:53:58:52
Certificate issuer:       /CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
Certificate serial:       65D726E96FE0A8A35D2AC24FA671C2871BC346A1
Authority key identifier: 9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
Signing time:             Wed 16 Aug 2023 06:00:01 +0000
ROA not before:           Wed 16 Aug 2023 05:55:01 +0000
ROA not after:            Wed 14 Aug 2024 06:00:01 +0000
asID:                     142396
IP address blocks:        103.172.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl
                          rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d7:26:e9:6f:e0:a8:a3:5d:2a:c2:4f:a6:71:c2:87:1b:c3:46:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF72C8BB7CA359BE46741ABCE4EB69F056DF094
        Validity
            Not Before: Aug 16 05:55:01 2023 GMT
            Not After : Aug 14 06:00:01 2024 GMT
        Subject: CN=75C53777A475E15532F1BE34F3A2B2E499535852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:5c:19:e6:61:c8:60:7f:77:f9:c8:a9:e6:
                    89:4f:f2:78:d0:8d:9e:b0:9c:1e:15:4b:9a:29:86:
                    16:1d:40:78:c4:80:7d:0d:53:55:71:86:51:f2:87:
                    12:d4:8d:d1:cc:87:69:27:fa:aa:b5:3f:fe:55:21:
                    d6:e2:54:70:c2:68:ab:43:33:c8:74:b2:da:d9:fb:
                    5a:6b:9b:21:5c:50:5a:5a:19:92:f8:f5:04:f9:e5:
                    52:85:64:d8:a6:56:da:69:dd:e7:0a:0d:42:d2:d2:
                    03:a8:03:e2:57:f9:b0:78:26:05:85:26:d5:4e:97:
                    a0:7b:1f:1c:97:89:61:3c:8a:ca:36:fd:b7:c7:7f:
                    df:c4:7f:6a:d6:85:97:f9:8b:2e:74:d3:50:0e:ea:
                    ac:ac:cd:ee:90:f1:9c:16:ef:aa:ef:fa:34:25:52:
                    f4:3a:fa:35:b2:0f:26:92:b7:66:71:8b:88:11:97:
                    73:cc:49:e5:5d:51:32:ac:7f:c5:f0:25:f0:4c:bc:
                    d7:e3:3c:f2:09:a7:b4:26:d5:b2:56:01:a2:27:d8:
                    ce:d8:a9:20:ee:a1:01:56:9d:34:a6:0b:16:d2:63:
                    de:82:8d:a6:0b:fe:99:fc:df:e9:d5:2b:d8:4a:8b:
                    bd:b1:49:85:26:e4:6f:fd:ad:da:52:e9:95:28:6b:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C5:37:77:A4:75:E1:55:32:F1:BE:34:F3:A2:B2:E4:99:53:58:52
            X509v3 Authority Key Identifier:
                keyid:9B:F7:2C:8B:B7:CA:35:9B:E4:67:41:AB:CE:4E:B6:9F:05:6D:F0:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BF72C8BB7CA359BE46741ABCE4EB69F056DF094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:79:c5:b4:0e:6f:c2:cb:67:7a:fd:e9:99:5f:be:b3:0f:
         e3:67:2b:6a:e7:5e:b9:9d:70:ce:77:b1:44:97:6a:8b:5d:4e:
         78:50:6d:4c:cb:d6:99:9a:b5:84:e2:e2:44:ae:34:48:c6:61:
         2d:62:00:3d:a3:f8:d0:1c:80:91:4a:94:31:cc:f5:58:e6:31:
         13:54:ac:00:7f:77:49:3b:7d:fe:bc:48:8a:45:97:99:d8:83:
         68:ef:26:fb:87:73:5e:91:ce:16:f5:47:2b:ae:fa:c1:49:79:
         23:03:3a:96:55:07:7a:c8:50:12:d2:0f:70:6d:38:d9:c1:ae:
         37:92:4c:50:6f:a8:0e:67:fa:b4:5d:3d:f3:ee:83:68:60:09:
         02:25:0f:52:e6:2c:c5:11:49:a9:58:9f:51:a4:14:bb:2e:d0:
         11:c6:d8:7c:1e:d0:22:bd:25:2c:0c:f0:78:fa:d5:09:1e:ad:
         8a:54:b0:6f:22:83:de:37:42:db:57:70:98:0d:e2:ba:c6:76:
         48:04:96:0a:6d:40:a7:52:4c:75:be:5d:8a:b8:8d:a1:21:1f:
         3a:72:ef:3e:1d:5f:81:99:a5:9c:1e:a8:02:89:26:e8:ff:30:
         a2:72:70:ed:50:73:76:bd:7a:cb:42:9e:02:98:2e:2b:ae:54:
         ba:30:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:22 2024 by rpki-client on console-ams.rpki-client.org