Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa
File:                     3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          slhG6aE/lNA4aRVSDQs/dfGcG5yIePIerNTIUaHIm2A=
Subject key identifier:   53:CB:E5:F1:4D:E1:43:9E:B8:37:ED:D2:37:4C:78:70:3D:21:45:CE
Certificate issuer:       /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48
Certificate serial:       1722537B8BBEB158AD20CBFFFC4A9B0C1FD0AC60
Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa
Signing time:             Mon 01 Jul 2024 01:02:35 +0000
ROA not before:           Mon 01 Jul 2024 00:57:35 +0000
ROA not after:            Mon 30 Jun 2025 01:02:35 +0000
asID:                     139967
IP address blocks:        103.146.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl
                          rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:22:53:7b:8b:be:b1:58:ad:20:cb:ff:fc:4a:9b:0c:1f:d0:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48
        Validity
            Not Before: Jul  1 00:57:35 2024 GMT
            Not After : Jun 30 01:02:35 2025 GMT
        Subject: CN=53CBE5F14DE1439EB837EDD2374C78703D2145CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:32:8a:5a:f5:78:35:df:b8:1d:aa:97:83:
                    ef:fa:dd:61:3d:00:5a:98:09:4a:31:48:07:41:b0:
                    bd:2e:55:3c:eb:be:17:2b:a5:09:7c:79:de:de:be:
                    73:44:0b:6b:8b:54:11:9a:88:d2:c3:0d:28:c7:9a:
                    7c:b2:8e:4d:09:da:06:57:20:06:1a:44:41:19:76:
                    1c:44:d2:3a:f2:63:a8:76:83:71:7f:b7:53:cb:c3:
                    01:c4:94:8a:5f:d3:93:3c:f3:8b:9b:0b:67:20:2b:
                    4a:cf:81:58:01:a9:3c:39:26:ee:f4:52:40:0a:ee:
                    d9:4a:4d:5d:84:9c:40:58:84:ca:4c:ca:4e:77:cd:
                    b4:55:48:5e:1f:ce:6e:2b:87:15:1b:ff:ba:f8:1e:
                    07:fa:67:64:35:ea:ac:fd:ea:5c:c2:a8:e0:43:d4:
                    82:2d:0c:a3:9d:6c:b5:65:d0:1b:d9:94:49:a0:7a:
                    5d:89:eb:85:cb:53:6c:45:f0:48:15:38:8f:ca:aa:
                    81:d0:bf:f9:77:37:b8:c5:ab:b3:ad:40:28:00:17:
                    90:86:17:5c:4e:d0:58:32:fc:3a:27:e3:ef:53:23:
                    a1:d1:97:84:55:fd:03:0b:d8:df:6e:e5:82:18:b9:
                    ba:10:45:f0:48:bc:d2:71:26:67:26:bf:16:a2:e4:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CB:E5:F1:4D:E1:43:9E:B8:37:ED:D2:37:4C:78:70:3D:21:45:CE
            X509v3 Authority Key Identifier:
                keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:6d:b9:49:f4:3e:38:82:21:c9:57:82:ac:05:f9:16:fb:5e:
         01:63:41:3a:b9:62:67:0e:54:14:2b:10:8a:90:91:03:12:5a:
         a8:66:9f:2e:b1:8d:80:90:73:a3:a1:c5:cb:19:2e:58:46:f3:
         d9:e9:ce:0a:97:14:58:67:9c:7e:7b:8a:98:0c:86:16:cd:57:
         67:64:e4:71:50:7d:be:ab:34:ca:f6:81:6a:1c:8e:f0:60:f2:
         89:74:15:28:2f:69:b6:6f:bb:bc:c8:c0:fb:7a:50:ba:4a:04:
         a7:9a:7e:09:84:29:a6:c3:72:e3:f8:b3:8d:02:7f:18:3f:22:
         16:5a:b7:86:6d:10:af:01:9a:97:58:78:15:da:7e:00:90:1c:
         66:f8:21:d8:29:bc:8a:b2:43:a5:cc:52:4e:19:d8:3c:7a:a1:
         25:65:6e:7b:02:bf:91:a9:c3:82:3c:da:30:e7:49:c4:3e:a0:
         3b:7c:60:9a:61:0f:b3:43:bc:a7:78:38:95:60:77:30:b9:d0:
         43:8a:32:fd:3b:c7:79:8e:03:bd:5c:b5:47:d6:ab:f3:92:6d:
         c2:b6:0e:7e:8e:29:11:cf:5a:5a:fb:9f:6f:f4:20:23:85:bf:
         6e:d0:7d:31:6f:b7:66:01:e2:30:7d:3c:17:76:b7:02:35:f8:
         b6:1b:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org