Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          PzCGN+AIH2HGHCB/gIcDZxYngfCR2mHKMluowiy4Pt8=
Subject key identifier:   92:11:5C:08:AA:62:90:8A:A0:DC:16:89:EE:93:39:DC:48:AD:7F:2E
Certificate issuer:       /CN=061065EDF2843A4462114BCE0A173E21A84A019E
Certificate serial:       3AD18108F8A88E14B5A37EF8DCBF0EA3BC321ABD
Authority key identifier: 06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa
Signing time:             Thu 05 Oct 2023 03:02:07 +0000
ROA not before:           Thu 05 Oct 2023 02:57:07 +0000
ROA not after:            Thu 03 Oct 2024 03:02:07 +0000
asID:                     139952
IP address blocks:        103.174.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl
                          rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:81:08:f8:a8:8e:14:b5:a3:7e:f8:dc:bf:0e:a3:bc:32:1a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061065EDF2843A4462114BCE0A173E21A84A019E
        Validity
            Not Before: Oct  5 02:57:07 2023 GMT
            Not After : Oct  3 03:02:07 2024 GMT
        Subject: CN=92115C08AA62908AA0DC1689EE9339DC48AD7F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:65:50:9e:53:d4:58:a9:43:ce:ca:d1:30:
                    76:94:21:f0:40:a0:2d:63:5c:81:a1:50:68:7a:8f:
                    8e:aa:60:2f:e6:a5:bc:ca:39:8f:e4:5f:0e:ef:f8:
                    62:f1:e0:36:c4:1f:11:57:1d:c7:34:53:3f:75:68:
                    5a:e3:6b:7a:9a:4f:cb:97:21:05:c8:db:2d:e9:e2:
                    be:e7:70:ae:33:e3:83:0d:30:36:2d:98:32:70:83:
                    92:44:ab:22:13:94:37:96:91:7e:08:09:63:d0:90:
                    04:dc:d9:e7:c5:5d:b0:66:03:7b:2b:29:94:8d:cd:
                    7b:af:79:e3:7d:f8:70:5d:ad:33:57:53:95:75:41:
                    55:fc:ea:85:72:16:ac:ab:4e:e6:43:f7:a3:dd:95:
                    16:0f:43:71:d6:8c:7d:08:0f:db:cc:17:b5:00:76:
                    ce:d2:6a:1b:84:05:55:33:55:c3:39:e1:d6:f8:ed:
                    b2:06:e7:8a:cd:15:68:09:bc:5f:69:a0:55:c0:7a:
                    dc:8e:de:f0:60:98:77:c2:d5:f9:ac:e6:25:ca:a8:
                    63:f5:24:5f:6b:f8:4c:10:96:da:f2:a7:75:23:7a:
                    05:3e:f3:72:00:1d:b0:7d:64:31:dd:a0:ff:37:72:
                    d5:0f:49:ed:40:68:af:8c:c3:f7:b1:a6:b5:a9:04:
                    4c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:11:5C:08:AA:62:90:8A:A0:DC:16:89:EE:93:39:DC:48:AD:7F:2E
            X509v3 Authority Key Identifier:
                keyid:06:10:65:ED:F2:84:3A:44:62:11:4B:CE:0A:17:3E:21:A8:4A:01:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/061065EDF2843A4462114BCE0A173E21A84A019E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061065EDF2843A4462114BCE0A173E21A84A019E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:68:0a:7a:dd:69:f4:e8:05:04:f7:34:7b:a0:01:20:51:42:
         89:58:d7:7e:2f:0f:f2:dd:c9:c2:c6:bd:8f:93:1b:e8:bc:fa:
         e9:af:8c:66:b0:75:c0:11:4d:72:85:b8:8e:e8:19:3a:12:d8:
         f9:f4:bb:ff:f9:10:dd:2e:b5:9f:34:fa:7e:04:2c:fe:28:91:
         c6:96:14:1f:d9:57:c5:cd:d2:12:31:4b:28:d4:84:62:c7:3f:
         e9:d2:54:1a:0e:2e:03:fc:3e:c0:b8:65:89:04:12:00:71:2c:
         c1:c8:1a:9a:47:bd:d6:84:79:5e:d6:49:23:8e:3b:7d:e7:56:
         1b:79:f7:72:89:c4:cd:cb:ef:53:79:08:e5:95:de:bc:1f:0b:
         9e:79:4d:ee:a6:f2:08:6b:6c:3e:6f:d1:cb:eb:eb:f2:0a:0c:
         3f:68:3a:b6:40:c2:3a:ed:1a:88:b8:f3:f7:a9:ef:07:b4:24:
         03:cb:dd:46:32:39:b2:3d:d0:35:4a:77:1e:31:9d:49:f9:9c:
         9c:01:f5:9f:3b:46:d8:e5:8b:d1:3f:c6:ac:76:1a:0a:09:32:
         43:35:6c:2c:b8:5a:b1:de:ea:c2:23:01:f4:a5:bc:fc:27:3a:
         fc:30:b9:ff:1f:8f:a3:f3:2c:e8:0f:1d:8e:ea:0e:84:5a:f1:
         b4:8f:d2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 23:05:45 2024 by rpki-client on console-ams.rpki-client.org