Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa
File:                     3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (raw, json)
Hash identifier:          wPlhDdOIo+vrWpBQm5SPX3dOK5fHjOqoqOAgw6ioHjI=
Subject key identifier:   79:00:56:B9:E8:A3:A4:A3:A4:B6:06:69:77:EA:D3:27:3E:A5:14:29
Certificate issuer:       /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7
Certificate serial:       11A3ABC5BC26850C3287714AA44E0F7DA05EC68A
Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa
Signing time:             Fri 08 Sep 2023 10:00:01 +0000
ROA not before:           Fri 08 Sep 2023 09:55:01 +0000
ROA not after:            Fri 06 Sep 2024 10:00:01 +0000
asID:                     142332
IP address blocks:        103.169.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl
                          rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:09:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a3:ab:c5:bc:26:85:0c:32:87:71:4a:a4:4e:0f:7d:a0:5e:c6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7
        Validity
            Not Before: Sep  8 09:55:01 2023 GMT
            Not After : Sep  6 10:00:01 2024 GMT
        Subject: CN=790056B9E8A3A4A3A4B6066977EAD3273EA51429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:cc:4a:c6:37:9c:2c:90:80:ca:0f:76:02:
                    29:da:8c:89:f4:ce:b9:d6:e5:55:6f:94:d6:93:da:
                    26:eb:31:50:92:d6:5b:a7:0b:d2:24:ad:2f:63:92:
                    91:ce:00:e4:59:c2:d2:36:b5:cc:ec:f7:2e:2d:7f:
                    74:e4:00:29:9b:c0:34:2c:0f:a8:58:b9:c6:81:2a:
                    42:12:8a:fd:ce:0c:7f:4f:ac:31:27:60:09:f3:12:
                    93:f3:65:5d:d9:d7:d5:20:43:00:c8:4c:8f:ac:b5:
                    25:ae:6a:52:07:78:4c:06:67:da:b6:ba:61:d0:08:
                    56:44:70:22:37:b0:c9:ad:f4:81:14:68:42:56:17:
                    44:fb:5a:5b:a8:26:00:51:c9:43:65:75:a1:98:1a:
                    81:4f:8a:15:97:5d:7a:b7:b1:ab:0b:fb:45:f4:75:
                    85:ab:64:83:a4:f0:51:8e:8d:cb:4a:20:b8:11:d9:
                    fc:7c:72:9c:b8:1e:3b:d5:3b:37:09:05:50:da:aa:
                    c9:db:78:4c:1c:15:e9:df:48:e6:b8:88:f9:77:dd:
                    cc:c4:51:98:62:78:42:99:d9:0f:a6:c7:84:85:ca:
                    ed:10:b6:d0:21:84:29:ad:1c:be:94:42:28:cd:43:
                    b5:7d:07:db:2e:ac:68:d1:f6:87:49:70:15:02:be:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:00:56:B9:E8:A3:A4:A3:A4:B6:06:69:77:EA:D3:27:3E:A5:14:29
            X509v3 Authority Key Identifier:
                keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:0e:e9:0e:a1:84:2c:96:89:3d:bf:8e:69:d0:88:06:00:dd:
         1a:92:47:2f:44:07:a2:4a:81:7d:ed:2c:69:92:f2:bc:0e:7d:
         f2:08:8b:7d:ce:d8:5d:1d:39:1d:4f:5c:db:a4:f4:05:70:2f:
         49:83:a7:74:b7:9a:4e:c3:2c:98:2c:43:14:19:66:18:62:a4:
         14:e7:fb:bd:70:e3:6a:32:77:3e:43:82:05:dc:ca:b8:2b:26:
         20:8c:3f:8d:90:9d:42:fd:45:2d:3b:ab:cd:b7:e3:b7:fc:96:
         15:ab:b1:a2:71:2f:60:39:b5:54:4c:d8:c1:4d:79:b6:7b:e2:
         fa:8e:46:61:5e:a0:7e:a4:58:0f:7a:bf:23:7d:c7:4a:0a:f8:
         30:77:96:f5:44:bb:d9:3a:90:25:b9:f6:24:10:4f:3c:f4:56:
         be:5e:09:18:6a:47:91:ff:53:61:a3:61:02:35:b9:a3:ad:b5:
         b6:7a:32:f3:01:c7:b9:42:19:67:73:c1:24:a8:29:19:df:7e:
         a8:d4:81:52:a8:75:ee:dc:c8:b2:22:bf:3b:5f:b1:4b:85:cf:
         f2:7a:0b:b6:c6:15:87:95:74:1a:41:78:16:b7:86:71:63:e0:
         f3:99:3e:e3:43:7f:5e:0d:3b:3f:e7:f5:f2:5e:fb:44:be:a6:
         76:ba:07:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:58:00 2024 by rpki-client on console-ams.rpki-client.org