Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          vcPGeXhxqtds+OgrHmvxoztzEjtqh354mClTcgctWs4=
Subject key identifier:   4F:CF:27:AC:16:B0:E0:48:AF:70:98:93:AA:40:76:3D:2C:D8:84:78
Certificate issuer:       /CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
Certificate serial:       32E1E69DD683B4BF20C380E75F9A3AA8F3AF22C8
Authority key identifier: 66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa
Signing time:             Sat 09 Sep 2023 03:00:01 +0000
ROA not before:           Sat 09 Sep 2023 02:55:01 +0000
ROA not after:            Sat 07 Sep 2024 03:00:01 +0000
asID:                     131111
IP address blocks:        103.175.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl
                          rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:e6:9d:d6:83:b4:bf:20:c3:80:e7:5f:9a:3a:a8:f3:af:22:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665965FB7DA174CF19CD5F64A0820D37AB444D99
        Validity
            Not Before: Sep  9 02:55:01 2023 GMT
            Not After : Sep  7 03:00:01 2024 GMT
        Subject: CN=4FCF27AC16B0E048AF709893AA40763D2CD88478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:e8:c2:05:2a:20:99:4d:7a:03:9d:89:52:
                    55:a6:b1:58:7e:29:4d:63:91:fa:5e:77:dc:df:6d:
                    97:2c:cf:92:eb:75:84:b2:ba:99:a4:ad:95:0c:56:
                    27:8d:e4:6e:4f:6a:5c:7b:e9:68:c9:72:52:d0:84:
                    c6:55:11:cd:c2:50:2b:66:cb:d0:53:85:06:a9:b0:
                    bb:82:dc:11:92:57:dd:aa:9b:8d:91:7a:7f:62:ba:
                    55:11:2f:9d:2a:c2:cf:54:10:fc:b3:16:b7:4c:58:
                    bb:46:84:0f:f0:be:04:66:52:44:9e:77:5b:cc:c2:
                    fe:c0:3d:28:73:9d:82:1c:70:58:88:59:76:b0:6f:
                    a1:e8:e7:aa:f6:ae:22:65:e9:82:0d:6c:1d:99:09:
                    cc:02:31:be:c5:36:82:a1:a5:0a:61:ef:9f:a5:c8:
                    1e:61:7d:d1:da:22:b9:a5:a2:f9:82:37:68:ef:aa:
                    88:2e:65:17:2a:0d:4d:5b:a2:95:6a:93:79:79:43:
                    38:ec:d0:8c:6e:83:c6:e7:9d:d2:81:30:4d:2a:19:
                    da:1d:e0:79:1a:8f:2f:3e:84:5b:74:52:b6:7f:a4:
                    02:56:99:70:eb:cd:77:ae:63:de:8b:05:00:cd:d3:
                    d7:38:d6:1b:cb:13:93:83:c9:33:d4:2d:51:f8:b4:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CF:27:AC:16:B0:E0:48:AF:70:98:93:AA:40:76:3D:2C:D8:84:78
            X509v3 Authority Key Identifier:
                keyid:66:59:65:FB:7D:A1:74:CF:19:CD:5F:64:A0:82:0D:37:AB:44:4D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/665965FB7DA174CF19CD5F64A0820D37AB444D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/665965FB7DA174CF19CD5F64A0820D37AB444D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:b8:25:a6:70:39:b0:10:be:13:41:39:ae:fc:e7:e6:c0:4e:
         7b:45:6b:77:bc:fd:fb:1d:ae:68:11:1e:d2:04:40:b1:8e:30:
         bc:79:0f:53:1d:8e:55:3e:15:22:11:1a:dc:e0:32:80:23:db:
         d5:09:5e:8b:06:e9:6c:e8:b0:fc:c1:51:4b:b2:4f:e1:7a:05:
         4e:a8:cf:f4:5a:23:d3:f0:40:c0:e9:06:31:51:8d:c1:42:2b:
         68:86:ef:b2:df:84:a3:72:3b:dd:5e:a2:9f:90:d2:11:e7:aa:
         1a:1d:30:4c:46:dc:09:fb:d5:5b:6f:60:47:6e:51:a9:fb:1f:
         0b:f2:bf:1a:ee:9e:d7:29:4c:4b:f3:63:07:95:6a:f5:38:a5:
         60:c6:3e:25:a8:53:40:c4:a8:5c:39:d6:fa:14:a6:f5:61:f7:
         81:76:d4:30:77:d6:8e:70:f3:a5:1e:e0:29:8d:56:9d:ad:77:
         7b:36:e7:d7:05:bc:21:58:31:39:69:ec:f5:9f:0b:00:e9:7b:
         f9:24:0d:90:a1:ce:85:0b:5d:db:97:e6:28:52:58:c6:13:33:
         f4:88:43:cc:64:37:44:db:f9:ea:b5:bd:05:8c:09:a0:75:31:
         00:25:b1:14:9d:cf:d6:1b:65:c0:48:19:f4:85:08:8c:d4:68:
         dc:70:af:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 01:25:00 2024 by rpki-client on console-ams.rpki-client.org