Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa
File:                     3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa (raw, json)
Hash identifier:          7issjDUxqztmgMCsiM16pAV+yGGhrcUuf21snrKjZR0=
Subject key identifier:   EA:B5:4B:44:52:44:4A:6B:C0:26:7F:16:63:26:6E:F8:9D:17:C7:DB
Certificate issuer:       /CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
Certificate serial:       648E630107BC83CBAB985A0DAF7AA5977AA67C42
Authority key identifier: F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa
Signing time:             Mon 01 Jul 2024 01:04:10 +0000
ROA not before:           Mon 01 Jul 2024 00:59:10 +0000
ROA not after:            Mon 30 Jun 2025 01:04:10 +0000
asID:                     139379
IP address blocks:        103.142.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl
                          rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8e:63:01:07:bc:83:cb:ab:98:5a:0d:af:7a:a5:97:7a:a6:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F520C5AEC051FBD03954D15F7A52EAB852DC4D63
        Validity
            Not Before: Jul  1 00:59:10 2024 GMT
            Not After : Jun 30 01:04:10 2025 GMT
        Subject: CN=EAB54B4452444A6BC0267F1663266EF89D17C7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:b5:49:53:51:75:7e:93:74:0c:9e:8a:86:
                    c6:b0:24:34:dd:bd:8d:b8:54:5c:61:59:a1:ca:d6:
                    3b:45:8a:70:04:ea:1b:c4:e8:b2:00:1d:a7:f2:b0:
                    b4:14:5a:1d:7f:f3:11:75:ee:16:ca:62:f6:ec:11:
                    d1:07:2c:24:3e:db:73:bd:ab:64:fd:e2:42:99:68:
                    97:0e:a4:38:be:7f:3b:96:46:d6:d3:2d:92:ff:3f:
                    66:d2:75:ce:3f:ac:ec:9c:ad:e6:4d:3d:34:25:06:
                    46:b0:fb:c9:e1:1f:55:7a:e5:65:8a:fa:1b:18:41:
                    a7:1e:a9:99:06:d3:63:d2:63:b4:f0:68:20:e1:2a:
                    a5:bb:73:20:5c:b9:d8:a1:f7:55:c4:2f:e7:af:e2:
                    b3:89:9b:50:ae:2d:02:fc:e9:16:5d:ae:83:94:f8:
                    3d:be:2c:b6:db:ff:5b:a4:f2:7a:15:18:c8:33:bc:
                    e4:c0:08:de:04:0b:9e:a5:bc:38:5f:72:a3:56:3e:
                    40:9b:07:6b:ea:c3:3e:06:72:e2:e3:ba:28:12:45:
                    31:9c:a9:7b:da:84:65:d1:cc:6a:49:da:47:fa:00:
                    d0:7a:3e:d4:7f:2c:df:44:6a:f4:3d:21:7d:89:2a:
                    04:38:b8:c3:fb:81:c8:d9:27:75:b7:11:c5:7f:2a:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B5:4B:44:52:44:4A:6B:C0:26:7F:16:63:26:6E:F8:9D:17:C7:DB
            X509v3 Authority Key Identifier:
                keyid:F5:20:C5:AE:C0:51:FB:D0:39:54:D1:5F:7A:52:EA:B8:52:DC:4D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F520C5AEC051FBD03954D15F7A52EAB852DC4D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32a98c8b-cad9-49e1-b178-1daf3b62ef59/0/3130332e3134322e3230302e302f32332d3234203d3e20313339333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:37:79:54:6f:c5:b3:2e:cb:b1:94:b6:e4:d8:98:79:c6:34:
         6b:d5:2a:fd:e5:94:58:b6:51:0b:47:d4:40:65:93:96:a0:40:
         6c:46:df:c4:3f:65:1f:6c:ee:f8:a8:4e:e3:f6:e6:7b:83:d2:
         05:2c:d8:49:96:f2:2f:e9:44:d4:bc:6b:50:58:e6:12:43:48:
         e5:9e:20:e9:39:98:1e:5f:98:62:82:8d:b5:5c:82:ba:3e:5e:
         4e:a1:b4:56:87:41:78:36:26:17:b4:7c:a8:bc:0c:2d:c6:27:
         0c:a8:4c:a3:df:19:6e:0f:ba:03:d6:40:bd:2c:d5:b2:f4:67:
         77:50:d5:f4:bb:6d:a7:f7:b8:d7:09:16:18:b4:a7:88:72:fc:
         ea:c0:f7:1c:38:a1:6d:f5:01:d4:07:e9:fe:69:34:44:0d:4a:
         e9:56:cd:34:2f:81:01:54:bc:2b:47:38:a2:d5:72:f2:97:67:
         49:2f:f0:f6:63:4a:eb:44:8f:23:89:c8:d8:46:36:28:f3:68:
         90:b9:6c:17:b6:03:a0:f7:e8:f2:7b:cd:46:93:3b:e0:0a:33:
         de:d5:71:98:d1:50:8d:85:ca:a2:b7:11:8d:e3:12:72:cf:9d:
         9c:72:2a:e4:49:8f:38:86:aa:2a:09:bd:65:ff:73:6c:89:bd:
         62:b7:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org