Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa
File:                     3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (raw, json)
Hash identifier:          czRIYK/GpwdnikRQb1D+/gX2NYBeL+mVya8QUuoroRk=
Subject key identifier:   4A:18:48:27:73:23:F3:F9:86:14:B2:C1:71:5D:C3:1F:D9:86:28:22
Certificate issuer:       /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
Certificate serial:       4174ADF66C9E8F2CE25B88F725E285EF1CC672B3
Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa
Signing time:             Tue 28 May 2024 02:02:00 +0000
ROA not before:           Tue 28 May 2024 01:57:00 +0000
ROA not after:            Tue 27 May 2025 02:02:00 +0000
asID:                     141935
IP address blocks:        103.166.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl
                          rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:ad:f6:6c:9e:8f:2c:e2:5b:88:f7:25:e2:85:ef:1c:c6:72:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
        Validity
            Not Before: May 28 01:57:00 2024 GMT
            Not After : May 27 02:02:00 2025 GMT
        Subject: CN=4A1848277323F3F98614B2C1715DC31FD9862822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:00:07:3a:2f:28:c5:be:13:64:f6:32:87:
                    87:bd:ca:e4:fd:34:e8:8f:7f:2a:64:a0:0d:b2:3a:
                    4e:93:c1:cc:c3:e0:49:ca:5a:9e:3e:58:76:b1:2d:
                    2c:2e:ca:73:85:df:e4:fe:7d:1c:b4:7a:35:d4:f3:
                    83:dc:f2:d3:2f:a9:de:8e:98:03:db:d5:79:a4:5f:
                    af:1f:a1:26:ec:dd:be:9e:30:be:61:a0:2e:8e:8a:
                    dd:72:6e:fa:a5:a9:42:1b:a6:6b:74:8b:3f:6b:ef:
                    20:21:bf:41:4f:f2:20:c5:a9:e9:54:00:a4:74:11:
                    09:4c:2a:62:b6:7a:ef:b4:0e:07:94:0e:45:61:d3:
                    a4:0d:1e:6f:2f:fc:fb:28:f1:d7:a9:aa:00:c8:00:
                    85:8f:55:77:b8:5f:25:4c:01:3a:f2:c7:ce:63:ee:
                    42:13:be:ea:c2:a4:d0:3b:9a:6f:fa:56:1f:71:5e:
                    f7:f8:0a:2d:5d:b2:d2:ba:bb:a5:8a:18:b3:30:2c:
                    33:ce:4e:07:3e:aa:46:b9:d4:a6:a3:ec:57:e3:7a:
                    c7:f2:bf:4b:a4:f5:3f:9e:fe:a9:d7:e7:d8:c1:37:
                    c1:d0:00:9e:d8:d2:18:25:85:b8:2f:9a:b8:d1:05:
                    2a:b8:8b:0d:96:84:90:a3:e6:07:50:6a:a0:c1:74:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:48:27:73:23:F3:F9:86:14:B2:C1:71:5D:C3:1F:D9:86:28:22
            X509v3 Authority Key Identifier:
                keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:9e:b1:46:cf:35:e7:fa:5e:0b:23:49:3e:d4:58:f1:ad:94:
         23:f7:a6:41:c6:2c:67:5d:56:9e:a6:87:59:6b:f4:54:fa:79:
         34:31:43:5b:c0:8b:c8:d8:ac:5a:40:a7:2a:02:50:3d:db:2b:
         6e:13:45:8c:80:8a:aa:d1:83:be:a5:b6:92:41:81:dc:41:9c:
         7d:59:ff:e3:8a:fe:1c:70:b7:8c:88:c3:b8:17:1a:da:f6:0a:
         32:79:b7:78:be:54:55:52:e1:b4:aa:91:c1:9d:f8:7b:60:c0:
         d0:24:28:e3:15:a3:47:f6:88:d5:ba:85:46:c7:fa:fb:d0:e9:
         7d:e4:c4:c2:05:e3:49:f0:22:60:4f:84:f7:02:13:ec:0a:d9:
         89:a4:dc:61:8b:03:1f:21:3e:a8:c4:64:f3:a5:9c:7d:77:bd:
         16:1d:6e:f3:2c:91:07:7c:c1:2b:06:30:1e:c4:33:ca:6d:ae:
         b8:a6:8c:1e:cc:94:a2:4f:35:58:d1:90:20:af:2e:ef:83:16:
         1d:4d:4a:9b:d6:b5:9a:c1:d9:b7:92:8f:40:d5:26:30:58:e2:
         25:b8:cb:98:61:61:78:18:fc:de:5c:07:fa:fc:a5:ca:2c:7a:
         8a:3c:12:cb:65:21:a7:93:c2:77:7a:0f:52:ee:7c:ec:8a:c6:
         a0:08:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org