Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa
File:                     3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier:          oF1/1MfULmQc4zLp6783+3VgzDJ6JQ9P6+cY5iICAlI=
Subject key identifier:   3B:1D:04:82:D1:B0:55:54:C8:AC:42:E1:25:C7:77:BB:BE:75:23:1E
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       16115E6D86987A9B8CB6B6E67F57CF730DDA6514
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa
Signing time:             Thu 20 Jun 2024 03:00:02 +0000
ROA not before:           Thu 20 Jun 2024 02:55:02 +0000
ROA not after:            Thu 19 Jun 2025 03:00:02 +0000
asID:                     141621
IP address blocks:        103.155.64.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl
                          rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:5e:6d:86:98:7a:9b:8c:b6:b6:e6:7f:57:cf:73:0d:da:65:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Jun 20 02:55:02 2024 GMT
            Not After : Jun 19 03:00:02 2025 GMT
        Subject: CN=3B1D0482D1B05554C8AC42E125C777BBBE75231E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:41:a5:44:3e:23:76:b8:54:4d:6f:ba:b4:fe:
                    53:23:e8:fc:36:a6:64:0a:1a:4d:67:86:a5:ae:a8:
                    f4:56:99:48:7b:5f:0d:e9:05:29:32:87:7d:ac:33:
                    09:7e:4a:53:05:41:a1:03:55:13:3e:ba:71:d1:fc:
                    95:b3:98:a4:4c:13:c9:96:17:8c:cf:ff:ac:92:b9:
                    2e:b9:52:0d:d0:9a:86:49:78:cf:87:cd:10:a3:4b:
                    b0:13:2e:c4:e2:9c:5a:49:ed:2d:ba:be:05:81:f5:
                    f3:10:0b:4b:13:47:3f:34:f1:1d:e4:a6:38:6d:3d:
                    aa:01:93:54:d6:36:f4:7f:fd:8c:8a:e9:bd:49:92:
                    71:ce:0f:a7:72:5a:64:d6:9f:6b:6f:6b:d8:e0:05:
                    90:f0:f6:d2:af:8a:77:8a:cb:48:48:3b:86:0a:f0:
                    54:fc:c6:94:be:d7:87:25:66:1f:cc:8a:da:4f:af:
                    11:ae:a3:27:e0:a1:17:2d:d6:e1:8d:bf:f5:03:da:
                    f1:70:4b:db:39:b2:ec:79:12:e7:c6:37:54:79:09:
                    11:68:43:5f:21:2c:58:a0:e5:f5:f6:bb:aa:f6:0f:
                    e2:c4:67:44:1f:ed:67:d5:93:b4:08:e0:16:2d:d2:
                    07:ec:5f:07:f9:fc:0b:29:0b:28:2e:95:2d:15:8a:
                    33:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:04:82:D1:B0:55:54:C8:AC:42:E1:25:C7:77:BB:BE:75:23:1E
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:ce:c3:9c:e1:6a:69:4f:da:b6:4c:e3:cf:12:9e:b8:56:ff:
         4f:73:44:3c:b3:17:10:6c:8b:57:f8:23:98:19:b3:d7:ad:c4:
         f5:1d:a5:ac:ee:9d:f7:17:9a:b4:98:d0:25:74:65:99:9c:03:
         b0:3a:e7:af:76:02:92:dc:71:c7:8d:9e:4d:ff:45:8f:45:35:
         6f:0b:e7:2e:b1:0c:cf:24:cc:df:94:7f:68:ee:ee:c0:3b:28:
         1c:9b:64:ac:dd:e8:0b:9b:e1:7f:4f:54:92:77:ec:86:5c:72:
         0a:4a:05:fb:96:0a:c6:09:ef:0c:b6:2e:7f:c8:de:b1:bb:98:
         a9:75:28:fa:fd:49:9e:35:7a:0c:e9:a5:6b:ad:8e:f8:10:06:
         f4:17:d0:bf:d2:c7:7c:cb:7d:d4:1c:0f:db:92:ad:f5:a0:4d:
         9f:8c:e9:27:ce:a5:0f:d5:b6:01:eb:9f:45:1e:d9:da:9b:66:
         54:34:34:0c:2f:b8:22:29:ab:72:51:84:a0:cf:ad:b6:04:22:
         3d:84:08:8e:3f:78:61:94:e3:6c:d4:80:9a:b3:91:0b:1c:fe:
         7b:21:4f:d9:c9:c8:54:52:14:2a:e8:ce:fa:c1:e3:ec:b9:b7:
         68:3a:9f:04:a7:85:40:8a:f3:0f:93:3e:52:a7:10:60:6c:50:
         1f:a4:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org