Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa
File:                     3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (raw, json)
Hash identifier:          kbDcM3JAR64cjb7yMXGX0h9rkvw1YeK0Snr3T4/ywQk=
Subject key identifier:   F5:F6:CB:44:A9:BB:D5:0E:BA:3F:44:78:16:43:C8:48:9C:FD:96:09
Certificate issuer:       /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D
Certificate serial:       031954CC5908968B20557BB2B4E771D3F576720E
Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa
Signing time:             Mon 01 Jan 2024 06:00:01 +0000
ROA not before:           Mon 01 Jan 2024 05:55:01 +0000
ROA not after:            Mon 30 Dec 2024 06:00:01 +0000
asID:                     150519
IP address blocks:        103.141.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl
                          rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 12:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:19:54:cc:59:08:96:8b:20:55:7b:b2:b4:e7:71:d3:f5:76:72:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D
        Validity
            Not Before: Jan  1 05:55:01 2024 GMT
            Not After : Dec 30 06:00:01 2024 GMT
        Subject: CN=F5F6CB44A9BBD50EBA3F44781643C8489CFD9609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3d:52:79:06:8c:aa:4a:5f:32:32:42:60:8c:
                    b8:60:80:6d:00:3b:57:8f:0d:5a:90:68:6e:f4:20:
                    ca:8b:44:f7:00:1d:91:3a:33:cc:b2:d9:ae:26:6b:
                    18:19:35:80:e5:7d:5a:c7:41:49:41:aa:f9:f1:8b:
                    d6:52:db:84:8f:2a:14:f8:50:ad:29:5c:ee:cb:db:
                    a2:05:85:2e:09:43:88:fa:7b:ae:df:93:a6:21:63:
                    22:6a:35:84:79:38:90:31:fd:ac:90:a9:5f:94:ae:
                    5a:d4:96:0a:85:7d:2b:7d:b0:ab:8c:5c:99:de:6e:
                    4c:75:2a:28:4e:e0:86:63:57:e5:4e:eb:0d:11:69:
                    41:c7:6f:90:ec:b4:d6:60:fb:87:c8:85:8b:7d:2a:
                    c2:c8:87:94:91:c0:de:df:2f:5a:f0:16:f5:9d:b5:
                    50:b8:f0:04:4b:fe:03:81:e9:b2:28:f6:d5:ba:32:
                    01:18:95:59:f6:e4:f1:13:63:38:a2:98:d8:84:03:
                    1d:02:3b:21:88:a9:7e:6a:72:2e:98:f4:21:2c:31:
                    a5:f8:57:5b:d3:e3:01:78:58:cd:22:51:fe:61:81:
                    da:27:d3:5e:69:5a:ca:f2:19:87:ba:c0:69:4d:fe:
                    24:c3:96:ff:07:72:71:b2:03:5b:27:35:7a:e4:94:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F6:CB:44:A9:BB:D5:0E:BA:3F:44:78:16:43:C8:48:9C:FD:96:09
            X509v3 Authority Key Identifier:
                keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:01:93:2c:fc:27:69:0e:6b:07:56:78:15:29:a3:c6:7c:5c:
         ae:fa:c9:aa:ac:10:fc:25:68:d8:86:d7:57:82:15:8a:20:58:
         20:71:b9:99:ae:9e:3d:8a:e3:78:c4:4b:71:09:4f:a8:f6:39:
         24:ee:c5:c9:d5:6f:1c:5e:46:c3:db:68:0d:58:34:6d:04:2d:
         0f:a7:2b:cc:ae:e1:f6:ab:36:b6:4f:cb:cd:ed:92:92:11:22:
         ae:06:88:2d:d1:f0:7c:73:12:c6:89:f7:0f:da:70:78:05:43:
         cf:48:2f:10:af:4f:f1:00:6f:06:01:80:60:63:a9:17:e6:07:
         14:59:db:20:ad:76:2f:d7:c1:1a:de:7b:18:9b:15:fd:8c:12:
         b4:3c:a5:b2:99:e5:8d:8d:ee:d8:b0:ab:fa:29:17:22:de:bb:
         67:86:b2:44:4c:5e:55:38:ce:68:b4:78:7d:d3:9a:29:b5:9a:
         22:0e:ed:84:25:72:99:f3:bb:e0:07:00:f2:f2:05:2c:d7:7c:
         94:75:f6:49:e5:35:67:2c:04:40:3d:4f:9d:3a:55:05:89:b9:
         f6:f4:ac:69:65:9a:9a:7a:eb:86:3a:c4:42:94:44:d9:82:f3:
         8d:ad:03:be:8b:a1:ea:5c:cd:c8:7a:3a:9e:56:c3:4a:a2:42:
         fd:43:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:07:43 2024 by rpki-client on console-ams.rpki-client.org