Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e31302e3235332e302f32342d3234203d3e203536323539.roa
File:                     3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (raw, json)
Hash identifier:          Yet2W7OvAYE8i0Mx+J5NTo7EWwR6JzO+ouJ32PjcSw4=
Subject key identifier:   AD:65:A1:92:7C:05:15:10:C5:D2:BD:79:74:DC:10:74:C1:62:57:1D
Certificate issuer:       /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
Certificate serial:       486CCD9D341FC5EB51BB9F1E5375180E5FA3A4C0
Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e31302e3235332e302f32342d3234203d3e203536323539.roa
Signing time:             Mon 18 Sep 2023 14:00:01 +0000
ROA not before:           Mon 18 Sep 2023 13:55:01 +0000
ROA not after:            Mon 16 Sep 2024 14:00:01 +0000
asID:                     56259
IP address blocks:        103.10.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl
                          rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 21:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6c:cd:9d:34:1f:c5:eb:51:bb:9f:1e:53:75:18:0e:5f:a3:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F
        Validity
            Not Before: Sep 18 13:55:01 2023 GMT
            Not After : Sep 16 14:00:01 2024 GMT
        Subject: CN=AD65A1927C051510C5D2BD7974DC1074C162571D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:db:17:39:f0:88:14:80:c4:b8:8d:f1:f3:
                    67:50:86:7a:7c:bf:d7:df:f7:61:13:dd:c2:5d:12:
                    75:4a:24:91:0b:99:00:24:fd:4d:2e:b2:fb:af:38:
                    56:9c:1d:f0:b3:3f:ec:2b:4d:18:c3:f7:cd:f9:b7:
                    2c:92:32:81:bc:6f:a7:74:21:d9:5b:b3:2e:cd:0f:
                    f7:7a:9e:44:e3:c2:a7:ca:97:81:28:f7:5b:d0:7e:
                    88:c3:f5:60:87:f3:27:29:bd:2f:ba:97:1a:da:7d:
                    fa:40:27:0a:45:8f:45:05:bb:bd:f0:92:6a:8a:c1:
                    28:0c:b4:a9:8c:a4:38:6a:4e:30:15:4c:96:16:9f:
                    96:2d:8e:8e:9d:1f:71:79:a4:e3:27:f7:1b:0a:2e:
                    70:56:b5:12:3d:73:55:6f:4b:00:dc:a6:c9:70:d0:
                    95:ca:c5:c1:7b:de:70:cc:24:28:d7:4b:30:23:d7:
                    9c:e1:e1:53:ce:cf:69:63:cd:1c:cd:15:f7:56:90:
                    7b:ea:ad:e7:45:34:2e:5b:23:19:df:9e:05:05:dd:
                    fb:75:d5:dd:40:b7:fd:5f:3a:5b:92:e6:1b:47:e0:
                    1b:ac:a4:fd:81:fe:29:71:ca:e2:66:7d:19:cf:0d:
                    e3:80:c9:81:7c:a4:b4:5d:75:92:71:c7:d5:38:25:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:65:A1:92:7C:05:15:10:C5:D2:BD:79:74:DC:10:74:C1:62:57:1D
            X509v3 Authority Key Identifier:
                keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3130332e31302e3235332e302f32342d3234203d3e203536323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:94:f4:59:06:03:a4:70:d8:48:e9:bb:a0:84:a2:73:43:ad:
         f4:a9:ac:d4:3c:bc:10:0f:ad:7e:2a:66:67:64:1e:9d:44:24:
         38:f0:b2:d2:6b:0e:be:40:e9:a9:d9:f9:24:0b:39:66:10:3f:
         37:1f:9f:21:51:3f:ad:2c:68:b8:c4:56:c8:27:d7:67:77:2c:
         87:a7:8b:7c:09:3b:76:b7:21:ce:41:32:45:62:b5:5d:64:b5:
         57:32:7b:7e:63:59:7f:53:8f:00:f2:df:77:2b:9a:1a:36:3a:
         95:7a:bf:3c:bd:d8:84:2e:eb:79:d6:38:5e:47:13:9e:96:5a:
         b5:53:f8:6a:85:c9:77:bc:aa:70:3d:b0:1e:f3:08:b6:0d:8d:
         e4:15:0b:78:22:ed:ab:e2:88:38:60:6f:af:a0:34:6e:72:46:
         ab:bf:aa:59:e0:c2:83:a0:f3:71:ec:26:30:a7:2f:7b:87:52:
         16:64:5f:0e:c2:1c:e6:3c:f6:7c:cf:67:62:7a:30:d6:a5:3a:
         11:c6:26:77:1c:f3:6a:ac:0d:d4:9a:33:22:d7:fb:58:9f:7b:
         88:cb:80:3e:b3:7f:2b:69:24:42:f2:a9:42:49:0b:35:7f:4b:
         53:af:38:1d:8c:eb:dd:e3:09:d4:90:92:8b:40:98:12:6e:84:
         c2:3b:88:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org