Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          JCV2/sbML8tsgvSv6VikxzjFbAq1DccTbgG7lV+HYwQ=
Subject key identifier:   5A:3C:7C:51:73:FB:FA:A2:74:ED:E8:0E:CE:B9:8C:52:A4:A2:00:1E
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       0D2C63877899C8F7DC2C146E5FCDCD1323C0EA2F
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
Signing time:             Fri 25 Aug 2023 04:00:00 +0000
ROA not before:           Fri 25 Aug 2023 03:55:00 +0000
ROA not after:            Fri 23 Aug 2024 04:00:00 +0000
asID:                     149951
IP address blocks:        103.111.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 05:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2c:63:87:78:99:c8:f7:dc:2c:14:6e:5f:cd:cd:13:23:c0:ea:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Aug 25 03:55:00 2023 GMT
            Not After : Aug 23 04:00:00 2024 GMT
        Subject: CN=5A3C7C5173FBFAA274EDE80ECEB98C52A4A2001E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:22:93:26:5c:27:16:51:9c:03:d2:d1:18:
                    93:4f:49:d6:9c:eb:ff:75:0b:4a:af:36:8b:c2:31:
                    b1:e5:01:6b:d6:1f:7f:82:d6:71:c2:e2:2e:81:dd:
                    2e:10:1a:4a:2b:43:84:22:14:7d:bc:81:14:a9:e3:
                    31:f0:df:bf:1e:97:55:80:d6:91:9a:0c:8d:66:2b:
                    b4:8d:0c:7f:e8:ec:16:08:c0:1a:ab:f4:a7:7d:2f:
                    e5:bb:1a:f9:b0:73:c3:c3:dc:20:95:22:c7:62:c7:
                    ad:9b:bb:69:08:ce:b9:b3:f5:cd:69:38:61:c5:a7:
                    f7:09:a8:64:e4:41:ab:ea:73:af:14:2e:01:34:03:
                    7b:ed:e2:5d:ed:81:a0:62:95:a8:37:af:9b:9d:37:
                    8e:78:42:3a:cd:f5:82:ba:33:cf:43:da:4a:ef:c3:
                    42:57:1b:51:1f:7b:a0:f5:52:b6:30:be:67:af:b0:
                    6f:bc:0f:96:e1:ee:bb:a6:bd:3f:cf:ce:fa:6f:d7:
                    99:4a:2e:03:e7:f9:db:b3:c2:69:ed:e5:89:85:ea:
                    9f:e5:4b:b1:df:13:e3:e0:fb:a4:1d:db:af:c6:70:
                    50:f8:4d:a8:4c:98:53:ac:be:85:4c:cf:2c:36:9c:
                    75:c3:db:2a:0d:b7:f7:cc:cf:6b:46:5a:a4:f2:2b:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:7C:51:73:FB:FA:A2:74:ED:E8:0E:CE:B9:8C:52:A4:A2:00:1E
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:c9:73:15:70:38:07:59:ec:e7:bc:12:65:04:79:96:eb:
         ff:29:37:79:c9:72:65:b7:34:b1:79:77:c8:a5:6f:a8:a8:3a:
         1e:11:0c:9f:c3:c0:9a:8b:e2:8f:e4:c9:d6:88:ad:11:d5:2c:
         60:a1:8b:9a:24:c3:f4:5a:40:c4:4c:5f:1c:2d:72:42:35:37:
         7e:3b:d6:22:79:0e:c0:46:47:f5:48:64:80:f5:f3:e4:b5:a8:
         79:d1:1a:9c:27:b9:e5:ac:20:aa:3c:15:3c:2e:c6:f3:a2:c2:
         98:1f:52:46:64:b1:6f:bd:5e:4d:37:13:d3:51:2f:ab:66:1e:
         09:28:1f:f1:33:c0:86:f8:5d:61:b4:c8:f3:93:c3:bc:48:53:
         c9:55:a9:b9:74:f9:e0:33:fa:d0:d9:fd:c7:07:3c:4c:37:11:
         db:7b:21:e6:74:4c:df:c3:e8:b6:f0:49:75:36:41:b6:e8:8a:
         a3:26:c1:df:44:a2:81:d0:4d:62:25:b6:74:22:9e:6e:e3:33:
         59:8d:bf:b0:36:5f:46:64:80:09:3a:cf:bd:ff:d8:c4:6a:e2:
         61:43:41:7f:1e:5b:7b:09:7e:57:45:3c:ed:b8:3e:11:b1:a1:
         2c:41:ad:7a:dc:fb:e4:e3:8e:71:31:2a:46:d8:b9:a1:67:24:
         e7:60:a2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 03:12:10 2024 by rpki-client on console-ams.rpki-client.org