Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
File:                     3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          t4ZIjWkVxENaFwIXgQnavS4yuSZJh47fnJs2abBlbxc=
Subject key identifier:   A8:34:51:5E:05:D8:4E:AD:FD:C7:44:D4:D8:9C:47:3B:29:CA:89:C3
Certificate issuer:       /CN=98F94938EA9072872BE06639F79DC61C000F849C
Certificate serial:       6D85F99ABA607FB0BBBAE72AB9E23B9681927639
Authority key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:05:34 +0000
ROA not before:           Mon 31 Jul 2023 00:00:34 +0000
ROA not after:            Mon 29 Jul 2024 00:05:34 +0000
asID:                     58369
IP address blocks:        103.121.148.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl
                          rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:85:f9:9a:ba:60:7f:b0:bb:ba:e7:2a:b9:e2:3b:96:81:92:76:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98F94938EA9072872BE06639F79DC61C000F849C
        Validity
            Not Before: Jul 31 00:00:34 2023 GMT
            Not After : Jul 29 00:05:34 2024 GMT
        Subject: CN=A834515E05D84EADFDC744D4D89C473B29CA89C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b4:ed:7f:9f:03:57:96:d8:61:4d:56:8c:10:
                    a9:78:93:60:dd:32:18:7c:c4:8b:33:30:53:d1:d5:
                    fe:ff:5b:9b:99:1b:cd:91:7d:3d:92:50:59:71:e1:
                    c0:7d:11:39:cd:51:60:d9:5f:be:77:15:82:ab:78:
                    33:df:a1:38:48:a9:b0:cd:7a:05:40:ed:2f:0b:a3:
                    b8:df:71:88:fc:6f:7d:33:9f:ac:87:e5:ff:ea:c0:
                    52:3a:cf:7d:6f:51:5d:90:fa:5b:72:92:a5:31:39:
                    ad:d0:95:f2:df:3e:eb:44:6d:3d:f0:20:f2:d8:e4:
                    4f:6b:02:a6:05:d4:ed:84:be:b8:e9:15:a6:33:bd:
                    cd:74:e5:5a:61:0d:c3:65:bd:ff:41:e7:11:ac:84:
                    c2:b7:07:2a:fc:81:e2:7c:89:79:20:80:86:10:0b:
                    1d:6e:2d:4b:bd:45:87:b7:75:9e:c0:6b:6b:ef:6a:
                    f2:e3:6a:30:e4:3a:73:d2:4b:66:4e:b4:6a:31:96:
                    df:a9:22:fe:4b:d6:0a:d4:9d:d1:a1:04:d7:37:44:
                    93:64:ef:50:d9:4e:8b:8c:b8:a3:2f:1e:fe:1c:7f:
                    1a:2e:64:34:86:05:9b:67:5c:28:9b:93:e2:80:9b:
                    5b:4d:5b:82:50:8f:0d:25:2e:9e:db:49:c0:ee:3c:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:34:51:5E:05:D8:4E:AD:FD:C7:44:D4:D8:9C:47:3B:29:CA:89:C3
            X509v3 Authority Key Identifier:
                keyid:98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/3130332e3132312e3134382e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:9f:82:63:66:ad:65:4f:f9:84:50:a4:71:06:3d:50:09:10:
         45:52:d3:fc:53:98:3f:72:07:2a:a5:de:9b:66:79:af:ce:68:
         f1:47:a7:5c:ea:60:9a:20:22:91:a3:ff:cf:00:7a:b8:45:93:
         f4:b2:f0:50:5e:2e:f9:bc:33:a6:9c:d7:86:19:f5:57:7f:c6:
         7b:17:e6:47:37:3c:ff:cd:3d:6c:db:c1:a7:5b:8c:73:ce:f1:
         ba:fa:1d:be:87:cb:83:ac:39:1b:89:9c:c8:9f:3f:79:89:7e:
         3a:84:66:1e:fa:fd:47:78:70:14:f1:b4:6a:1d:06:66:ab:d9:
         e8:55:ca:a1:5b:63:d8:3a:37:bb:2f:04:f4:cb:46:e9:40:af:
         81:93:7a:39:7f:4d:da:b3:1f:a5:da:45:06:e1:7d:91:7b:f8:
         47:b0:67:06:86:d9:fb:16:4e:21:91:c8:dc:79:a0:10:f6:23:
         45:0d:48:27:45:bf:f9:36:fe:e0:c7:7b:21:60:0d:e9:b5:d0:
         e9:59:3b:eb:f3:9f:53:e7:b0:92:fc:98:50:2d:63:4d:b6:42:
         6b:3a:93:2d:5f:86:9d:16:93:8e:d1:9a:eb:e6:d0:44:8a:d8:
         9d:24:da:9b:f5:a5:ef:dd:34:9e:bb:34:52:69:b5:57:62:95:
         ea:1a:38:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 20:48:56 2024 by rpki-client on console-ams.rpki-client.org