Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
File:                     3130332e38312e36352e302f32342d3234203d3e20313336303535.roa (raw, json)
Hash identifier:          tXSrWeya72nvgUMX6jhSEMSCpXuDx8BeavBCOB+8cjc=
Subject key identifier:   0C:D2:03:A1:B0:F0:0D:B4:C5:31:B3:59:94:7A:A4:6B:A9:DC:31:A7
Certificate issuer:       /CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
Certificate serial:       629029DE54203734B51BC334E022CBD0CB95589E
Authority key identifier: A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa
Signing time:             Tue 27 Feb 2024 04:00:00 +0000
ROA not before:           Tue 27 Feb 2024 03:55:00 +0000
ROA not after:            Tue 25 Feb 2025 04:00:00 +0000
asID:                     136055
IP address blocks:        103.81.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl
                          rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:90:29:de:54:20:37:34:b5:1b:c3:34:e0:22:cb:d0:cb:95:58:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F
        Validity
            Not Before: Feb 27 03:55:00 2024 GMT
            Not After : Feb 25 04:00:00 2025 GMT
        Subject: CN=0CD203A1B0F00DB4C531B359947AA46BA9DC31A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:c8:ae:d1:1a:87:3c:de:9d:bb:68:57:ac:
                    1d:35:76:14:ca:9b:58:f2:83:b5:64:62:84:95:69:
                    47:a3:d2:b5:d4:d8:de:2a:a3:b6:f5:d0:8c:e8:c7:
                    0b:e6:5a:40:ab:84:b6:ab:c6:4d:4d:24:9b:3e:67:
                    20:8f:92:f9:d8:b5:cf:bc:42:42:ed:26:4d:ad:eb:
                    75:4a:da:6d:23:2c:c3:5d:2a:2a:74:b2:14:af:52:
                    6f:b7:a6:db:9c:53:12:5d:ec:94:ba:a0:25:14:0f:
                    7b:46:16:7c:4f:4d:e9:e6:ae:45:56:8e:23:56:1c:
                    39:3b:39:8c:f4:17:ab:c6:e1:ad:01:e9:6c:b4:ff:
                    a6:8a:6a:2c:ee:a6:77:b7:06:d8:bc:11:59:58:64:
                    d1:60:31:7e:34:50:56:26:94:c7:f4:c9:d1:cb:2e:
                    74:32:81:ed:45:28:c1:9f:c0:c3:6b:2b:f9:ff:97:
                    fc:18:c4:5d:3e:ee:08:6c:eb:8e:d7:2b:0a:36:db:
                    50:2e:26:73:3d:23:f6:84:35:bb:75:9d:35:4c:70:
                    b6:60:dc:ad:b9:ad:f5:4f:f7:95:10:a1:ed:97:80:
                    59:4a:ac:9f:ac:7c:de:87:07:df:5d:13:65:7b:8f:
                    14:7c:05:e5:38:50:7f:a3:89:dd:45:c6:96:d7:97:
                    63:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:03:A1:B0:F0:0D:B4:C5:31:B3:59:94:7A:A4:6B:A9:DC:31:A7
            X509v3 Authority Key Identifier:
                keyid:A4:AC:49:C4:F5:5B:F5:D4:AF:3D:42:10:4A:8A:5E:C1:F2:12:3E:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4AC49C4F55BF5D4AF3D42104A8A5EC1F2123E6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57280400-9654-4d45-888b-9067bada190b/0/3130332e38312e36352e302f32342d3234203d3e20313336303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:00:b4:48:dd:7d:8a:5a:eb:56:fc:0b:6a:03:60:1a:d1:5f:
         1c:38:2c:76:5b:d0:35:29:5d:46:1d:b6:e3:d8:d6:a8:da:02:
         35:6a:c6:7c:41:c8:83:23:b4:df:a8:fb:d4:fc:0c:df:68:35:
         22:e0:db:3d:ed:0f:06:f8:bf:00:2a:2b:dc:0c:6e:e3:01:19:
         16:b4:95:e0:e2:cb:e2:26:12:1f:05:5a:dc:2e:2d:53:21:b7:
         8d:30:61:43:ff:0c:3c:83:92:ed:ed:7c:89:9c:20:f6:6a:3b:
         0c:6e:32:34:be:12:70:db:f6:3b:c5:1e:e1:99:a6:55:b4:cc:
         11:ea:d4:8c:e6:27:f6:bc:c3:8d:e7:16:61:a2:91:26:e8:bd:
         44:21:db:91:aa:8a:9f:76:10:a3:2c:34:86:60:3a:f9:d2:72:
         a8:90:f9:0b:94:68:04:77:0e:5d:fe:53:96:ae:08:a8:2d:50:
         92:b4:bf:a6:49:ee:bd:75:5e:a8:8b:af:26:52:4a:29:cc:d8:
         79:3a:07:30:f6:16:80:ad:ba:95:4a:36:28:1b:99:73:23:bf:
         6e:78:63:4f:fa:0c:3c:e8:c2:f5:94:cd:da:70:f4:98:92:de:
         12:f8:91:4f:d5:83:7e:a0:e5:06:2e:f0:47:57:73:e7:ec:e3:
         4e:b3:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:50 2024 by rpki-client on console-ams.rpki-client.org