Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32332d3233203d3e20313333383237.roa
File:                     3130332e39352e362e302f32332d3233203d3e20313333383237.roa (raw, json)
Hash identifier:          Te3AvUTGPO22MnUJ6/LYwCMSzsuyx7JfvuvxsiGtkzc=
Subject key identifier:   72:AC:F4:78:64:93:F7:AF:2C:D7:67:1E:A3:38:D1:BD:BE:64:96:C6
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       0B741DAB269DF53F96FA08FBA71B598A7D04D8D8
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32332d3233203d3e20313333383237.roa
Signing time:             Thu 08 Aug 2024 04:00:02 +0000
ROA not before:           Thu 08 Aug 2024 03:55:02 +0000
ROA not after:            Thu 07 Aug 2025 04:00:02 +0000
asID:                     133827
IP address blocks:        103.95.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:1d:ab:26:9d:f5:3f:96:fa:08:fb:a7:1b:59:8a:7d:04:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Aug  8 03:55:02 2024 GMT
            Not After : Aug  7 04:00:02 2025 GMT
        Subject: CN=72ACF4786493F7AF2CD7671EA338D1BDBE6496C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4b:c7:7a:49:82:85:bf:3b:1b:fd:f7:6c:d5:
                    42:88:d7:2b:43:ff:a9:15:18:e4:cb:e8:3b:8a:8e:
                    2b:52:67:2f:75:6c:97:f8:3c:98:aa:37:ce:45:07:
                    9b:ac:97:f1:d9:3b:af:fc:b3:0a:93:e4:5b:6c:d5:
                    8b:6e:2f:73:0b:49:dc:d3:86:69:b5:6a:2d:1c:5b:
                    f7:df:25:89:31:8a:4c:15:62:09:2d:96:94:d5:c3:
                    e7:f9:10:2d:66:8f:28:4a:2b:09:1e:f8:09:85:af:
                    84:9b:d1:b1:4b:df:ed:91:a4:d3:5f:e1:2b:e4:a5:
                    f6:21:97:22:57:41:c1:8c:36:b1:22:9e:18:01:43:
                    3f:28:4e:fd:11:6c:e2:bf:72:34:e1:e8:97:b8:62:
                    bd:65:73:df:ec:6c:fd:92:09:76:cd:3a:b7:ab:c7:
                    63:ff:5b:d1:b7:a4:dc:93:68:7c:93:1d:3c:c9:58:
                    62:ca:24:3c:16:e5:86:91:36:e4:90:b2:2f:7a:e7:
                    01:aa:07:09:30:52:11:76:69:78:68:fd:cc:a3:9c:
                    e2:8f:b9:d4:3f:bd:a0:09:25:ce:b4:7b:20:36:16:
                    49:f0:5f:3a:11:9e:04:42:f7:6c:8f:fd:1a:cd:01:
                    d6:59:ea:6d:62:86:a9:da:0d:39:be:1d:c3:9c:e5:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AC:F4:78:64:93:F7:AF:2C:D7:67:1E:A3:38:D1:BD:BE:64:96:C6
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32332d3233203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:22:44:07:e0:35:3c:33:03:c7:af:e2:47:a1:9f:26:03:23:
         95:62:e4:81:90:b4:07:21:99:53:18:a3:ff:3f:b9:01:bc:39:
         3d:8c:1a:4b:68:3c:96:cc:f4:0f:05:30:91:bf:14:93:88:e2:
         c5:3a:2c:11:d9:a2:34:44:78:97:16:bc:1d:28:03:7b:bf:c0:
         48:a1:4e:e2:0d:39:70:45:25:40:45:d5:e5:aa:d3:ea:81:f9:
         4a:3d:9c:d6:d4:e0:ce:c9:a9:0d:d5:aa:79:0d:fe:ac:be:17:
         2d:4b:2f:18:05:73:5f:2a:6c:52:41:cf:8c:fc:61:77:e3:1e:
         cd:df:2f:88:41:2a:ef:39:6c:ed:8c:df:93:76:90:cd:73:96:
         6f:da:ce:01:c6:8f:2b:eb:8e:ae:56:73:ee:30:a2:99:7d:ba:
         9a:24:e2:c7:71:39:22:85:14:48:63:8e:5f:c0:1e:cd:9f:85:
         cc:dd:d3:5c:dd:eb:77:cb:dd:c7:60:de:f0:ae:1b:89:f6:5d:
         52:e4:dc:ce:58:b3:2f:4a:11:fe:29:7a:3f:ff:d7:ac:fe:86:
         35:a2:62:4d:dd:6d:e8:aa:fe:22:cb:61:f2:74:73:5d:85:b2:
         bd:ec:4c:d7:41:c7:78:e7:a8:1e:83:fa:e2:92:fe:3b:95:61:
         08:40:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org