Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (raw, json)
Hash identifier:          J6dvLBn3b6E8t0V/cQzAtBanBd1iD925tlwZ4sUP2yA=
Subject key identifier:   B5:95:8D:77:F8:37:8D:36:CF:D2:6D:97:1D:E6:3E:3F:52:63:7D:30
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       283C23D51670BAC8287FAF61E601FA74AE6644D1
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
Signing time:             Tue 06 Aug 2024 04:01:14 +0000
ROA not before:           Tue 06 Aug 2024 03:56:14 +0000
ROA not after:            Tue 05 Aug 2025 04:01:14 +0000
asID:                     149943
IP address blocks:        103.191.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3c:23:d5:16:70:ba:c8:28:7f:af:61:e6:01:fa:74:ae:66:44:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Aug  6 03:56:14 2024 GMT
            Not After : Aug  5 04:01:14 2025 GMT
        Subject: CN=B5958D77F8378D36CFD26D971DE63E3F52637D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:1b:e2:84:f9:22:42:d0:7f:87:7e:9d:3c:
                    69:e7:66:ba:1f:c6:a9:50:98:8f:74:1f:4c:4e:b9:
                    76:f9:ee:20:af:d1:6d:7a:cf:07:e4:36:40:fc:33:
                    0c:43:17:e2:6e:62:c2:f2:b6:67:af:75:80:84:a1:
                    79:ac:00:4b:5d:d7:51:00:a9:68:00:bd:76:05:e1:
                    90:53:2b:e3:e9:13:7f:bd:57:f6:54:86:5d:41:29:
                    e9:9f:0e:4b:ad:88:ad:5e:a4:86:e5:28:93:b9:47:
                    07:64:5e:81:23:11:6c:46:1c:5b:e9:d9:86:6a:49:
                    7f:e6:28:e5:5d:e1:8b:09:f4:f2:5a:10:80:b6:25:
                    bc:e8:b2:99:77:15:d3:90:cb:c9:d7:24:ac:0b:c7:
                    71:f2:1a:ee:ce:be:9f:5b:cb:f4:5e:eb:21:44:c3:
                    b9:da:59:1c:98:5a:fb:eb:3c:e1:e2:13:71:05:43:
                    b9:b9:b4:6a:2d:6f:fb:9a:ce:09:80:ae:2a:b9:ee:
                    53:f2:ac:ad:f2:85:c2:a7:b6:cb:eb:ab:da:d9:5b:
                    82:5b:3d:bd:c9:42:8b:86:dd:8f:e2:13:fa:60:98:
                    33:47:0c:da:d2:0f:4c:86:76:d2:57:99:8c:4e:7b:
                    27:43:be:7a:d0:d8:a6:34:f8:4d:ea:85:50:6d:fb:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:8D:77:F8:37:8D:36:CF:D2:6D:97:1D:E6:3E:3F:52:63:7D:30
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:33:a5:da:cb:53:92:f3:b9:08:7a:e9:7d:21:93:e9:8e:c4:
         eb:5b:8e:76:81:48:2a:c9:f5:dd:3c:78:25:d8:63:ca:96:ab:
         85:35:6e:1b:22:43:c7:ab:34:a2:e6:96:47:77:3e:66:01:bf:
         99:34:72:4a:ba:65:38:68:f1:6e:80:59:b2:be:e1:ef:3e:64:
         23:9c:fa:74:98:7b:b8:83:09:f8:f2:0b:c4:7a:44:9a:aa:d4:
         d4:a6:e0:20:7b:97:e4:7e:7a:ab:94:13:75:ae:61:f8:cd:77:
         ec:47:7f:53:1b:18:64:b4:7a:bb:2f:dd:82:04:1d:57:bc:c1:
         2b:3d:71:22:7a:0c:44:92:a7:8b:cf:8b:46:d1:c6:36:00:04:
         e3:2d:fb:4d:64:37:ed:51:3f:38:af:9d:1a:42:a2:4b:81:0e:
         b7:81:87:3a:16:02:91:6e:ec:bf:5f:d6:ca:69:82:90:54:bd:
         6a:1c:12:af:4a:05:f8:19:f3:26:87:2f:48:f8:f0:4b:9e:9a:
         a9:f3:2c:68:27:c2:d1:c8:14:36:4b:eb:59:36:7a:f5:53:58:
         86:34:d8:cc:75:8c:5a:72:2e:be:dc:a6:f5:e0:24:3a:81:07:
         7b:2b:cf:e5:18:19:27:b3:e8:d1:08:9b:49:7e:b2:b4:b9:3c:
         87:87:e0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org