Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa
File:                     3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa (raw, json)
Hash identifier:          TPjEtt6esLVGvifrF+Qfkbnzyk5Oy6jiRjFLko22aUM=
Subject key identifier:   93:BD:5A:E5:FD:3A:B5:C3:BC:67:DB:33:AF:8B:08:44:17:E1:59:94
Certificate issuer:       /CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
Certificate serial:       11E70A872B9221B125A9728D177D3721B79D33F3
Authority key identifier: 3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa
Signing time:             Wed 26 Jul 2023 05:00:01 +0000
ROA not before:           Wed 26 Jul 2023 04:55:01 +0000
ROA not after:            Wed 24 Jul 2024 05:00:01 +0000
asID:                     149922
IP address blocks:        103.191.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl
                          rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e7:0a:87:2b:92:21:b1:25:a9:72:8d:17:7d:37:21:b7:9d:33:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E648E6A8623C5C5DDF001526D0FDC0FF200F613
        Validity
            Not Before: Jul 26 04:55:01 2023 GMT
            Not After : Jul 24 05:00:01 2024 GMT
        Subject: CN=93BD5AE5FD3AB5C3BC67DB33AF8B084417E15994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5e:b6:5c:3f:6a:c8:b8:39:30:eb:62:b1:95:
                    37:0a:b7:e3:35:95:dc:2c:71:4a:c7:09:62:f8:69:
                    72:43:15:ee:27:b8:56:7b:b3:d8:c1:73:7c:29:ef:
                    7a:c8:82:8d:43:4c:6b:5f:1c:66:5a:96:22:53:36:
                    a5:6d:46:37:b6:f5:81:5d:f7:04:93:80:f2:d7:83:
                    73:81:09:c1:8f:3d:92:86:7a:18:27:c7:01:9a:6c:
                    c3:de:66:73:b7:b7:ac:f2:8b:d3:54:0a:c2:37:1e:
                    7d:00:ca:b1:ca:98:fa:b8:0c:f2:f2:61:ce:b2:c2:
                    1f:7c:3b:b2:0f:43:b2:7a:bc:d1:2b:a0:66:58:07:
                    28:ed:64:34:f8:63:8c:c6:1c:11:ac:c6:36:88:a4:
                    ae:fe:fb:d8:03:88:a6:77:2e:19:70:8d:62:8a:ee:
                    0d:e1:c7:2f:c2:ec:8f:1e:f2:e0:68:65:a7:80:c1:
                    19:8e:66:09:f8:f8:99:ab:89:b1:60:71:17:32:21:
                    11:4d:01:89:ed:40:2c:d2:7b:a7:17:51:0a:e1:33:
                    fb:3a:4a:45:bf:8e:46:6a:d5:10:42:87:0e:13:77:
                    32:e2:cb:47:a9:a4:37:6e:08:1e:9b:ab:6a:05:f6:
                    80:86:f5:d0:0c:e0:72:e8:47:18:a4:3a:38:fb:5f:
                    a5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BD:5A:E5:FD:3A:B5:C3:BC:67:DB:33:AF:8B:08:44:17:E1:59:94
            X509v3 Authority Key Identifier:
                keyid:3E:64:8E:6A:86:23:C5:C5:DD:F0:01:52:6D:0F:DC:0F:F2:00:F6:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E648E6A8623C5C5DDF001526D0FDC0FF200F613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/621f3fae-d0cb-4a17-a548-1ba6631b1e09/0/3130332e3139312e3134312e302f32342d3234203d3e20313439393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:ff:e4:ca:ea:bd:40:96:c8:ae:08:ad:44:50:c0:a4:3e:
         f8:62:84:e1:0c:5b:df:bc:39:8b:d3:41:3d:8a:d4:72:c8:98:
         62:58:88:51:8b:8b:ef:12:d0:f6:d4:8e:6b:2c:e3:3d:5c:ac:
         61:2e:8a:92:dd:60:e2:42:18:f8:98:45:6b:67:56:f2:d3:fd:
         71:1b:c5:04:21:4c:b1:68:91:8d:ab:db:a7:a0:ca:12:cd:a9:
         f6:66:68:74:43:c1:7a:c4:59:0c:2a:aa:33:c5:52:a1:da:c0:
         c3:48:ae:33:08:66:47:e2:60:83:51:28:54:05:27:1b:af:82:
         6a:e5:ca:24:2d:2d:a4:4c:b7:f1:53:6d:3f:bb:ac:a1:8a:a8:
         8e:40:0b:0d:ae:5a:2e:23:55:09:98:b2:8a:90:5e:ec:b7:6a:
         fd:07:90:0c:bf:48:f0:db:fb:5a:f1:d3:b8:e0:a8:33:e2:c4:
         43:9b:14:07:5b:a8:56:b7:99:ca:62:da:7f:d8:b1:ca:8e:c7:
         4b:3a:d3:60:df:1a:1b:d5:8b:b0:09:55:65:5d:e6:1d:29:51:
         3d:66:be:46:63:42:fe:f3:3e:58:7e:19:d9:b2:44:bc:db:6e:
         f6:90:d9:77:2f:74:9f:c9:7c:db:20:0b:80:f8:85:f8:18:b4:
         b6:92:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:04:31 2024 by rpki-client on console-fra.rpki-client.org