Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa
File:                     3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa (raw, json)
Hash identifier:          Z9hdDYeRfGmTByqFcN4kT1QDjDoevY3Q50RT2PAEKAk=
Subject key identifier:   CB:C1:7A:E9:6C:1B:55:67:02:4B:37:55:25:8E:79:94:28:F4:A1:D7
Certificate issuer:       /CN=16CD7877C91A179A0A6751085603DA8E7DE539F0
Certificate serial:       22841795FD8B7498F770E3125A52B72438811C1A
Authority key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa
Signing time:             Thu 26 Oct 2023 03:00:00 +0000
ROA not before:           Thu 26 Oct 2023 02:55:00 +0000
ROA not after:            Thu 24 Oct 2024 03:00:00 +0000
asID:                     139963
IP address blocks:        103.147.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl
                          rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 21:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:84:17:95:fd:8b:74:98:f7:70:e3:12:5a:52:b7:24:38:81:1c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0
        Validity
            Not Before: Oct 26 02:55:00 2023 GMT
            Not After : Oct 24 03:00:00 2024 GMT
        Subject: CN=CBC17AE96C1B5567024B3755258E799428F4A1D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:2c:aa:0e:c2:8e:d8:82:8a:77:a1:88:ec:
                    8b:c8:7e:cf:12:b8:0b:ac:91:8e:6c:61:a8:89:20:
                    37:1f:31:77:5e:c7:0e:88:e3:f7:a7:d3:fe:24:03:
                    ec:3e:b9:b4:fd:10:1f:e5:2b:30:4f:aa:2b:cf:3f:
                    a6:33:68:4e:e0:5e:77:9f:de:a4:08:6b:3b:ee:a4:
                    64:43:5e:e3:43:81:6c:d1:be:17:38:a0:4c:fe:d1:
                    52:29:df:c5:e0:fc:70:db:89:27:b6:ce:0e:88:5c:
                    f5:0b:c2:3d:0d:1a:58:92:9f:3e:45:cd:c6:59:b3:
                    0e:cd:35:3d:82:a4:7d:35:ce:59:ef:87:eb:0d:d8:
                    21:8d:de:42:c6:40:84:52:b0:1b:3f:99:3c:7f:86:
                    7f:e4:2b:87:6b:81:8e:dc:6a:4c:37:00:19:49:75:
                    95:31:09:21:e9:6b:16:84:6d:5e:b1:5e:15:de:bd:
                    4c:dc:61:8a:95:29:60:71:c1:37:a8:d5:51:3e:72:
                    8d:d9:86:f6:6f:85:f5:01:71:9b:a4:9e:4f:41:85:
                    4d:2a:83:b4:7e:5e:03:c9:bc:9f:6a:6b:86:9f:b8:
                    da:0e:fb:50:73:4e:7c:fe:89:92:26:c9:3e:46:c0:
                    fe:5a:d3:ec:bd:8b:50:59:74:f9:dd:e7:0f:0b:19:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C1:7A:E9:6C:1B:55:67:02:4B:37:55:25:8E:79:94:28:F4:A1:D7
            X509v3 Authority Key Identifier:
                keyid:16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/3130332e3134372e3133342e302f32332d3234203d3e20313339393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:87:36:26:52:55:b7:18:9e:bf:a8:15:c2:2f:96:96:c9:
         08:96:99:5d:ec:5a:7e:db:51:e2:53:d4:2e:78:52:15:28:16:
         f3:a1:79:0c:25:8e:97:bd:b6:1d:25:08:8c:a4:ce:33:01:96:
         1c:67:60:fa:35:f4:be:6c:5e:35:d8:63:cd:b9:61:6c:46:71:
         4c:56:42:21:eb:1d:42:b4:0d:e7:e8:b7:a8:4d:a3:9a:c0:80:
         15:d5:95:66:f6:17:12:e5:c6:96:04:5a:82:e4:61:88:de:6d:
         2b:34:b7:3f:9a:dc:de:98:ef:c3:69:c2:90:50:9a:75:5e:4f:
         43:b5:93:ca:6f:9f:69:45:53:e0:12:fb:8a:55:94:f8:9a:8b:
         cf:b4:5f:ad:af:6d:81:d5:ee:c4:4f:b3:02:2d:a5:09:52:cf:
         de:14:2a:c4:90:c5:cc:34:e5:0b:83:f2:78:d1:cf:91:2f:90:
         d4:8f:fa:2d:13:ea:bc:9a:3e:e0:df:0c:d2:39:50:7d:e2:63:
         d5:77:25:d8:38:58:fb:a4:87:fe:14:d1:14:5f:ab:77:d5:4a:
         03:7f:3e:6c:2b:0c:f8:79:39:35:b3:6d:d4:87:97:22:e3:a4:
         d2:60:9a:3d:06:8f:95:a1:1d:21:a8:64:67:19:a4:a9:57:65:
         59:c5:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:34:44 2024 by rpki-client on console-fra.rpki-client.org