Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
File:                     3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa (raw, json)
Hash identifier:          hGhoeTBR4+q4FW7EHbmgAODj7dkmqM7oI2LDqkBLoXc=
Subject key identifier:   54:74:E2:87:10:F7:40:5B:82:4D:A7:EF:AD:FE:00:84:05:E7:50:2D
Certificate issuer:       /CN=601D123430DAF9288A7DFD628F892DB5691B88F3
Certificate serial:       7DB7447FD4F68F5AECCE3258BE84A55EB09FA8D1
Authority key identifier: 60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa
Signing time:             Tue 27 Feb 2024 05:01:03 +0000
ROA not before:           Tue 27 Feb 2024 04:56:03 +0000
ROA not after:            Tue 25 Feb 2025 05:01:03 +0000
asID:                     141937
IP address blocks:        103.165.250.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl
                          rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 19:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b7:44:7f:d4:f6:8f:5a:ec:ce:32:58:be:84:a5:5e:b0:9f:a8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601D123430DAF9288A7DFD628F892DB5691B88F3
        Validity
            Not Before: Feb 27 04:56:03 2024 GMT
            Not After : Feb 25 05:01:03 2025 GMT
        Subject: CN=5474E28710F7405B824DA7EFADFE008405E7502D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:38:26:dc:4a:78:f2:23:a1:0d:23:7b:6d:
                    ea:66:77:70:4a:77:d8:f5:91:15:79:c7:0b:92:11:
                    43:df:b2:d0:8c:a6:44:75:83:ab:fd:ed:4e:9e:95:
                    89:fd:00:77:ad:6b:59:a1:00:f4:c3:77:a9:1f:cf:
                    14:aa:c9:53:15:f7:d5:bb:5f:aa:ff:61:5d:92:20:
                    8d:57:2d:f3:b3:16:9e:27:6d:cb:76:8e:5d:ad:bd:
                    c8:54:cf:e3:c4:76:26:ed:6d:5c:0a:ed:68:55:4e:
                    57:69:8d:f3:03:9d:03:2c:4a:9d:78:34:80:ef:35:
                    f3:61:d3:0b:52:1d:0e:17:4f:1c:ba:15:cd:cd:4b:
                    bf:e6:32:19:9b:d5:44:33:e6:2b:c1:79:33:3b:82:
                    58:0b:64:4a:0b:ab:f4:d0:70:ee:eb:17:a1:cb:a2:
                    b1:04:f5:d6:bb:84:3d:ed:06:02:13:88:75:c9:36:
                    ca:5c:df:89:0b:43:cc:ba:a0:89:7e:51:35:fd:73:
                    bb:ee:ed:c5:93:6a:80:29:29:63:69:3a:f9:93:bc:
                    59:19:6e:36:96:ac:12:63:24:55:4b:77:b5:67:46:
                    3b:c4:3e:c8:d2:a6:29:34:09:e3:04:01:82:ef:8a:
                    76:16:45:bf:d0:85:22:37:bc:a1:10:48:63:29:3a:
                    67:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:E2:87:10:F7:40:5B:82:4D:A7:EF:AD:FE:00:84:05:E7:50:2D
            X509v3 Authority Key Identifier:
                keyid:60:1D:12:34:30:DA:F9:28:8A:7D:FD:62:8F:89:2D:B5:69:1B:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/601D123430DAF9288A7DFD628F892DB5691B88F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/601D123430DAF9288A7DFD628F892DB5691B88F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64aae3f0-9c70-42fc-ae3e-bb590046b0fe/0/3130332e3136352e3235302e302f32332d3234203d3e20313431393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:e7:0b:e5:11:22:e8:35:49:4e:ff:d0:79:f4:95:66:c6:
         e8:12:fc:0b:05:14:e8:88:e4:86:0e:fa:0e:67:4b:19:b4:0b:
         e1:5a:df:18:77:c6:7e:91:f1:d1:37:4e:38:1e:02:3e:7b:a1:
         22:1a:49:89:18:7e:ea:34:49:9e:69:2d:72:1a:dc:bd:35:d2:
         ad:cb:06:f2:84:8d:72:14:c8:8f:bf:dc:3e:13:85:6c:84:05:
         cc:f1:5b:72:eb:d8:01:c1:7d:64:ea:8e:ab:83:f9:12:8c:7a:
         cc:ae:77:ad:a8:b2:57:23:e8:9f:8b:f6:6e:b3:cf:bc:d1:85:
         47:fc:5f:ce:58:89:a2:1c:8d:82:6f:97:48:a7:de:0b:a5:87:
         b6:de:69:0d:41:a4:78:02:b7:6a:99:c0:2f:51:7b:48:80:2a:
         fe:99:3b:b7:cd:d6:c9:9f:3d:62:c8:60:6d:44:29:42:5c:f9:
         af:4c:c7:2d:10:21:c0:56:a0:15:c0:f8:1b:88:f3:d8:83:e1:
         45:61:f0:19:cd:e4:77:b6:74:69:c0:cb:26:92:42:5a:cc:6c:
         e2:5f:94:2a:50:6d:f2:ed:41:7e:f2:97:03:a5:bf:25:b0:e0:
         79:65:38:0c:78:98:25:a1:43:00:1c:61:d7:65:3f:c9:4a:8e:
         61:fe:26:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:16:53 2024 by rpki-client on console-ams.rpki-client.org