Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa
File:                     3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (raw, json)
Hash identifier:          7t6TQ6C27vfplT63tIz78/dwdlPUDvDLLKMp2AGPzdQ=
Subject key identifier:   B3:86:D6:9F:D1:64:A7:3C:88:F9:6D:3C:12:7C:8E:0D:55:17:CE:B3
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       65ABDE845EE1B2A48F7EEA0D693F114893855730
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa
Signing time:             Thu 30 Nov 2023 02:58:14 +0000
ROA not before:           Thu 30 Nov 2023 02:53:14 +0000
ROA not after:            Thu 28 Nov 2024 02:58:14 +0000
asID:                     150199
IP address blocks:        103.220.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ab:de:84:5e:e1:b2:a4:8f:7e:ea:0d:69:3f:11:48:93:85:57:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Nov 30 02:53:14 2023 GMT
            Not After : Nov 28 02:58:14 2024 GMT
        Subject: CN=B386D69FD164A73C88F96D3C127C8E0D5517CEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:09:52:57:ac:fb:77:ec:93:ee:78:5e:2d:08:
                    c2:da:c8:9e:71:2e:b7:a8:bf:cd:f8:13:4b:7f:35:
                    d2:61:d6:a6:3f:83:43:8d:16:ee:db:d4:6e:98:0c:
                    36:c9:17:52:10:59:26:3f:92:01:9f:89:8b:50:5b:
                    90:5f:63:e3:96:3b:01:ae:7a:c1:10:02:d7:4b:45:
                    f8:ec:46:01:98:af:43:61:83:2e:56:cb:0e:0f:f9:
                    0a:91:ef:7b:8c:b1:1b:12:85:96:27:c7:c4:3c:b1:
                    10:eb:46:b8:46:fa:79:78:0d:5e:ed:92:3d:18:71:
                    6a:48:f6:df:a4:43:48:56:76:0d:6b:9b:1f:0e:5a:
                    24:98:6d:f9:7f:fb:30:e9:b5:4a:72:d6:f6:13:ef:
                    33:56:4b:e0:fd:f7:2b:87:17:b0:c6:aa:ae:a8:aa:
                    26:76:cc:14:1e:83:ce:5f:4e:ae:be:8e:7d:3f:74:
                    34:6f:20:04:e9:d6:1e:d4:b5:1a:26:d8:91:b9:2e:
                    4e:e1:ab:57:33:15:3c:97:b2:60:98:86:a5:c4:f8:
                    15:20:4b:84:b4:05:28:37:e0:dd:d9:03:c8:40:f5:
                    53:fd:1e:2a:66:8b:8f:5e:29:c0:f1:b8:6b:f0:1a:
                    02:48:32:df:23:6b:b3:af:20:c8:9e:95:94:9f:33:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:86:D6:9F:D1:64:A7:3C:88:F9:6D:3C:12:7C:8E:0D:55:17:CE:B3
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:81:69:d9:a1:49:ff:2a:79:a2:9c:71:ad:a0:7a:70:62:3e:
         0b:2a:96:f2:83:5b:f6:3b:9a:e8:16:2b:41:38:37:d6:d7:c7:
         8a:ff:6a:36:12:c5:94:74:0c:e7:73:1f:00:46:b3:22:85:0c:
         e3:71:fa:20:7c:27:75:98:6e:4a:d5:69:69:f0:dc:32:cd:92:
         fb:09:ae:78:cb:e1:6a:b5:af:78:70:1e:9a:da:0f:a1:cf:c5:
         7e:0a:c5:88:32:6a:09:01:51:55:ed:1b:52:e9:cd:47:53:6c:
         ed:90:65:c9:23:b1:b0:65:aa:81:96:22:cf:ae:ce:c8:ec:4b:
         1e:37:cc:02:da:31:80:6a:eb:ab:c2:a1:88:7e:d4:6e:36:55:
         a0:80:c4:ac:06:97:d5:17:9d:1d:db:b8:41:62:20:c5:f2:db:
         f4:1f:d2:2c:07:0d:7f:62:22:16:ea:8d:43:c6:b6:c4:fb:c4:
         12:9d:b1:62:97:4a:7a:4a:d9:94:5d:24:28:7f:37:30:26:46:
         c4:d8:1d:88:3c:b2:11:2f:c5:77:b4:40:18:9e:b0:82:a4:b0:
         54:15:02:74:f5:35:f7:61:e4:61:34:d0:1b:d8:59:e9:89:69:
         60:e1:9e:8d:d3:35:c9:9e:58:2d:8f:c3:2b:77:62:49:8c:b6:
         e5:a5:8c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 20:36:51 2024 by rpki-client on console-ams.rpki-client.org