Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
File:                     3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (raw, json)
Hash identifier:          yomNOdQHRwjdEv7OsKqoQCROge0cEDSUtwjM/LSAr8Y=
Subject key identifier:   5F:CC:93:DE:7C:A4:19:6B:36:13:5E:ED:54:AD:8C:81:10:ED:95:E5
Certificate issuer:       /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
Certificate serial:       01635EF98022F8502061175CD2438C24F880A339
Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa
Signing time:             Tue 28 Nov 2023 12:00:00 +0000
ROA not before:           Tue 28 Nov 2023 11:55:00 +0000
ROA not after:            Tue 26 Nov 2024 12:00:00 +0000
asID:                     142370
IP address blocks:        103.169.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl
                          rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:5e:f9:80:22:f8:50:20:61:17:5c:d2:43:8c:24:f8:80:a3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1
        Validity
            Not Before: Nov 28 11:55:00 2023 GMT
            Not After : Nov 26 12:00:00 2024 GMT
        Subject: CN=5FCC93DE7CA4196B36135EED54AD8C8110ED95E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:f9:77:b1:24:8e:64:e8:bf:18:bb:85:7b:
                    fb:0a:01:a3:d4:63:78:8b:2d:47:80:7c:c0:cf:53:
                    43:68:38:9f:9c:b1:dd:7a:6a:60:fa:fc:22:25:a5:
                    c1:6b:71:1f:2f:2b:ea:79:5c:d5:07:e5:5c:a4:18:
                    f5:19:66:ca:e7:a5:95:50:7d:0c:76:75:d1:fc:0c:
                    a3:b3:73:96:e8:7c:17:26:80:d8:b5:6a:b3:a5:c2:
                    2d:9a:57:82:fe:10:c1:0b:5c:92:76:5b:93:d1:60:
                    6d:88:ee:4b:2a:94:f7:2a:6f:7c:4e:e6:dd:4e:0b:
                    dd:f0:7f:83:a2:22:1b:ef:d9:89:e2:16:72:8b:d3:
                    2e:44:0b:17:5a:bd:9e:3e:32:4e:cc:0d:fc:0a:68:
                    ad:4d:33:98:dc:1e:0e:a9:58:ae:c8:06:d7:09:50:
                    06:10:c9:9f:18:9c:34:89:16:42:00:7e:a3:b3:e7:
                    ec:a3:8c:f0:e8:73:c4:c4:95:4d:24:ba:a2:7c:3d:
                    1f:72:2c:cd:94:a8:b2:12:3e:33:2b:8c:c9:7a:28:
                    53:be:f1:1c:20:ea:f1:f9:ce:f6:4c:18:95:cc:f1:
                    52:e9:51:11:78:98:33:da:e0:f0:25:c5:ca:11:20:
                    a0:f8:f8:cf:0e:4e:ed:45:48:7a:90:a5:22:cd:a1:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CC:93:DE:7C:A4:19:6B:36:13:5E:ED:54:AD:8C:81:10:ED:95:E5
            X509v3 Authority Key Identifier:
                keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:21:05:95:c8:da:8d:f9:43:ea:39:78:73:71:c0:21:f4:dc:
         7f:6a:81:88:35:b0:9a:ce:ab:10:1f:39:24:67:5f:40:13:17:
         33:cc:73:51:27:bb:a9:fb:99:e9:bf:82:a2:f6:9b:77:7e:ef:
         66:eb:8d:87:bd:b4:0e:79:67:44:42:9d:84:50:ff:28:57:90:
         5a:05:d1:ef:72:7b:75:c3:46:b2:00:4d:b2:05:eb:f5:a9:c0:
         2f:6b:98:0c:e9:5c:2c:fe:96:69:84:83:b9:54:45:19:9a:a9:
         8d:d9:81:63:70:72:df:95:bf:a8:a7:74:d6:fc:f5:af:5a:ca:
         02:69:ab:a4:70:7a:16:63:fd:be:f5:df:94:66:60:d7:ee:ca:
         5b:b5:dd:e8:be:75:2f:5e:24:31:8f:1e:61:d1:f5:1c:ea:c3:
         80:61:63:4f:a6:1e:a2:c3:91:09:3d:f9:70:71:ac:0c:6e:47:
         c7:5f:65:d6:ff:a1:27:9a:69:44:df:ec:a8:c0:56:b0:65:bc:
         8b:19:ba:73:87:3b:88:a7:d5:b5:a3:2f:de:07:a1:ba:02:c5:
         3e:97:ff:28:1c:95:41:b5:5c:68:5c:b3:e2:2d:93:e2:99:e9:
         14:75:9b:ea:0f:90:94:ec:04:ea:2d:68:70:da:f4:82:cb:41:
         1d:3f:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 23:30:00 2024 by rpki-client on console-fra.rpki-client.org