Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa
File:                     3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (raw, json)
Hash identifier:          9IalcOq9DNSpSKdN0p73lmNbxO+ck56dUSHAVC/BGcM=
Subject key identifier:   01:E5:C9:09:FE:F6:4A:29:CC:9B:00:CF:94:A1:C5:B3:CF:2F:2D:D0
Certificate issuer:       /CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
Certificate serial:       03F48A11DEA333B96F962086C0237947AB9FD649
Authority key identifier: A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa
Signing time:             Wed 13 Sep 2023 10:00:00 +0000
ROA not before:           Wed 13 Sep 2023 09:55:00 +0000
ROA not after:            Wed 11 Sep 2024 10:00:00 +0000
asID:                     59279
IP address blocks:        103.227.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl
                          rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:8a:11:de:a3:33:b9:6f:96:20:86:c0:23:79:47:ab:9f:d6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9EBCF8158EABB1C16EFE1B82B4E79170AE87683
        Validity
            Not Before: Sep 13 09:55:00 2023 GMT
            Not After : Sep 11 10:00:00 2024 GMT
        Subject: CN=01E5C909FEF64A29CC9B00CF94A1C5B3CF2F2DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:e0:65:f4:1b:f7:5e:3b:c4:db:38:4c:cc:
                    c5:ca:c1:60:b2:6e:b4:bd:15:ea:b2:b6:4f:46:3b:
                    f9:ab:a1:f2:11:a7:0d:ee:09:8b:0c:c7:03:d4:b7:
                    6d:df:ee:d3:56:5b:d5:10:16:c3:04:ae:56:5f:c6:
                    0e:7a:52:b2:8e:02:ec:a2:0e:3d:f3:2d:3a:b3:52:
                    1b:b4:ce:83:5b:79:90:a8:c0:40:9a:db:d5:8e:e3:
                    ad:d8:ab:1f:29:f6:ac:8f:e9:b0:ba:50:24:63:c7:
                    ff:f5:c7:35:5f:c6:60:84:da:65:93:14:dd:4a:14:
                    a7:f3:ae:ae:4d:b2:62:37:8e:a8:96:49:28:06:23:
                    c9:8d:06:23:ce:a7:04:9f:0f:63:e1:e8:1e:4a:59:
                    b1:13:60:c1:a3:26:d6:64:03:83:67:ab:27:6e:eb:
                    65:d5:62:7e:71:3d:d7:26:3b:b0:07:17:56:ca:69:
                    7e:9e:c5:66:c7:88:55:5d:3a:3f:aa:ff:94:4b:2c:
                    12:7f:b3:61:fd:2b:1f:da:97:2d:7d:7e:d7:0e:c3:
                    55:23:bc:27:86:c6:e2:cc:31:b3:c4:55:f1:7f:8f:
                    eb:be:2e:fa:05:e6:5f:d1:74:73:9f:b1:7b:03:11:
                    bb:25:72:07:74:af:85:78:d0:c7:60:7b:4a:51:0a:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E5:C9:09:FE:F6:4A:29:CC:9B:00:CF:94:A1:C5:B3:CF:2F:2D:D0
            X509v3 Authority Key Identifier:
                keyid:A9:EB:CF:81:58:EA:BB:1C:16:EF:E1:B8:2B:4E:79:17:0A:E8:76:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9EBCF8158EABB1C16EFE1B82B4E79170AE87683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:16:93:3d:0a:d3:6b:47:18:f8:f3:c0:e9:e2:65:9f:82:74:
         a5:0e:2d:d8:d3:1c:d7:8c:33:dc:3a:36:92:3a:80:53:8f:40:
         63:63:81:23:a9:bd:e7:64:e4:95:20:15:c9:35:cd:a3:29:52:
         e6:ef:57:df:a1:d3:36:5d:9c:54:b5:fa:3a:c3:55:53:05:58:
         da:2e:54:fd:0e:1b:ca:e9:36:50:a2:e2:e7:a6:28:b0:35:1a:
         e1:0d:5e:d2:b1:56:54:1c:c9:d8:94:3d:60:a9:1c:42:8e:ce:
         b6:c8:2f:43:df:12:62:0b:6e:e1:ff:af:28:9d:04:8a:2e:c9:
         54:a6:97:49:83:b1:13:71:fc:29:c0:04:fd:0a:99:37:86:2f:
         73:19:e6:1c:e4:a8:f7:55:74:d6:08:7c:71:01:57:41:5b:79:
         76:22:dd:dc:6e:b8:22:a7:85:8f:b0:ae:27:64:55:26:31:7e:
         2e:5d:4e:04:01:dd:26:24:33:a9:0b:b9:be:53:c3:49:2d:bb:
         be:c2:eb:97:00:ed:d9:5e:ce:8c:32:85:a4:4f:b1:21:c1:bf:
         7f:f7:8f:3a:6c:be:1a:f9:ee:7d:6d:52:07:42:bd:5e:35:02:
         7b:95:fc:00:4f:3b:80:42:07:2f:89:92:01:2e:3b:0a:3c:c1:
         b4:cd:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 16:36:12 2024 by rpki-client on console-fra.rpki-client.org