Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa
File:                     3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa (raw, json)
Hash identifier:          IdLVaZ7AfiKyQCkZcpkljDGsWkVnMjITwZQdqwHqugQ=
Subject key identifier:   2C:FA:05:A3:06:BA:12:4F:A3:F8:2A:0E:CB:ED:58:5F:56:A2:EB:E6
Certificate issuer:       /CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
Certificate serial:       5A196D2C6D411BC9CF382B7F89746E351819C22D
Authority key identifier: 73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa
Signing time:             Sat 13 Apr 2024 03:00:01 +0000
ROA not before:           Sat 13 Apr 2024 02:55:01 +0000
ROA not after:            Sat 12 Apr 2025 03:00:01 +0000
asID:                     140457
IP address blocks:        103.153.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl
                          rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:19:6d:2c:6d:41:1b:c9:cf:38:2b:7f:89:74:6e:35:18:19:c2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7300283D3A4EDE4059186CC16600EDDCCBAC0E02
        Validity
            Not Before: Apr 13 02:55:01 2024 GMT
            Not After : Apr 12 03:00:01 2025 GMT
        Subject: CN=2CFA05A306BA124FA3F82A0ECBED585F56A2EBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3b:32:fc:de:a8:12:75:09:58:ad:f4:1c:aa:
                    b6:1a:c1:d2:e7:12:f0:60:05:48:cf:79:c1:b0:af:
                    42:a9:12:ee:93:be:f8:b9:65:e4:d9:ab:a2:2d:3b:
                    e9:21:24:3a:d7:ba:f7:00:da:6f:b1:38:44:26:e4:
                    29:98:72:d6:76:8f:06:44:f2:05:92:76:61:df:02:
                    b8:4b:16:b0:b1:87:af:b1:3f:1f:68:75:3f:d2:5a:
                    d3:fb:38:65:7d:e6:dd:d7:4d:5f:f7:d5:fd:11:02:
                    70:1c:21:80:80:ed:37:43:03:68:5d:2c:a3:f9:a0:
                    98:89:3f:41:6c:4f:ee:ea:00:74:49:ad:61:86:b8:
                    11:08:27:b3:2b:2a:25:05:39:00:e5:e6:6b:be:a6:
                    f1:7b:ce:02:7e:5d:8d:54:17:cc:9f:1b:dc:d6:5c:
                    98:39:39:ac:5b:e5:a1:f0:a6:96:0f:61:f0:31:0e:
                    d3:4e:8a:cd:30:71:11:aa:a0:d7:d0:4a:ab:d8:0d:
                    c9:6d:7a:be:fd:f1:ef:c2:5d:12:7f:02:9f:e9:79:
                    2e:c7:a9:ca:61:22:6d:46:a5:4a:73:53:6d:3c:82:
                    f0:11:dc:dd:d1:eb:a5:58:17:50:20:de:a9:ef:8b:
                    36:d4:a1:0e:da:df:5c:59:e2:11:d8:ae:54:5e:da:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:05:A3:06:BA:12:4F:A3:F8:2A:0E:CB:ED:58:5F:56:A2:EB:E6
            X509v3 Authority Key Identifier:
                keyid:73:00:28:3D:3A:4E:DE:40:59:18:6C:C1:66:00:ED:DC:CB:AC:0E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7300283D3A4EDE4059186CC16600EDDCCBAC0E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f6440f6-6f5a-4f4b-a597-e74b543e785b/0/3130332e3135332e36322e302f32332d3234203d3e20313430343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:37:37:0c:3c:c0:8f:63:5d:32:3f:80:65:93:87:d2:39:fe:
         65:52:6a:0c:e7:f2:ec:ed:69:59:0d:67:fe:27:2c:bb:b7:75:
         67:61:79:4a:57:8c:b1:ab:92:25:f7:06:af:73:49:3c:b2:68:
         08:ec:c8:a5:2e:ff:44:3b:85:93:66:a4:32:0d:bb:ac:ed:89:
         ce:8a:8a:e8:94:b7:51:25:fa:e6:91:35:f9:16:83:7f:13:75:
         fc:f8:ca:70:f7:c8:69:d6:1b:83:98:18:34:52:cb:85:9a:cb:
         80:62:04:73:cf:50:cb:1d:ff:ed:ed:59:aa:a7:b4:6d:ed:14:
         22:ee:89:34:fd:92:42:63:59:0c:79:c2:6e:53:89:c0:e1:97:
         3a:a0:bd:33:fe:fc:13:1e:45:92:f9:f1:60:dd:ac:a7:c8:e1:
         63:5e:47:05:5f:a5:da:3b:be:de:fa:9a:5c:7e:d9:ed:f7:38:
         87:c4:ce:15:5f:83:4a:7f:45:31:d0:e2:ac:8f:4b:ff:fd:8e:
         0e:f4:17:08:d8:c0:4a:39:d4:81:65:30:2f:83:ae:23:cc:f3:
         13:cc:2d:be:10:45:cc:43:de:aa:1e:d5:c1:61:c0:fe:32:c5:
         2b:91:59:a6:fa:7a:41:af:6c:d7:d6:a1:4c:38:4b:9f:61:54:
         c1:ac:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org