Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
File:                     3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa (raw, json)
Hash identifier:          C8+WKjRorimmaw3FjC6fFdA6QKwbtNt6USNHh64JUiA=
Subject key identifier:   5A:6E:72:62:F0:BD:71:71:A1:97:5F:E3:05:C3:33:E1:C1:23:A8:7C
Certificate issuer:       /CN=69CE57F4984A7B332974000C0033734628A36A46
Certificate serial:       776A44EE3099D75CF17EA18D347542B29802AEC3
Authority key identifier: 69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa
Signing time:             Thu 14 Sep 2023 18:00:01 +0000
ROA not before:           Thu 14 Sep 2023 17:55:01 +0000
ROA not after:            Thu 12 Sep 2024 18:00:01 +0000
asID:                     150193
IP address blocks:        103.211.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl
                          rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6a:44:ee:30:99:d7:5c:f1:7e:a1:8d:34:75:42:b2:98:02:ae:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69CE57F4984A7B332974000C0033734628A36A46
        Validity
            Not Before: Sep 14 17:55:01 2023 GMT
            Not After : Sep 12 18:00:01 2024 GMT
        Subject: CN=5A6E7262F0BD7171A1975FE305C333E1C123A87C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:10:ac:1c:0f:20:0d:f1:ba:e4:17:ca:79:
                    0d:87:30:21:7f:30:74:00:2a:48:a2:83:5e:56:4f:
                    d8:97:85:90:30:fe:74:4f:91:7d:1e:15:45:d2:09:
                    5e:bf:57:fa:f8:ca:23:da:7f:30:e7:ba:25:94:27:
                    be:56:ea:9d:c6:dd:12:2a:d2:11:45:84:ca:e2:15:
                    e2:41:74:f1:46:26:50:25:61:41:5f:42:c2:65:25:
                    0a:23:ba:0d:b6:ce:ec:86:ad:87:b6:fd:8f:b1:ba:
                    40:b0:8e:28:e6:1c:e8:b9:e5:93:c0:8a:a9:08:c8:
                    62:cf:7b:1c:4a:fd:c2:df:0e:53:53:3c:62:f7:78:
                    f4:7f:bb:df:fc:10:76:2a:b6:b0:d2:41:fc:8a:ff:
                    61:86:9f:62:33:55:39:b6:af:73:29:76:30:15:38:
                    7d:de:b4:94:92:a2:24:9f:1d:f3:be:1d:1b:62:ab:
                    0a:b5:b7:0c:e4:85:ad:79:c3:6e:1a:46:8b:91:05:
                    d5:d9:4b:6f:dc:d0:1f:3c:db:5c:17:2b:4f:23:c0:
                    a6:f0:b7:b2:09:ff:29:ab:e2:b9:2a:c3:d0:9f:9a:
                    fe:ff:aa:28:59:37:81:1b:e2:2b:60:e5:ee:72:68:
                    2d:ad:34:82:66:7d:1a:a8:1a:92:e1:89:2a:55:0e:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6E:72:62:F0:BD:71:71:A1:97:5F:E3:05:C3:33:E1:C1:23:A8:7C
            X509v3 Authority Key Identifier:
                keyid:69:CE:57:F4:98:4A:7B:33:29:74:00:0C:00:33:73:46:28:A3:6A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/69CE57F4984A7B332974000C0033734628A36A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69CE57F4984A7B332974000C0033734628A36A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70d66b69-707a-4830-a2d3-af6ca0d15bce/0/3130332e3231312e32372e302f32342d3234203d3e20313530313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:e0:da:11:0a:d1:e8:77:06:40:4d:12:9a:75:84:cf:f8:
         d4:ea:58:1b:b3:6e:55:7f:6d:ff:70:36:64:f6:7c:c4:f2:2a:
         a4:a1:33:f2:c8:6d:ca:05:cb:df:0f:1f:1c:bd:11:2a:14:e9:
         43:22:20:9e:83:10:08:bb:1b:fd:86:69:3c:0d:d6:71:dc:5d:
         dc:b9:34:04:aa:1b:cf:a2:96:0a:a9:85:03:50:cb:a9:43:f9:
         36:60:08:8c:13:06:b0:a5:ea:dc:bf:7c:72:cb:95:f1:5c:c6:
         ae:8c:0b:fd:07:61:98:32:b9:61:59:d6:53:57:29:cf:68:67:
         d8:af:7d:f5:ec:f8:ed:ba:6a:c0:ab:97:3c:f8:3f:8f:95:fe:
         8d:b3:34:78:7f:b4:8e:c2:ae:7f:f3:6b:9f:26:94:ab:d2:30:
         92:b0:34:48:60:8d:6d:98:2a:0d:ee:3f:8e:ae:77:5a:c8:e3:
         2b:12:e2:71:f0:2c:ed:f6:ff:1e:f4:3f:a7:32:b7:60:1d:ac:
         dc:2d:7d:eb:68:b0:5c:b8:55:93:a0:56:6f:98:2e:27:7f:f1:
         e9:2e:e3:9e:0a:e1:48:b6:02:d6:9c:7f:6b:bf:14:e3:16:ac:
         cc:35:e8:06:00:26:3f:07:d8:42:d5:da:0f:24:46:18:a0:67:
         16:be:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org