Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
File:                     3130332e3235332e38362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          5oNCbPk2HYn7/HxfXDGSitPSn/7g+/Tc/4vXHxJeZzo=
Subject key identifier:   33:95:40:5F:A6:3A:D9:8F:47:22:A3:9B:29:61:45:2F:3C:84:93:47
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7DB61567D9414E4CB28793676EEA525153E584F3
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 01 May 2024 08:02:07 +0000
ROA not before:           Wed 01 May 2024 07:57:07 +0000
ROA not after:            Wed 30 Apr 2025 08:02:07 +0000
asID:                     9341
IP address blocks:        103.253.86.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b6:15:67:d9:41:4e:4c:b2:87:93:67:6e:ea:52:51:53:e5:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: May  1 07:57:07 2024 GMT
            Not After : Apr 30 08:02:07 2025 GMT
        Subject: CN=3395405FA63AD98F4722A39B2961452F3C849347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:b0:52:43:cd:31:b6:f7:fe:b8:04:7b:90:
                    bc:1f:18:9a:41:06:a9:c5:dc:45:1a:0e:50:21:c6:
                    f0:4d:fe:9b:6c:86:f9:28:95:cf:79:14:2b:3f:ec:
                    e4:e2:99:48:c0:ac:45:fa:7e:03:70:6c:80:90:ed:
                    1b:d1:a3:88:21:09:93:d9:f1:b1:76:35:1c:bc:c5:
                    76:e9:d0:dc:41:8a:a5:1e:2b:50:2f:5a:9c:26:79:
                    f5:41:85:b2:5a:7f:8f:03:24:35:5d:a9:b2:e2:a8:
                    e0:59:5a:44:2f:4d:be:a0:69:89:21:aa:33:76:31:
                    02:5c:13:f1:c9:76:3f:b7:1c:ce:1f:3e:0f:14:fd:
                    1d:80:4b:ee:63:94:15:d9:4f:0b:f0:ab:31:ab:29:
                    ae:4d:81:9d:9f:02:a1:85:80:85:98:36:0b:ed:df:
                    b9:ca:ba:1d:74:db:29:6b:0c:8f:be:57:9f:58:86:
                    3d:37:f0:a3:49:94:5b:3f:65:89:93:5f:68:a4:b7:
                    eb:65:1f:d2:81:17:64:f6:8c:23:cf:22:f0:c7:8e:
                    a0:d2:6c:ae:42:25:c4:95:5f:27:5b:5e:b7:6b:eb:
                    25:9c:21:45:ab:58:5f:c0:59:18:12:b3:e0:c4:d4:
                    06:b7:a1:a6:8b:53:c1:f5:22:6d:e9:a2:af:10:f7:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:40:5F:A6:3A:D9:8F:47:22:A3:9B:29:61:45:2F:3C:84:93:47
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e3235332e38362e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:bd:43:34:03:02:99:05:51:5a:fa:1c:0a:3d:51:10:1d:
         77:5f:73:fc:43:7b:bb:9b:9f:f4:47:f3:bd:16:8c:fc:fc:e7:
         2f:ed:c4:9f:e6:3b:18:4a:39:ae:a9:4c:78:93:ee:a5:ae:b0:
         51:37:9c:68:ca:00:14:06:ac:d1:38:79:12:45:84:f4:30:e1:
         15:48:76:20:76:4d:20:f2:58:e4:a2:15:5f:3d:fc:b6:27:00:
         d9:7e:fc:d5:8e:ef:55:ef:32:ba:d5:03:ef:84:96:77:3a:90:
         11:1c:19:13:81:15:e1:da:55:40:8d:ed:34:8f:a0:fd:51:20:
         84:3d:f9:05:a3:16:18:e7:92:77:76:a9:3c:d4:a4:12:8f:0c:
         0e:10:5f:e9:fb:92:ba:5b:b2:fc:79:d8:ef:c5:e1:1f:30:01:
         4e:2d:5a:01:15:e1:00:0b:18:ec:9b:8d:a7:67:01:8c:a8:87:
         36:c1:5b:f0:4c:8c:ea:a7:c3:8b:5c:c2:d7:45:54:d9:80:66:
         ce:40:49:40:dc:4e:23:1a:5c:fd:3e:88:68:82:4f:55:bb:04:
         59:ad:14:bb:41:fb:10:ca:89:cf:f2:5d:b5:ca:40:d1:b0:4d:
         c2:9b:0a:53:3f:15:39:44:2e:98:f4:97:30:c2:71:46:12:38:
         9e:20:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org