Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa
File:                     3130332e32362e342e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          /cPXpESUcnK2KWFyZ692s+s8bhj6VH5JXKTCSb0IkjQ=
Subject key identifier:   DC:5C:15:17:D3:C8:B0:9C:AE:65:57:AF:9F:29:51:34:A1:15:2A:F4
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       4F4B14FC84D51DD2A785ECDCF2FC95B3436F570D
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa
Signing time:             Wed 06 Sep 2023 00:00:01 +0000
ROA not before:           Tue 05 Sep 2023 23:55:01 +0000
ROA not after:            Wed 04 Sep 2024 00:00:01 +0000
asID:                     9341
IP address blocks:        103.26.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4b:14:fc:84:d5:1d:d2:a7:85:ec:dc:f2:fc:95:b3:43:6f:57:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Sep  5 23:55:01 2023 GMT
            Not After : Sep  4 00:00:01 2024 GMT
        Subject: CN=DC5C1517D3C8B09CAE6557AF9F295134A1152AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:8b:b6:f0:f4:11:f1:3e:8e:39:a2:96:d7:
                    28:fb:0f:f9:b3:bf:75:f9:b2:ff:bc:c1:f6:59:6c:
                    9b:e5:f0:9b:e9:0e:af:8c:16:3c:59:e0:76:03:b7:
                    45:a4:0d:fd:5a:e6:7c:e6:d3:f0:5a:4c:9a:12:f5:
                    45:3d:56:da:58:c6:11:92:bb:9a:39:23:6d:b5:a6:
                    75:5e:bf:c8:9f:8c:65:cc:8f:b9:8d:7b:b4:f2:b5:
                    64:51:28:7b:58:40:26:85:97:be:0c:5a:67:48:d6:
                    36:17:50:a8:62:8a:c1:bf:19:ff:c5:19:bb:86:44:
                    8a:e3:86:75:8e:d2:95:2f:41:0b:4e:0c:c0:09:97:
                    ba:38:11:29:c8:52:d6:cb:0e:28:51:56:60:79:0e:
                    47:43:92:11:00:be:75:d6:f8:2d:9d:46:ca:d3:57:
                    67:d8:e1:2a:ac:0a:44:ff:fb:f9:e1:f4:b0:3c:c3:
                    87:f7:01:43:33:b0:9f:f3:c1:5b:85:23:70:2f:94:
                    0d:c9:b4:62:65:52:5f:d2:a4:1d:5b:21:83:ad:c3:
                    a1:b5:9d:d9:fe:02:d3:20:0f:82:ab:04:5f:4b:f0:
                    1a:d2:c2:d2:5b:db:25:7f:5d:d8:90:c3:2d:29:35:
                    32:e1:e4:e5:85:61:42:91:96:44:28:a2:16:87:bd:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5C:15:17:D3:C8:B0:9C:AE:65:57:AF:9F:29:51:34:A1:15:2A:F4
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e342e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:94:ce:3b:18:02:2a:ef:81:d5:2e:8f:2d:4d:11:0a:5b:
         0f:21:2c:55:34:30:e6:10:ea:3d:e1:d9:d1:59:06:cc:b3:01:
         4a:33:50:27:8b:af:5b:86:3f:12:21:64:33:48:5c:f0:99:b2:
         3f:49:17:e6:7f:c3:5b:d8:96:00:32:0a:1a:37:93:62:f6:fd:
         23:70:eb:40:df:52:4b:24:4d:b7:ea:80:42:e7:e2:c1:69:2c:
         81:7e:ff:53:93:9c:9d:c5:25:13:c4:17:e5:eb:a1:c8:7d:63:
         19:e6:55:29:cc:98:81:71:3c:af:ec:58:f4:67:91:de:b9:92:
         08:82:d7:38:90:c1:fc:26:fe:96:93:33:ad:5c:f0:bd:c8:d5:
         fe:1a:b3:6b:2c:23:97:ce:66:46:09:0b:43:14:84:78:71:ad:
         a0:46:6e:16:fe:17:c7:d6:31:69:e6:08:c1:02:33:81:04:96:
         0e:69:c9:64:33:96:d7:4f:c5:59:bd:09:9a:1d:99:3e:3c:a3:
         8f:b7:32:65:5a:91:bc:ee:31:d2:5e:b4:59:7c:45:01:85:41:
         c6:d3:a0:a5:a6:0b:32:11:8e:e0:cd:52:79:6a:85:c9:18:16:
         96:03:b4:85:7f:28:52:e2:be:36:8f:0c:ab:4e:fb:7e:62:21:
         98:fa:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org