Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
File:                     3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          lyiYtirTd9GyY3Stmfyy8i/BWqjsX2dllKxsauIe53I=
Subject key identifier:   5F:6B:18:D3:8C:AD:13:2E:D4:47:1F:E5:54:8D:05:18:59:C1:CF:9C
Certificate issuer:       /CN=AD5F121BCE742FD0358AE347D984F209BC381871
Certificate serial:       213AB842ED9288AD6D98C7A9965FD5E513A6A87A
Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
Signing time:             Sat 19 Aug 2023 05:00:00 +0000
ROA not before:           Sat 19 Aug 2023 04:55:00 +0000
ROA not after:            Sat 17 Aug 2024 05:00:00 +0000
asID:                     142360
IP address blocks:        103.170.24.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl
                          rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 23:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3a:b8:42:ed:92:88:ad:6d:98:c7:a9:96:5f:d5:e5:13:a6:a8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871
        Validity
            Not Before: Aug 19 04:55:00 2023 GMT
            Not After : Aug 17 05:00:00 2024 GMT
        Subject: CN=5F6B18D38CAD132ED4471FE5548D051859C1CF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:2c:3c:c4:55:72:2b:d7:9b:6f:5c:a7:71:
                    af:cd:37:64:22:ad:59:59:b1:89:06:cf:83:61:2c:
                    56:3d:f2:18:26:d1:84:60:04:0f:11:61:02:50:21:
                    76:64:a3:49:ef:f1:0a:f0:ba:a2:f4:39:a4:c6:72:
                    2f:d0:75:32:91:39:39:da:5f:b9:c5:7a:61:be:03:
                    38:7a:63:fc:19:91:84:fc:71:35:94:a0:08:a8:4f:
                    7a:ac:b6:c5:75:b3:c8:a9:a0:6e:6b:e6:05:59:11:
                    26:23:37:bb:cf:2a:e7:fc:6f:0b:f2:4f:84:41:16:
                    64:ef:f2:8e:2f:85:23:29:9b:da:8a:49:9e:19:86:
                    32:3c:7a:d2:fa:09:a2:ee:0b:f0:65:e0:47:60:c6:
                    91:6b:d7:bf:7a:f2:38:e6:56:4c:e0:1d:5b:f8:fe:
                    2b:1b:de:14:34:d6:7b:ec:18:b5:4d:b9:0d:86:cb:
                    80:24:c4:cc:23:da:d2:8e:e5:74:f8:95:fe:f3:59:
                    82:03:b7:0e:50:27:79:40:6f:09:99:04:9d:0e:53:
                    96:dc:fc:47:fe:cc:d1:e1:d0:31:0f:99:07:fb:90:
                    f3:30:43:4c:cc:2a:d1:6a:32:67:f4:2e:92:2f:15:
                    8c:48:4e:89:00:4c:4d:19:83:fb:e2:e4:dc:2f:d4:
                    e7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6B:18:D3:8C:AD:13:2E:D4:47:1F:E5:54:8D:05:18:59:C1:CF:9C
            X509v3 Authority Key Identifier:
                keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:07:7c:7d:e5:68:cb:ae:48:d0:e2:1d:2c:a2:88:ed:9d:ac:
         a1:f9:d5:dd:70:0e:cb:e2:bc:e2:7f:2a:44:7f:b4:d3:b2:6e:
         3c:b0:03:4b:7c:54:fa:b7:e4:56:7e:1b:59:ce:76:9a:c8:2f:
         9b:9a:97:17:e0:64:e3:1d:c7:35:b8:ac:69:63:bc:ee:55:f3:
         8d:7e:ea:dc:2d:bb:b0:f6:db:e3:a4:73:06:d5:bb:af:c4:81:
         d2:73:a3:0d:7f:c9:f7:02:c5:37:da:cf:f4:40:05:d4:d0:70:
         bb:f2:eb:1b:6c:ea:85:47:14:5e:53:65:30:fa:06:ae:9a:6c:
         37:2c:31:87:3a:0c:ae:10:46:6d:ab:00:d2:a5:33:1f:4d:13:
         70:01:e2:a5:73:31:98:61:4c:37:2e:d5:80:47:0e:06:f6:fe:
         09:8a:26:1e:bc:ac:40:30:07:42:af:ce:da:c0:22:47:c0:e3:
         da:77:57:0e:96:f8:2f:99:3d:03:68:4d:52:9d:94:86:62:f1:
         cd:04:f7:17:f6:d0:0d:ed:ce:6c:d8:cb:58:ec:67:b3:53:4f:
         bf:82:1b:eb:f8:ff:7b:83:32:76:02:c8:19:2d:54:0f:b4:54:
         a2:5f:c9:f6:37:34:0a:15:b1:6e:44:cd:91:b6:04:9c:3b:de:
         82:ef:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:11:41 2024 by rpki-client on console-ams.rpki-client.org