Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa
File:                     3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa (raw, json)
Hash identifier:          K6A9cpTN/qyd3EdywutADJ4SHwJBgTcWj7Q4TDIDWiw=
Subject key identifier:   72:82:DC:DA:E7:29:0B:73:3C:6A:D8:D4:23:62:2C:7A:22:FC:09:7A
Certificate issuer:       /CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
Certificate serial:       7397EAC395CCBC8F7867DAB63503FB61869D4A27
Authority key identifier: 6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa
Signing time:             Tue 28 Nov 2023 13:42:29 +0000
ROA not before:           Tue 28 Nov 2023 13:37:29 +0000
ROA not after:            Tue 26 Nov 2024 13:42:29 +0000
asID:                     151533
IP address blocks:        103.245.168.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl
                          rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:97:ea:c3:95:cc:bc:8f:78:67:da:b6:35:03:fb:61:86:9d:4a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32
        Validity
            Not Before: Nov 28 13:37:29 2023 GMT
            Not After : Nov 26 13:42:29 2024 GMT
        Subject: CN=7282DCDAE7290B733C6AD8D423622C7A22FC097A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:52:ec:67:c7:e8:1e:7d:45:4d:90:03:11:
                    60:46:e0:e0:82:9f:65:71:fb:2c:b8:f0:77:ca:83:
                    55:00:17:b7:04:79:8d:3e:0a:1c:9f:66:8a:f0:61:
                    8d:17:35:39:33:82:7f:01:8d:26:4b:43:ea:db:ac:
                    9a:c8:8b:f7:b8:b7:d4:40:50:bb:6f:fd:37:f7:e9:
                    ef:e8:b7:97:3c:8b:5d:a3:3e:33:42:88:8d:34:bc:
                    9f:25:9a:c7:fc:85:82:ba:0f:cf:77:e9:fb:a5:9d:
                    a5:81:ce:20:66:10:f2:70:3a:0c:67:eb:92:3f:1a:
                    14:3d:29:2c:6a:77:9d:a2:f7:08:e4:7f:14:c5:14:
                    3d:da:bd:f1:42:d9:21:5e:ff:85:87:be:9b:93:83:
                    3f:0a:29:e7:44:10:e6:9c:8a:2e:81:41:e6:7e:d3:
                    a5:2f:d9:4b:e4:da:96:94:06:f1:cd:a9:13:d7:42:
                    5e:72:99:3f:46:ba:96:75:cf:e1:9b:25:0a:68:b2:
                    4a:3b:6e:0d:37:3b:b4:63:bc:49:f3:40:79:da:d9:
                    f1:a6:d8:92:00:e6:c9:72:c3:47:af:2f:dd:fa:7c:
                    73:c1:57:93:82:1c:8e:d1:91:a1:8e:e4:eb:2f:7a:
                    e9:57:e7:8f:e3:1d:cc:16:aa:5d:c3:5c:b9:36:52:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:82:DC:DA:E7:29:0B:73:3C:6A:D8:D4:23:62:2C:7A:22:FC:09:7A
            X509v3 Authority Key Identifier:
                keyid:6B:3B:A2:8F:EC:36:89:C8:F8:8C:E4:13:7A:3D:64:5A:51:FE:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B3BA28FEC3689C8F88CE4137A3D645A51FE6D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e1deb93-c190-46ee-ba83-2d91930a4395/0/3130332e3234352e3136382e302f32332d3234203d3e20313531353333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:c2:8f:97:7e:b1:9c:e8:55:7a:be:59:10:ea:30:92:84:
         f4:9a:cc:5b:55:73:d6:a2:c0:00:52:6f:2b:fb:f8:bc:52:64:
         3c:41:53:07:1a:d6:39:0a:e4:90:54:ab:6b:a7:75:4c:ca:8c:
         73:46:ff:b0:45:f7:0e:57:5d:1c:5a:05:1b:9b:27:8f:59:68:
         1d:60:2a:06:b1:47:eb:14:95:74:47:e2:a8:20:86:1c:20:f9:
         80:3e:2d:2a:fb:5f:d3:78:46:31:70:a2:a4:ba:62:3a:75:30:
         6a:72:78:14:73:28:e7:18:ae:05:3c:1a:4c:a0:16:0c:86:3f:
         b0:a0:93:9e:73:1a:3a:02:ba:07:a8:f6:2f:2d:a5:65:bc:bc:
         a8:a1:ab:56:89:f3:90:8a:a9:fd:1a:38:9a:ac:ff:57:05:b2:
         e9:4f:51:03:c9:28:25:69:fd:fc:e1:88:8e:7d:7c:2d:80:66:
         4d:6e:75:3f:f6:cd:d0:19:23:c2:44:96:f5:e3:7c:33:3f:3d:
         7e:8c:0e:6d:f0:07:9a:d3:b1:75:7f:23:33:81:ea:5b:aa:2f:
         0a:84:4b:96:d1:36:95:eb:23:1d:6a:c2:27:ff:35:45:37:af:
         ab:b7:6d:95:5c:04:50:fc:b8:af:a2:ca:15:47:4b:dd:27:c8:
         10:30:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:32 2024 by rpki-client on console-ams.rpki-client.org