Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa
File:                     3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa (raw, json)
Hash identifier:          g9ctTwo5LeEH9/VaPs2OudFQWUtTcPbj3ZzURkogl8I=
Subject key identifier:   27:94:98:82:EB:6B:DD:E3:DD:5E:D4:58:A4:5F:D3:4E:76:33:BA:1C
Certificate issuer:       /CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
Certificate serial:       1AE9EE7EFAA47226457ABFE2048D16EF35C2933E
Authority key identifier: 13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa
Signing time:             Mon 14 Aug 2023 22:00:01 +0000
ROA not before:           Mon 14 Aug 2023 21:55:01 +0000
ROA not after:            Mon 12 Aug 2024 22:00:01 +0000
asID:                     64027
IP address blocks:        103.214.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl
                          rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:ee:7e:fa:a4:72:26:45:7a:bf:e2:04:8d:16:ef:35:c2:93:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=132BBDF9D9F26F001CC0F0EF9590333D38D04410
        Validity
            Not Before: Aug 14 21:55:01 2023 GMT
            Not After : Aug 12 22:00:01 2024 GMT
        Subject: CN=27949882EB6BDDE3DD5ED458A45FD34E7633BA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:9a:3c:96:ec:39:13:30:69:55:c7:1d:bc:
                    54:c4:38:5c:2e:80:2a:0c:7c:d1:dd:8b:63:98:48:
                    7a:2f:3e:03:a7:0e:a1:e8:0c:d8:62:7b:a4:b0:13:
                    de:8a:46:9c:0f:d7:42:59:56:ff:5f:c1:07:42:3e:
                    b6:9a:79:78:03:14:8f:e2:f5:6b:31:e0:7b:2f:cd:
                    90:3e:ea:1c:d2:eb:a4:90:a7:c4:f3:30:2b:d0:31:
                    4e:5b:b5:37:e3:b1:4d:20:ec:5d:12:c0:50:7d:f7:
                    47:cd:7f:9e:e9:34:3e:ec:dc:0c:48:37:c6:07:4b:
                    f9:28:45:7e:94:c7:ab:99:09:b7:87:38:61:ea:b2:
                    5e:27:a2:20:cd:bd:07:57:b1:63:f7:0c:63:a4:22:
                    05:35:ad:9c:12:30:9f:db:14:cf:80:97:69:40:79:
                    31:f6:26:72:f6:41:60:d6:26:c6:f6:75:b8:1b:e3:
                    2b:3b:d2:c6:c5:fd:3e:59:46:a8:7f:87:c8:72:6a:
                    e9:64:62:b3:49:88:87:fa:28:4a:9f:26:fc:54:86:
                    50:ab:64:87:6f:50:bc:18:0a:08:49:06:4f:c9:3a:
                    f5:67:e0:3f:0a:61:a2:7f:12:bf:04:06:24:df:6b:
                    57:20:85:c0:8b:01:bd:53:17:06:92:e2:f0:b9:11:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:94:98:82:EB:6B:DD:E3:DD:5E:D4:58:A4:5F:D3:4E:76:33:BA:1C
            X509v3 Authority Key Identifier:
                keyid:13:2B:BD:F9:D9:F2:6F:00:1C:C0:F0:EF:95:90:33:3D:38:D0:44:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/132BBDF9D9F26F001CC0F0EF9590333D38D04410.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/132BBDF9D9F26F001CC0F0EF9590333D38D04410.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130302e302f32342d3234203d3e203634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:2d:62:36:a1:98:93:92:3e:c2:22:51:04:77:75:b8:2c:
         2d:66:90:dc:d7:41:61:27:c9:f5:58:48:10:88:62:fc:e7:e3:
         1e:2f:05:2a:04:f7:b6:a5:58:e9:5e:90:a8:69:46:c6:fc:96:
         9c:31:78:0e:a0:28:35:32:27:7f:cd:f2:6b:02:72:78:9f:73:
         e0:f8:50:0d:f4:ef:52:72:50:37:9e:ec:15:07:64:70:5f:74:
         37:80:7e:18:6d:8b:c0:2a:5c:dc:d9:26:a1:25:e4:20:d2:b6:
         af:c5:b2:78:fb:4a:90:bc:f5:19:79:cb:8d:e2:cc:e6:89:3b:
         fb:d7:20:94:07:01:f5:03:48:36:27:85:1c:13:a6:f9:2d:11:
         84:f1:4a:9e:bf:63:b4:17:19:f8:d5:ff:76:86:30:90:b8:56:
         e6:38:fd:3c:44:12:ff:e5:ae:b5:88:61:c8:0e:89:74:a1:a6:
         64:c6:84:ab:2e:08:08:3d:a9:e4:e9:71:db:2e:b7:9c:6b:a6:
         a0:c5:c8:95:57:72:0c:26:30:bb:07:34:31:7c:2d:24:44:91:
         b7:af:a3:56:0b:74:26:e7:09:fa:8c:4b:e0:41:ee:59:d8:f9:
         86:6e:b1:36:55:22:b9:0f:2b:2d:6b:bd:62:18:ba:6f:63:da:
         c4:13:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:38:32 2024 by rpki-client on console-ams.rpki-client.org