Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa
File:                     3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          QpxHUWYzj8tO2AdtKXA+5rFpjnZ/7KVpVzY45Yt9Ywk=
Subject key identifier:   65:56:57:F6:2B:B4:9C:4F:04:EE:6D:5A:5C:FA:C3:BF:A6:46:83:CC
Certificate issuer:       /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial:       258462E89B56193D6FCE3F3B81F6AA1AD6F8D9C4
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa
Signing time:             Thu 21 Dec 2023 06:00:02 +0000
ROA not before:           Thu 21 Dec 2023 05:55:02 +0000
ROA not after:            Thu 19 Dec 2024 06:00:02 +0000
asID:                     131743
IP address blocks:        103.21.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
                          rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 04:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:84:62:e8:9b:56:19:3d:6f:ce:3f:3b:81:f6:aa:1a:d6:f8:d9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
        Validity
            Not Before: Dec 21 05:55:02 2023 GMT
            Not After : Dec 19 06:00:02 2024 GMT
        Subject: CN=655657F62BB49C4F04EE6D5A5CFAC3BFA64683CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:60:a7:4d:84:89:36:90:c6:88:d8:ee:96:
                    bd:e6:6a:7f:26:c6:c8:ad:95:d6:ed:da:63:97:ce:
                    a5:96:7e:8c:a3:42:be:ee:c4:c0:2b:c4:93:34:8f:
                    f1:f1:ab:e4:75:9b:b8:e2:b0:3e:90:e7:05:59:af:
                    0f:7e:8f:f0:b5:d8:ac:62:cd:a4:ba:78:77:f9:90:
                    c9:ba:ab:57:64:e2:81:34:e3:d7:7b:3b:ed:de:3b:
                    75:87:8f:61:d0:5d:2e:1c:ac:9d:1e:79:af:7d:67:
                    97:95:21:81:02:8d:ae:38:92:5c:d2:a3:72:a8:a6:
                    26:fc:df:01:75:12:77:71:b0:c6:bb:77:47:97:e0:
                    5a:48:1d:3d:a3:d2:ea:c8:45:00:ac:b2:fc:09:fc:
                    93:ab:79:70:de:70:4d:b8:8e:ed:5d:3e:96:a8:9d:
                    c5:6f:82:25:f0:ea:5f:ee:4a:93:e3:38:6b:85:fd:
                    5c:33:76:c3:fb:8b:70:89:01:0f:69:5c:ae:98:c0:
                    3f:1b:ad:d5:10:19:87:82:23:cd:59:09:56:27:9e:
                    85:da:e2:56:17:6a:e2:06:4a:cb:fc:fd:f3:0d:8d:
                    9f:4b:e3:6a:4c:a9:a7:ec:88:9a:54:f7:c0:ae:91:
                    85:4f:db:91:0d:d4:7d:cd:48:85:97:f8:88:81:db:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:56:57:F6:2B:B4:9C:4F:04:EE:6D:5A:5C:FA:C3:BF:A6:46:83:CC
            X509v3 Authority Key Identifier:
                keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:9e:cc:02:d0:6d:34:41:4f:67:51:c6:c6:d9:31:46:84:db:
         03:2f:f2:99:94:dc:70:02:f1:00:88:54:d9:35:e8:fe:53:75:
         46:ed:27:94:32:c9:88:ff:dd:2f:03:5c:fc:f5:35:44:66:e6:
         bc:cb:34:64:73:7b:fe:e9:00:b4:cf:08:ce:b3:ca:7b:9d:c0:
         73:59:bd:20:4b:d6:e5:3b:9c:2b:30:33:af:5b:fa:33:7c:53:
         1d:b0:e8:39:83:50:ea:87:13:5f:ff:98:73:c3:3d:46:f1:45:
         4e:5e:fa:45:69:1a:58:5d:76:69:aa:b6:fb:85:2b:c6:22:b3:
         ea:0e:ea:32:8c:77:72:50:e8:1a:5b:a2:a3:13:dd:7d:4f:b1:
         15:f2:1b:5a:ee:9d:83:9c:ab:24:ea:12:7c:c6:88:5a:38:f3:
         00:c8:29:3b:3d:cd:0a:7a:9b:bf:c9:28:d1:d8:44:f0:ee:4d:
         ff:3c:67:2d:38:ea:be:b7:62:4f:73:27:4d:32:8b:37:e8:bf:
         a1:a7:5d:a4:8a:8e:6a:e5:07:7f:1c:4b:ba:b4:08:d6:43:2d:
         cf:3e:8f:a6:e3:a5:a3:bd:1f:50:38:63:99:bf:c5:bd:f7:f2:
         eb:7d:c7:65:19:63:ab:38:fd:2e:64:97:99:10:f1:0d:3a:80:
         d3:bb:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 03:15:06 2024 by rpki-client on console-fra.rpki-client.org