Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa
File:                     3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (raw, json)
Hash identifier:          Gu4z/TicFIzPRfVFPjPwNw+O9TKOGKFGxX8ZTBLU804=
Subject key identifier:   14:28:BB:71:C0:0E:01:FF:21:BC:4C:15:5F:71:C7:56:15:9B:1E:75
Certificate issuer:       /CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
Certificate serial:       3B987CC274538144A76719B61037D7BBFF32A691
Authority key identifier: C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa
Signing time:             Thu 21 Nov 2024 05:00:02 +0000
ROA not before:           Thu 21 Nov 2024 04:55:02 +0000
ROA not after:            Thu 20 Nov 2025 05:00:02 +0000
asID:                     131743
IP address blocks:        103.227.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl
                          rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:98:7c:c2:74:53:81:44:a7:67:19:b6:10:37:d7:bb:ff:32:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C62A541C7323F6CD238F549B1F8736ED958DEFF7
        Validity
            Not Before: Nov 21 04:55:02 2024 GMT
            Not After : Nov 20 05:00:02 2025 GMT
        Subject: CN=1428BB71C00E01FF21BC4C155F71C756159B1E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:cf:29:8c:5d:cc:74:19:c1:f2:85:6a:f5:
                    24:04:bc:ff:1a:b2:f2:67:24:74:6e:da:7d:68:31:
                    5a:b9:b8:0f:e5:ca:36:ea:41:d2:3d:76:f4:dc:22:
                    6f:64:7c:03:ad:55:f3:d2:80:c1:42:6e:c3:69:8d:
                    3a:20:61:fa:17:e1:ee:db:36:83:f6:dc:ed:fb:3d:
                    bf:5c:2f:0f:85:de:16:b5:69:be:0a:f7:8d:76:bc:
                    73:46:cc:0a:86:4a:c2:b9:91:91:4b:5d:51:57:87:
                    0e:71:bf:d0:24:2a:dd:c2:04:4f:73:b6:31:52:ba:
                    61:09:0d:f7:c9:29:dc:64:3c:08:a5:87:d8:af:2e:
                    0c:e0:c7:89:4b:8d:50:61:ee:bc:83:26:fe:aa:5b:
                    05:f9:f4:ca:cb:13:bf:30:75:89:6d:85:07:a3:2e:
                    31:05:63:db:bf:21:73:38:e0:2f:e8:dc:01:50:32:
                    d6:f1:bf:1f:6c:1b:cd:a2:42:68:6e:8c:72:8e:ea:
                    16:96:f8:c4:7d:65:6b:0b:25:97:9d:da:0e:9c:40:
                    8b:39:d8:ce:71:3d:5e:07:48:94:f1:eb:50:b9:bc:
                    b7:79:64:dd:a6:8e:d1:ac:8d:cf:ec:19:50:ef:48:
                    17:ca:17:44:8d:09:7a:ad:a8:54:31:37:05:3b:20:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:28:BB:71:C0:0E:01:FF:21:BC:4C:15:5F:71:C7:56:15:9B:1E:75
            X509v3 Authority Key Identifier:
                keyid:C6:2A:54:1C:73:23:F6:CD:23:8F:54:9B:1F:87:36:ED:95:8D:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/C62A541C7323F6CD238F549B1F8736ED958DEFF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C62A541C7323F6CD238F549B1F8736ED958DEFF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:9d:76:34:f2:92:c8:e7:c2:66:69:28:21:74:f8:a7:3f:51:
         95:43:9b:e8:da:e4:a9:64:60:98:80:d3:8f:f4:c0:c8:ad:cf:
         38:38:9f:52:cc:6b:85:1c:64:5c:8d:6f:ea:9b:4c:82:d8:27:
         ac:6b:5a:68:1a:68:77:9a:4e:2c:17:67:05:15:b9:59:4e:d7:
         52:4e:7c:23:13:90:84:a0:7b:f1:c1:04:f3:6f:d4:9d:4d:48:
         e0:52:7a:89:8e:17:73:f2:15:54:03:dd:04:1c:33:f9:af:af:
         6f:cc:a0:94:2e:dd:2c:2e:60:f9:db:a3:98:5d:70:02:c1:6f:
         ab:5e:ca:0b:5d:99:52:7a:0e:f8:a9:63:c4:b7:5c:7a:d4:a9:
         1a:7b:38:a5:ad:e1:be:08:5c:28:c8:24:89:f0:ac:e3:be:3e:
         6b:e5:8a:8f:38:87:f2:5e:fa:f9:9d:fe:e7:1c:f8:e7:91:41:
         02:22:cd:a8:08:08:02:07:cc:db:d7:76:5a:fb:de:34:1b:f7:
         27:04:ad:fb:2d:c5:7d:5f:4b:f4:2a:10:12:c0:39:8d:69:86:
         07:0b:e7:71:70:ae:5a:bd:d0:39:99:32:fa:45:5a:e4:ae:43:
         38:a2:32:62:9e:ef:96:6e:04:c4:74:83:14:8b:28:b3:b8:bb:
         2f:57:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org