Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa
File:                     3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          ys4UGsG1uP8LFRAanrka89JamSeqL98fcjZ0S/b3Ihc=
Subject key identifier:   19:5D:BB:2F:BE:21:BE:51:A2:20:17:FD:E0:68:82:91:C0:71:8F:E3
Certificate issuer:       /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940
Certificate serial:       0D9522196DE16E58FFE7B87F266DE212DE1F7172
Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa
Signing time:             Fri 16 Feb 2024 13:00:00 +0000
ROA not before:           Fri 16 Feb 2024 12:55:00 +0000
ROA not after:            Fri 14 Feb 2025 13:00:00 +0000
asID:                     139967
IP address blocks:        103.101.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl
                          rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:95:22:19:6d:e1:6e:58:ff:e7:b8:7f:26:6d:e2:12:de:1f:71:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940
        Validity
            Not Before: Feb 16 12:55:00 2024 GMT
            Not After : Feb 14 13:00:00 2025 GMT
        Subject: CN=195DBB2FBE21BE51A22017FDE0688291C0718FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:1d:91:f8:22:73:e0:85:0c:cf:19:15:3c:
                    43:82:ef:5b:6a:87:d7:93:c1:59:61:2c:8b:f1:33:
                    89:02:5e:5c:11:ba:59:a0:e6:ad:24:ab:55:62:af:
                    39:5e:7b:67:31:50:e8:82:ba:a1:56:2a:92:e5:fd:
                    28:a9:c1:83:c8:03:65:40:68:7e:2e:eb:4f:c4:3d:
                    10:9b:7e:ee:90:8a:07:fb:82:31:ce:2f:32:24:2a:
                    81:9c:69:4b:0b:e1:c7:df:83:8b:b3:8a:9b:21:06:
                    ad:24:ee:44:71:fc:e4:65:12:da:1b:44:66:c8:ed:
                    82:4f:63:d2:28:01:27:d9:90:16:4e:70:a5:30:f0:
                    1f:fc:ce:2c:6a:32:df:33:4f:97:9e:d7:96:b6:8c:
                    da:07:29:f8:f1:01:14:bb:68:ac:30:cd:30:b9:65:
                    3f:56:64:f0:2e:f0:56:19:36:8e:f9:37:84:a9:f2:
                    b8:9f:d7:8d:bb:5b:62:36:69:d5:d3:8a:63:7d:da:
                    bb:73:0d:db:94:b0:34:4b:93:10:cd:77:03:7d:3c:
                    b2:fd:a5:7d:d3:32:69:64:20:68:d1:56:c6:a8:b6:
                    f2:ae:17:0f:8a:09:dd:55:52:03:3a:9c:ea:31:98:
                    df:35:8a:79:49:56:03:ad:b1:36:4f:bf:49:16:6c:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:BB:2F:BE:21:BE:51:A2:20:17:FD:E0:68:82:91:C0:71:8F:E3
            X509v3 Authority Key Identifier:
                keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:0a:00:66:4a:41:38:60:dd:72:94:f9:37:46:22:73:76:d6:
         14:05:d5:77:ab:2c:be:2f:61:44:0b:77:e7:41:47:14:57:e5:
         09:6e:2e:af:51:71:99:00:84:a6:49:d1:5d:95:5f:99:b7:86:
         ee:a8:48:ac:f8:d6:e7:6d:4c:38:af:cb:8a:cf:c7:d2:48:e1:
         09:58:b8:3d:b1:47:bc:85:e6:0a:0e:4d:31:e7:0b:8a:7d:9b:
         23:09:91:85:26:c3:86:9c:a6:f6:3c:a8:07:7d:70:d6:a9:e4:
         b1:66:50:ed:66:4d:30:c2:05:e9:e2:69:23:12:1d:5f:e8:30:
         d2:0c:d5:b1:47:79:cf:ab:60:dc:9c:3a:7a:ca:5f:86:3d:ea:
         72:51:ba:0d:02:39:37:2e:77:b8:e5:b8:09:b8:92:09:c4:c6:
         88:f0:b7:27:e6:ee:de:72:49:63:62:65:8e:fe:19:6d:e3:d8:
         ea:d6:86:af:84:dd:5f:3e:81:b6:13:9a:6b:04:26:83:50:20:
         6f:bf:45:d5:90:33:df:e0:16:88:f4:f0:53:b3:6f:f6:83:3e:
         ee:73:7d:3d:40:a9:49:ab:87:c1:59:18:2c:f2:be:3c:5a:aa:
         e5:20:d9:7d:4b:3a:3e:88:12:22:90:00:76:e3:60:10:d0:51:
         23:e1:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org