Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa
File:                     3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa (raw, json)
Hash identifier:          69UTanSsEz7nvXupdcfEZXkB/Flxry02g8IfaxYe4Yo=
Subject key identifier:   36:6D:E2:10:4E:86:0B:3D:C9:19:27:23:7B:39:E3:33:74:D5:2B:03
Certificate issuer:       /CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
Certificate serial:       1E4E4774A07DA924D1289C3FB1CF056A792D151F
Authority key identifier: F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa
Signing time:             Wed 27 Sep 2023 08:00:01 +0000
ROA not before:           Wed 27 Sep 2023 07:55:01 +0000
ROA not after:            Wed 25 Sep 2024 08:00:01 +0000
asID:                     138129
IP address blocks:        103.132.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl
                          rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4e:47:74:a0:7d:a9:24:d1:28:9c:3f:b1:cf:05:6a:79:2d:15:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766
        Validity
            Not Before: Sep 27 07:55:01 2023 GMT
            Not After : Sep 25 08:00:01 2024 GMT
        Subject: CN=366DE2104E860B3DC91927237B39E33374D52B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:64:31:53:5e:8d:7c:ad:5d:2f:48:63:27:
                    d0:c6:33:e9:2f:58:89:f2:36:e6:92:bf:0d:54:46:
                    88:46:63:c1:fd:93:72:15:1a:ed:f2:7a:31:96:91:
                    1b:a8:ae:9c:cf:ea:b0:16:0c:53:e4:dc:0d:e6:91:
                    a3:30:06:1a:80:1a:c1:40:fe:1a:49:05:44:f2:b6:
                    8a:55:a9:ca:a0:a5:e1:5a:5f:5f:d7:44:ab:3a:f7:
                    91:e6:7f:3b:49:1d:38:e2:a4:bb:94:88:2a:58:85:
                    e2:82:b0:6c:f0:07:68:9d:84:f9:e9:ae:71:4d:d6:
                    83:09:bd:c1:cf:0e:14:12:8b:60:03:94:67:0a:31:
                    45:72:79:16:70:61:aa:6f:c4:54:e7:5c:27:ab:cb:
                    bf:cc:90:bb:8f:51:ea:06:28:f3:1e:23:5b:2e:a3:
                    da:8c:df:90:0d:d8:32:7b:7d:e6:90:3d:e3:70:8e:
                    cd:70:64:16:6d:6d:72:04:c4:f6:8f:1c:f1:0c:62:
                    4c:c6:2c:c5:54:7c:68:5c:8c:7d:eb:a3:70:0a:fe:
                    af:cb:32:c8:82:bc:59:b3:45:72:09:ee:8c:45:ee:
                    82:14:3c:d2:dd:b6:48:34:2b:88:b3:f2:f3:30:96:
                    6b:d2:52:66:ef:4d:93:83:65:82:e4:c6:d0:57:69:
                    dd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:E2:10:4E:86:0B:3D:C9:19:27:23:7B:39:E3:33:74:D5:2B:03
            X509v3 Authority Key Identifier:
                keyid:F5:58:D9:AA:4E:66:D7:B6:E4:CB:29:EC:87:79:53:D3:ED:6C:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F558D9AA4E66D7B6E4CB29EC877953D3ED6CD766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/949c8680-bd0f-4a4f-996d-2102a0535374/0/3130332e3133322e3233362e302f32322d3234203d3e20313338313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:37:59:15:e6:27:e1:64:80:07:18:eb:62:01:a5:b0:1c:30:
         62:70:ce:74:d0:db:9c:51:7e:0f:0b:40:e0:f0:57:a3:f7:45:
         cf:86:f9:2a:c4:c0:d3:1d:02:b9:01:17:53:69:ef:74:bb:bb:
         b8:d0:1f:6b:82:f6:07:24:b3:ae:d7:fd:c1:ba:70:4d:76:3f:
         cd:3a:15:50:d6:85:9a:b8:8f:56:08:b4:f5:f9:65:95:26:d5:
         a5:55:35:44:55:91:58:56:18:a6:32:56:16:b0:1d:6e:a5:ef:
         a9:79:e3:ac:37:67:9a:85:e8:86:37:ff:e5:30:12:8b:38:c6:
         5f:5d:9f:6f:00:89:48:b5:57:c8:ac:31:5b:80:2e:9e:1f:4c:
         bc:69:27:6c:f7:33:e2:18:cb:e9:62:e0:b2:e9:d2:ed:86:c4:
         52:11:8d:66:45:51:01:e2:d1:9b:0a:e9:b9:ce:dd:bf:84:ba:
         31:3b:83:4c:10:7f:3d:74:65:10:3a:4d:6f:63:8b:06:90:72:
         42:f5:ac:85:4c:f4:ba:36:a8:92:12:dd:aa:c3:5f:e7:30:47:
         53:d9:c4:59:51:9e:ee:b4:b7:1f:36:49:53:63:30:5f:66:28:
         c3:bc:f6:cf:00:86:4f:dc:fd:9f:1b:38:73:b4:67:6e:a2:ee:
         dd:4c:f0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:26:37 2024 by rpki-client on console-ams.rpki-client.org