Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
File:                     3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (raw, json)
Hash identifier:          dTVhxBxxiWcODUQVa6YrqGi0fLXBZlmm0SqZ40fI9Cs=
Subject key identifier:   21:E0:4C:8A:1F:99:E0:DA:4C:EF:07:BD:54:45:00:37:45:98:A5:C3
Certificate issuer:       /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974
Certificate serial:       4E80489C2E7C34D5DC92CCA76A0F047B37A73B9F
Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
Signing time:             Wed 15 Nov 2023 07:55:01 +0000
ROA not before:           Wed 15 Nov 2023 07:50:01 +0000
ROA not after:            Wed 13 Nov 2024 07:55:01 +0000
asID:                     141889
IP address blocks:        103.163.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl
                          rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 04:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:80:48:9c:2e:7c:34:d5:dc:92:cc:a7:6a:0f:04:7b:37:a7:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974
        Validity
            Not Before: Nov 15 07:50:01 2023 GMT
            Not After : Nov 13 07:55:01 2024 GMT
        Subject: CN=21E04C8A1F99E0DA4CEF07BD544500374598A5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:97:0a:f0:53:0c:a9:6e:70:bb:16:cd:cb:
                    e9:65:59:7c:18:69:24:cb:30:95:b6:d1:77:b5:58:
                    a8:30:a0:4c:d1:0e:74:b2:26:96:33:7d:a6:c9:d9:
                    31:ac:ff:cf:79:f4:bf:0b:2b:09:60:b5:31:e5:54:
                    e4:8b:ce:5a:6a:72:0a:72:c2:c7:b8:30:6f:6a:d7:
                    ae:9c:ea:b1:7c:c4:7b:d2:23:1d:19:4b:79:a9:74:
                    e1:f3:ae:88:7c:b7:ae:12:d6:96:26:b5:70:f9:f0:
                    d4:54:7b:b1:09:51:28:1b:5d:eb:b6:74:1f:03:de:
                    7c:0a:1c:87:b3:06:17:b2:99:4b:2f:d7:7b:21:e5:
                    71:8a:cc:c4:86:8f:e6:e9:25:d6:51:e4:b4:1b:bc:
                    1e:e2:cf:49:9b:b1:82:e4:8c:03:0c:5d:f4:12:0b:
                    3a:eb:4d:9a:ee:8e:17:52:a5:79:1c:1d:42:fd:a8:
                    aa:ea:63:dc:19:14:78:af:59:b1:a4:0f:83:b4:dd:
                    18:d1:c8:23:6a:07:49:9e:36:ec:62:be:2a:11:db:
                    fa:86:9e:61:31:5e:d4:f0:65:58:85:ac:ae:e6:0c:
                    82:9b:81:3c:c6:40:33:4e:09:bf:99:3d:11:b5:33:
                    e6:9a:0c:42:80:fc:80:81:4b:a4:9e:73:b5:70:25:
                    53:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E0:4C:8A:1F:99:E0:DA:4C:EF:07:BD:54:45:00:37:45:98:A5:C3
            X509v3 Authority Key Identifier:
                keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:39:9c:3b:f5:df:07:4f:1f:2b:ee:04:9a:d1:2e:ad:fe:1f:
         10:1d:e8:a7:c9:ab:56:ed:20:b9:31:11:27:58:92:dd:80:49:
         ba:35:f6:b6:e1:36:4e:af:66:2a:06:12:a1:be:20:ab:73:d6:
         64:96:3e:23:65:9e:d7:c4:30:79:97:9b:01:77:ed:1e:f2:5e:
         6f:37:af:45:2f:de:11:28:69:1b:ae:a2:13:8e:65:02:33:9c:
         93:53:92:c0:c1:ea:50:27:f7:62:3d:cc:1e:e7:57:9b:94:fd:
         1f:64:b5:a0:37:4d:93:c2:5c:dc:5f:f8:58:5b:87:12:d2:cc:
         4b:ed:62:2e:c1:2d:b4:c2:66:44:a1:94:38:d6:80:b1:b0:11:
         c2:7f:ae:80:97:0b:ee:71:fb:17:28:72:1b:c2:50:20:a9:90:
         5e:b2:be:dc:da:0f:e2:21:2d:af:d2:1a:5b:bc:3f:11:9c:9a:
         07:9b:0a:d2:c4:41:fe:49:29:9f:23:1a:ed:11:51:2a:7a:7e:
         7c:f6:93:9f:5b:6a:eb:51:7e:57:4e:6c:74:f2:c3:19:7a:00:
         8b:ea:b9:7a:d1:ae:57:69:d4:68:06:36:bf:39:99:9b:80:4d:
         67:8e:bf:3e:52:85:8c:2e:3f:98:b7:7e:f6:67:2a:02:78:34:
         05:a5:53:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:58:00 2024 by rpki-client on console-ams.rpki-client.org