Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
File:                     3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (raw, json)
Hash identifier:          wZwSp3gU3K+jm0fdkrA63pfVe5OH3KwVXkaALemEmOk=
Subject key identifier:   62:C9:09:DF:26:65:3B:DB:4A:6D:C4:23:55:0A:7D:23:19:18:F1:01
Certificate issuer:       /CN=581E644EEC44F9523CF189893E102BCC6008F9BE
Certificate serial:       4166907679E17F7B9E92499FEFD5B15204D08DED
Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa
Signing time:             Wed 04 Oct 2023 09:01:47 +0000
ROA not before:           Wed 04 Oct 2023 08:56:47 +0000
ROA not after:            Wed 02 Oct 2024 09:01:47 +0000
asID:                     138886
IP address blocks:        103.189.120.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl
                          rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:66:90:76:79:e1:7f:7b:9e:92:49:9f:ef:d5:b1:52:04:d0:8d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE
        Validity
            Not Before: Oct  4 08:56:47 2023 GMT
            Not After : Oct  2 09:01:47 2024 GMT
        Subject: CN=62C909DF26653BDB4A6DC423550A7D231918F101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:17:e2:eb:4b:71:e7:fe:0e:c7:cf:84:12:
                    9c:75:1c:22:58:b1:51:c2:5b:cb:0b:ac:57:dd:a5:
                    b5:08:4f:2b:04:74:a8:a7:a2:b2:1f:3f:0d:31:fc:
                    f0:f0:98:9e:80:63:c8:65:45:69:5d:0c:fd:83:cc:
                    57:a5:19:c1:22:90:21:64:c1:2b:35:84:5d:5f:95:
                    a7:df:96:b1:ad:00:c7:11:90:80:01:6e:64:c5:bf:
                    f3:11:75:56:7e:d5:28:c7:35:d5:ab:b1:c9:54:bb:
                    ab:09:aa:69:b1:fa:75:e1:bf:71:96:a7:3d:d3:29:
                    43:7c:0f:16:c4:ff:86:4f:74:61:cb:f6:85:ed:aa:
                    f7:46:93:16:8c:0c:51:21:f6:11:90:35:cf:cc:1b:
                    c6:55:d2:6d:8d:e2:de:2a:d3:0a:05:d3:50:28:7c:
                    06:19:31:37:10:56:ea:f0:e2:3a:75:f7:5f:cf:58:
                    47:bc:16:ba:7a:e4:d0:26:f2:9d:ec:58:3b:5f:b6:
                    cd:45:ef:ce:80:7b:ae:35:0a:fd:3d:ed:40:7d:16:
                    96:47:4c:d6:d7:77:d7:c8:2f:8e:40:e0:2a:d5:67:
                    b8:a3:2c:bd:f4:ea:4f:c1:23:e9:cd:cd:04:4a:0b:
                    62:fa:fa:af:34:cb:80:59:b0:0d:3d:08:0f:d5:d2:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C9:09:DF:26:65:3B:DB:4A:6D:C4:23:55:0A:7D:23:19:18:F1:01
            X509v3 Authority Key Identifier:
                keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:38:dd:36:41:c1:27:66:63:16:e0:0c:ee:43:5a:29:a6:
         90:e0:01:d1:25:5c:33:f2:b7:18:c3:e7:fa:8b:82:d8:30:4d:
         1a:e9:ab:4d:a7:2d:0b:84:e8:55:41:fa:3e:7f:47:a1:cd:73:
         d6:1e:63:de:cc:38:1e:6f:a1:6c:62:17:0c:df:55:a5:48:9c:
         29:91:2b:e8:2a:cf:83:ff:b0:80:7f:0b:b1:ea:27:08:df:98:
         36:62:ba:7b:14:22:15:07:06:06:05:5f:d5:2e:6a:d1:58:d1:
         73:6d:8c:61:db:1c:ef:0b:23:d0:8d:35:80:e3:8c:34:d7:b3:
         45:26:7e:c2:c4:a3:5c:91:37:53:db:af:62:ef:27:03:5b:30:
         1e:7d:a5:01:f2:d2:87:34:0f:5b:cb:b1:c4:cb:e1:f5:db:aa:
         60:67:59:ba:ef:76:69:2a:8e:68:93:69:84:02:d1:c4:94:8b:
         6c:a2:25:c8:52:4f:02:4b:28:d8:be:2e:eb:58:78:f2:7f:17:
         2f:9b:10:31:0b:74:1a:88:6b:bf:d3:61:09:00:0b:e3:fd:df:
         e3:81:f8:ee:25:de:52:66:ef:2e:1e:20:38:22:be:31:70:b2:
         d2:5b:55:9c:5a:ba:eb:8c:15:ab:73:09:d0:9a:4d:4e:c0:ef:
         f5:66:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 14:35:01 2024 by rpki-client on console-fra.rpki-client.org