Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          bgwOzvgwDnc9ezV4Ont6t+9ZL+lOmgTEDPxux2zorVE=
Subject key identifier:   5F:E5:0A:7D:68:94:59:3E:DB:82:6E:12:34:78:BF:CC:DD:2F:C3:79
Certificate issuer:       /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Certificate serial:       73F2D1C37A15358C8C167679FB7ADD9B52FA7ABE
Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
Signing time:             Wed 18 Sep 2024 09:00:37 +0000
ROA not before:           Wed 18 Sep 2024 08:55:37 +0000
ROA not after:            Wed 17 Sep 2025 09:00:37 +0000
asID:                     131111
IP address blocks:        103.177.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl
                          rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:d1:c3:7a:15:35:8c:8c:16:76:79:fb:7a:dd:9b:52:fa:7a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
        Validity
            Not Before: Sep 18 08:55:37 2024 GMT
            Not After : Sep 17 09:00:37 2025 GMT
        Subject: CN=5FE50A7D6894593EDB826E123478BFCCDD2FC379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:35:26:f6:69:4a:77:c8:4b:eb:c2:78:94:
                    84:eb:89:03:de:76:2c:51:2f:c6:e7:b7:e0:da:8c:
                    0a:0c:42:69:7f:97:c9:cb:49:39:8b:0d:1c:45:68:
                    22:b1:69:6a:b3:46:aa:7c:c8:b3:cc:0a:af:b8:2a:
                    fe:79:35:d2:b6:f4:c1:a0:ee:a9:01:d1:80:1a:d7:
                    98:ee:e5:06:02:2e:de:a7:c4:dd:e0:7f:55:59:60:
                    46:e3:a5:75:25:4c:71:22:1c:30:75:73:d3:1c:fa:
                    cd:e8:d8:f7:2c:d7:e3:86:57:eb:a5:6c:bd:15:e0:
                    a1:95:97:38:95:23:5a:6d:c7:c0:9a:78:01:c1:84:
                    61:1e:d8:fc:ca:de:01:00:ed:86:1e:19:8b:73:53:
                    55:91:3d:46:57:48:bf:13:12:2d:8e:24:37:05:df:
                    9c:56:94:37:01:62:07:62:fa:82:f4:c0:65:ba:98:
                    ab:c2:76:00:a1:4a:88:65:c3:71:ce:eb:ca:fc:d6:
                    c1:0d:92:fa:a4:5d:bf:55:d0:ee:48:98:e8:d3:5d:
                    f7:6b:c6:6a:58:3b:91:37:ac:41:27:10:6f:01:7a:
                    af:c2:0c:20:f4:57:fb:b7:17:f8:3a:5d:b4:1d:8d:
                    b2:c9:bd:9b:1b:cf:30:29:02:c6:56:0b:2a:b4:f1:
                    89:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:0A:7D:68:94:59:3E:DB:82:6E:12:34:78:BF:CC:DD:2F:C3:79
            X509v3 Authority Key Identifier:
                keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:15:1d:c3:63:0a:8b:b0:b9:17:3a:3f:fa:cb:92:eb:1e:7d:
         7d:93:a7:06:8d:bf:c1:72:cf:58:50:44:e6:77:36:8f:c3:de:
         e7:05:2d:6c:96:65:07:20:e8:d7:2f:af:18:98:3d:58:10:28:
         e4:a6:42:7d:29:3c:86:7c:5a:29:c9:9b:04:1a:cc:7a:9b:80:
         7a:1c:a9:c9:91:8b:a8:e6:09:f7:82:60:d6:dd:60:6e:e2:16:
         19:fe:01:6b:74:dc:40:3a:56:b1:3d:29:f5:b1:89:85:cc:d9:
         10:30:e9:13:6b:f0:02:71:b4:a3:0b:41:03:4c:de:37:87:de:
         0d:3f:67:40:08:95:f5:03:e4:d1:5e:6d:cf:30:9a:5f:22:63:
         65:5e:37:d7:c1:02:c8:46:3e:95:df:41:8e:37:bd:cc:82:e9:
         c2:80:1f:40:b3:ee:1b:0c:5a:76:6a:62:4e:9f:9e:fd:ef:7d:
         70:c6:56:21:38:66:54:cd:ed:c5:8f:97:68:56:a5:7d:60:26:
         21:59:56:f2:92:c5:bb:fc:be:3a:cc:6b:60:dd:1c:b3:6c:be:
         ec:f3:73:3a:da:bf:07:3a:27:0b:1d:a6:f5:c2:4d:c5:81:fb:
         d8:01:89:43:17:89:c0:b6:fe:c3:a1:cf:09:2b:48:c3:3a:84:
         c7:a2:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org