Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
File:                     3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa (raw, json)
Hash identifier:          5/TJ7VQfhrdMfSr98Z021KpGJOmHcofo5VBlcn0Vivs=
Subject key identifier:   31:4F:BF:45:6A:5C:DD:F2:EE:35:37:2C:08:DF:08:3E:A8:73:BC:09
Certificate issuer:       /CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
Certificate serial:       0C80D385D8A902ECB2E3480A45182A1E51107097
Authority key identifier: 31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa
Signing time:             Wed 15 Nov 2023 07:01:09 +0000
ROA not before:           Wed 15 Nov 2023 06:56:09 +0000
ROA not after:            Wed 13 Nov 2024 07:01:09 +0000
asID:                     141642
IP address blocks:        103.162.62.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl
                          rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 16:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:80:d3:85:d8:a9:02:ec:b2:e3:48:0a:45:18:2a:1e:51:10:70:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316B0D7815A87F5AA07EC9E0D8FC859AC1A76794
        Validity
            Not Before: Nov 15 06:56:09 2023 GMT
            Not After : Nov 13 07:01:09 2024 GMT
        Subject: CN=314FBF456A5CDDF2EE35372C08DF083EA873BC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:b3:38:2f:a8:bf:5b:81:9b:c0:e1:fc:84:
                    80:93:2e:c7:14:f3:57:46:99:59:3f:de:32:7d:d1:
                    0c:b9:c5:e9:07:db:0d:36:6f:2f:70:1f:62:72:61:
                    66:12:10:19:a5:b4:dc:2e:e1:2c:7a:b8:1d:83:09:
                    b3:79:03:87:80:24:10:a2:25:40:04:92:96:3d:d2:
                    66:a1:9d:7c:e7:28:64:f6:1e:44:65:2f:60:e7:f1:
                    c5:db:7c:6b:04:08:17:28:b1:4a:ff:1c:95:f3:33:
                    56:70:c3:d9:bd:ed:28:67:1f:ea:07:ff:36:fd:6e:
                    94:06:7d:d8:b1:30:fc:89:90:b7:e7:f7:d8:38:e3:
                    95:44:dc:bb:e3:36:0a:16:38:59:00:85:79:22:0c:
                    d9:ba:16:94:ef:4d:a2:76:b0:d4:56:ed:b4:c8:56:
                    e6:f0:e8:68:56:24:bd:53:71:63:02:a6:3c:31:a5:
                    ee:8e:44:dd:6e:37:0f:5e:bc:62:2a:99:63:30:39:
                    b5:51:eb:fe:84:50:60:73:21:ed:97:9b:2b:4f:5d:
                    7d:d1:3f:ad:00:50:5f:2f:1d:1a:32:2e:b2:b4:29:
                    01:f2:90:14:b3:d6:ae:6a:02:91:3c:81:6c:99:3c:
                    d7:29:e2:26:50:c1:34:29:4c:fc:5c:6e:10:94:d3:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4F:BF:45:6A:5C:DD:F2:EE:35:37:2C:08:DF:08:3E:A8:73:BC:09
            X509v3 Authority Key Identifier:
                keyid:31:6B:0D:78:15:A8:7F:5A:A0:7E:C9:E0:D8:FC:85:9A:C1:A7:67:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/316B0D7815A87F5AA07EC9E0D8FC859AC1A76794.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ca9435-7224-47a8-951b-c1b42eb0e2f7/0/3130332e3136322e36322e302f32332d3234203d3e20313431363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:07:1d:33:a8:78:34:49:10:54:a9:26:89:d2:6e:77:22:
         c6:4b:23:98:3f:7d:d3:af:12:e2:24:b0:bf:4b:67:2d:f9:15:
         ed:88:d2:9e:1c:1f:31:c5:14:3f:b5:2b:d1:4a:68:2d:4e:e1:
         06:42:e1:c2:5b:ba:4c:be:26:93:1c:c4:df:f1:be:2f:52:68:
         e3:d9:d8:03:e6:20:c7:df:d8:4d:23:2c:5e:59:23:28:b9:b3:
         6d:fa:50:64:c7:08:2b:23:72:bd:e1:e6:3b:bb:31:b2:e7:07:
         78:f6:51:11:46:0c:6e:eb:65:80:1a:0f:d9:54:f1:98:0f:bd:
         78:b3:c2:e8:e3:63:0d:2d:33:25:46:92:d5:5e:e3:fc:64:94:
         24:66:49:fd:06:38:90:7e:bf:35:09:e8:03:aa:8b:e2:f7:6b:
         06:1a:17:de:5c:9d:ae:e3:17:3a:09:54:d5:89:0d:6b:fc:ac:
         02:5d:f9:6b:42:fe:11:7d:40:c0:bb:06:db:4d:bd:7e:2b:a0:
         02:2c:66:f7:16:19:37:42:89:24:69:58:87:3f:7b:9e:d5:38:
         97:a6:af:a8:5d:0f:75:20:84:43:c9:23:45:ef:9d:2d:4d:f2:
         52:32:45:ee:00:16:65:b0:52:87:6e:08:24:31:c5:47:3c:19:
         46:9b:2d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 16:38:18 2024 by rpki-client on console-ams.rpki-client.org