Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
File:                     3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (raw, json)
Hash identifier:          dEuhA94eyLsp7PwdJpwDaUGmzQPRafA8+NMcPdHwpEo=
Subject key identifier:   BA:C9:C8:C1:1F:04:7F:A2:D9:5F:AA:D1:61:A5:6D:A4:8B:E9:F1:DF
Certificate issuer:       /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D
Certificate serial:       41CF54D561ED6FD764CAA3368955BF66A6D24F95
Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa
Signing time:             Fri 25 Aug 2023 07:00:00 +0000
ROA not before:           Fri 25 Aug 2023 06:55:00 +0000
ROA not after:            Fri 23 Aug 2024 07:00:00 +0000
asID:                     136862
IP address blocks:        103.102.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl
                          rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cf:54:d5:61:ed:6f:d7:64:ca:a3:36:89:55:bf:66:a6:d2:4f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D
        Validity
            Not Before: Aug 25 06:55:00 2023 GMT
            Not After : Aug 23 07:00:00 2024 GMT
        Subject: CN=BAC9C8C11F047FA2D95FAAD161A56DA48BE9F1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e1:81:5d:d3:a7:9e:3c:ae:32:e3:58:40:bf:
                    fb:c5:38:9d:8d:20:1b:41:22:60:b4:76:ad:40:48:
                    cf:d6:24:53:a3:57:41:6f:42:ca:ef:4e:23:1a:1b:
                    4d:f2:b7:6a:80:fa:48:f4:77:8d:9f:91:cf:19:e9:
                    db:8b:2e:7c:25:98:93:65:5f:c6:27:60:18:0c:99:
                    de:96:d9:09:db:23:46:f4:c1:f4:1b:62:b9:19:11:
                    25:77:ee:ab:79:89:ca:20:ad:ae:0b:bb:1b:bf:50:
                    60:75:33:72:1a:f1:65:b8:4f:27:29:36:cb:02:7c:
                    f6:94:91:1e:9c:45:9b:fe:99:2d:4d:85:84:a0:26:
                    97:16:0d:02:2b:86:05:9e:ee:e9:52:de:77:8b:0a:
                    1f:c0:f2:77:68:ce:ec:f0:be:c1:38:94:81:d2:0b:
                    7e:1c:51:ce:1c:1e:7c:24:4d:91:a9:9c:2c:9c:fe:
                    ce:18:11:7b:bc:4c:8c:bc:bb:fd:0d:4b:03:71:74:
                    4b:25:36:d9:99:b1:c9:4a:ed:1e:45:a1:a4:c6:4f:
                    6c:1c:51:7b:15:70:70:0c:eb:ab:e2:72:21:5b:33:
                    9c:e0:58:db:f5:2d:b1:71:2b:ef:c9:a9:73:29:39:
                    53:64:bb:8a:25:50:45:9b:3a:4d:bc:d1:41:55:2b:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C9:C8:C1:1F:04:7F:A2:D9:5F:AA:D1:61:A5:6D:A4:8B:E9:F1:DF
            X509v3 Authority Key Identifier:
                keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:19:dd:c9:ef:d9:21:2f:40:1d:e3:a7:71:dd:27:2d:3a:63:
         98:55:c9:d6:b3:c0:e8:be:cb:6f:8e:18:f8:96:85:af:10:46:
         71:ff:cc:67:57:7f:c5:69:40:30:ae:e6:29:03:df:2f:67:7b:
         f9:0c:30:0e:b9:b9:94:07:55:96:f8:64:4b:7c:3a:23:f3:47:
         f0:dd:59:ec:38:6a:57:f1:79:57:c3:68:b2:9e:40:e3:9b:44:
         46:29:e6:b1:89:23:36:1c:87:d1:b3:0f:22:89:67:cd:d3:f8:
         2d:40:af:4c:c7:4e:57:df:49:c0:47:71:44:7e:c2:69:30:5f:
         f1:b3:a9:b6:ec:ad:bd:c3:87:fd:30:87:d7:f7:a3:d2:fc:10:
         89:fe:cb:a4:c3:a5:e3:e6:df:cc:b6:13:91:6d:9e:6d:a9:2b:
         9d:80:22:94:98:d0:6a:09:f5:5a:43:48:c1:96:3f:bd:ef:cb:
         2a:ab:fd:c9:44:b2:e6:90:18:d1:5d:37:55:ea:93:ae:f8:ce:
         8e:d2:8a:c1:2b:62:3e:e6:9e:da:e1:b6:b3:0f:fd:9d:67:c3:
         6e:b6:48:e9:51:ef:98:73:cb:01:29:98:45:eb:32:35:82:f5:
         06:bc:3f:0d:4f:9e:c0:22:79:b7:aa:21:33:5f:7f:3e:4a:13:
         6a:93:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 04:19:51 2024 by rpki-client on console-fra.rpki-client.org