Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa
File:                     3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          XoikOPxOsmeZc/GQgU6kJOUCuncwYNz24meYk9eksxU=
Subject key identifier:   35:D2:E3:68:86:B7:45:CE:02:66:C9:A6:6A:E7:18:3A:20:78:DD:5E
Certificate issuer:       /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial:       3D6A7D2BAAADF9123677F6F1D627AF34DCF180B3
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa
Signing time:             Sun 10 Nov 2024 12:47:25 +0000
ROA not before:           Sun 10 Nov 2024 12:42:25 +0000
ROA not after:            Sun 09 Nov 2025 12:47:25 +0000
asID:                     141107
IP address blocks:        103.143.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
                          rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6a:7d:2b:aa:ad:f9:12:36:77:f6:f1:d6:27:af:34:dc:f1:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
        Validity
            Not Before: Nov 10 12:42:25 2024 GMT
            Not After : Nov  9 12:47:25 2025 GMT
        Subject: CN=35D2E36886B745CE0266C9A66AE7183A2078DD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:3c:ee:f5:25:42:6e:0c:31:ec:ca:83:04:
                    52:87:be:2e:55:f2:e6:d4:21:ae:45:f8:36:fd:8a:
                    25:25:9a:db:8f:34:24:44:a0:e6:1d:22:86:73:00:
                    75:3c:08:9e:ce:90:07:2c:58:f1:e6:47:c0:19:57:
                    c7:10:33:71:08:61:6d:c4:85:ef:4c:d4:0f:13:eb:
                    6e:b4:3f:3b:1f:f7:7c:31:43:dc:1c:8a:30:fd:55:
                    8d:07:dc:6b:88:c3:08:98:5f:26:a9:cd:ae:30:91:
                    ad:93:30:a4:f5:28:e7:e2:53:6d:a1:f6:93:9a:60:
                    ee:d2:4b:ef:b8:db:23:86:53:25:4e:67:7b:7d:06:
                    3f:34:64:2c:66:0d:de:47:89:89:62:53:a0:82:aa:
                    51:51:36:13:c6:58:1e:cd:27:83:32:74:be:fe:e9:
                    0c:70:6f:e5:04:fa:af:2f:a8:0d:48:0f:d3:b4:dc:
                    19:23:f5:c5:f8:fe:5a:66:ec:50:21:4a:7d:d9:59:
                    38:17:b6:fb:86:df:b4:cb:f8:4f:8f:86:90:e5:fa:
                    c2:7f:e1:b6:e0:6c:9f:78:88:6d:54:32:98:55:29:
                    52:26:41:40:ae:1f:45:86:a7:bd:ed:55:fe:fa:08:
                    3c:66:31:98:6f:01:d4:93:b0:6f:4a:d6:58:6f:9f:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:E3:68:86:B7:45:CE:02:66:C9:A6:6A:E7:18:3A:20:78:DD:5E
            X509v3 Authority Key Identifier:
                keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137302e302f32332d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:f6:40:c1:f8:30:e5:aa:54:97:ff:d4:5a:4f:0a:65:ce:
         76:9c:52:e9:3c:0d:a3:74:34:a5:26:95:3b:e1:ee:5f:dc:24:
         7e:2d:f2:68:25:68:60:dd:0b:77:7b:c0:e7:70:d9:3b:54:35:
         68:12:1d:7a:3f:10:7e:bb:f1:aa:63:a8:27:2f:66:36:e0:5e:
         06:d6:cd:ed:75:6d:b0:da:3e:c2:ab:65:1e:ac:7a:99:39:07:
         93:69:0e:f8:58:ce:ff:f5:6c:d8:36:1d:75:29:c4:33:22:52:
         91:b8:75:a9:68:2f:7d:3f:ec:3c:c5:ae:78:83:c1:ff:0f:b3:
         70:20:65:99:5c:ef:d2:7e:fd:26:ea:57:6d:be:ee:71:a3:4f:
         57:14:dd:7d:29:0c:21:03:5b:e3:13:80:cb:d7:df:11:12:59:
         cc:ce:31:d7:a4:ac:87:b5:d8:93:61:30:57:6a:05:24:d1:fa:
         06:7d:f5:50:a0:0e:61:c6:ee:7d:c1:08:7c:90:9c:ca:19:35:
         13:fb:ec:38:f5:08:82:91:0c:72:ac:e3:3c:0e:aa:97:00:c0:
         91:ef:60:42:01:16:25:85:88:b8:7a:81:a9:f6:4f:d9:4b:d6:
         36:a4:82:bf:68:cf:43:af:dd:42:3b:eb:13:c0:ef:6c:47:5c:
         df:21:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:40 2024 by rpki-client on console-fra.rpki-client.org