Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa
File:                     3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa (raw, json)
Hash identifier:          hgjKR7Hz7u5k/X/0jr7ILv/rQayOJXQIsR58s+ivCqA=
Subject key identifier:   BD:42:5C:6A:C2:BC:E9:62:71:A8:CD:15:3C:76:16:9E:4C:03:88:BE
Certificate issuer:       /CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
Certificate serial:       6A7303CD7EF57163C3C4EC5426037D812D9B86BC
Authority key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa
Signing time:             Mon 31 Jul 2023 00:08:36 +0000
ROA not before:           Mon 31 Jul 2023 00:03:36 +0000
ROA not after:            Mon 29 Jul 2024 00:08:36 +0000
asID:                     139400
IP address blocks:        103.143.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl
                          rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:29:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:03:cd:7e:f5:71:63:c3:c4:ec:54:26:03:7d:81:2d:9b:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98
        Validity
            Not Before: Jul 31 00:03:36 2023 GMT
            Not After : Jul 29 00:08:36 2024 GMT
        Subject: CN=BD425C6AC2BCE96271A8CD153C76169E4C0388BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9e:f1:56:7f:24:81:a6:7e:6f:77:50:39:c3:
                    4e:2f:91:aa:93:5b:d3:0e:7b:4e:21:26:6b:4b:a8:
                    3c:18:db:db:a0:7c:1c:7c:53:1a:09:93:73:e3:f6:
                    fd:57:2b:75:4f:41:dd:26:e9:c8:2d:3a:e7:a4:54:
                    e2:40:30:e4:c1:29:58:bd:e9:74:f4:08:2c:3f:97:
                    9f:00:33:f7:63:df:12:7c:a4:17:42:a1:35:db:b6:
                    d8:fe:f7:29:57:84:1c:bd:c4:a7:a0:df:48:af:66:
                    75:fd:b0:cb:30:c7:74:40:ec:d5:70:ed:81:43:a3:
                    6a:92:5e:85:dd:01:e3:89:12:6f:a7:45:be:7c:da:
                    e6:a8:a9:21:26:02:91:e1:ae:b6:25:d5:9a:83:7b:
                    1b:d3:e1:af:0f:36:c1:1d:4d:47:fb:49:3d:6d:f7:
                    02:5f:be:78:bf:82:7b:86:a8:84:76:42:46:23:bc:
                    17:44:7e:33:d7:fa:c7:31:6f:7c:eb:d3:0d:93:6c:
                    ea:6f:30:13:8d:2b:2e:1d:b1:88:8a:5e:60:4d:1f:
                    9d:37:2d:06:21:e1:18:ce:38:88:56:60:0a:96:88:
                    ef:cb:10:5c:91:2b:26:d8:ac:30:5e:c8:d0:4f:a2:
                    1d:6c:29:0b:51:1d:63:c3:e3:a8:39:c6:0b:1f:35:
                    b9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:42:5C:6A:C2:BC:E9:62:71:A8:CD:15:3C:76:16:9E:4C:03:88:BE
            X509v3 Authority Key Identifier:
                keyid:F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/3130332e3134332e3137312e302f32342d3234203d3e20313339343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:8b:1d:5e:58:69:fd:95:94:08:b5:21:7d:44:e2:6a:38:a7:
         9c:67:1f:5a:9b:9b:ab:4b:07:f3:27:01:c4:1d:07:f2:d0:97:
         98:69:37:0a:5c:f5:b8:1d:c5:30:a7:2c:47:4d:69:42:67:e3:
         48:c9:23:6c:8a:86:45:bc:dd:2f:22:10:af:22:d7:4e:e9:08:
         15:17:4f:22:7f:bb:13:7e:1d:c9:3e:54:8b:7c:c9:94:fe:9c:
         89:1d:ee:1e:43:89:9f:73:7c:6c:1b:31:e7:f5:a8:44:61:df:
         34:52:ff:d7:2e:a3:43:8e:67:18:99:a4:3b:fc:6a:c8:60:f5:
         04:69:af:81:03:fc:51:27:b0:fb:0c:f2:9a:59:ce:9b:ab:b6:
         f6:8e:1f:82:3a:aa:94:db:5c:79:eb:18:93:65:0f:78:6f:e3:
         c1:5f:ec:db:da:2f:3b:58:62:d9:ca:9d:84:e2:2f:b7:81:5d:
         c9:8a:a2:e8:fe:80:49:62:f0:1d:71:c4:7c:80:84:aa:17:09:
         08:c2:40:b5:58:0e:a4:25:18:a4:74:03:2d:c4:f7:47:7f:86:
         d8:9e:b9:3b:02:4b:16:c9:3c:f9:85:0c:ee:89:2d:fe:fd:9e:
         e6:59:a7:ec:05:b3:95:02:80:bf:86:85:3b:2f:ac:02:49:16:
         f8:8b:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org