Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa
File:                     3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa (raw, json)
Hash identifier:          jLSp4p2yjvZfmcAzHq4w5SjqAQaDqXxcPP68LSzwhzk=
Subject key identifier:   37:8E:51:91:35:27:9C:60:41:46:C3:07:17:BB:F8:9A:AC:49:C9:E2
Certificate issuer:       /CN=7D9756BA26383A8A80C65F2856105B0FF5154379
Certificate serial:       699271EF956787E728AB313379ED246C8ABB711A
Authority key identifier: 7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa
Signing time:             Tue 31 Oct 2023 04:01:16 +0000
ROA not before:           Tue 31 Oct 2023 03:56:16 +0000
ROA not after:            Tue 29 Oct 2024 04:01:16 +0000
asID:                     17769
IP address blocks:        103.147.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl
                          rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:92:71:ef:95:67:87:e7:28:ab:31:33:79:ed:24:6c:8a:bb:71:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D9756BA26383A8A80C65F2856105B0FF5154379
        Validity
            Not Before: Oct 31 03:56:16 2023 GMT
            Not After : Oct 29 04:01:16 2024 GMT
        Subject: CN=378E519135279C604146C30717BBF89AAC49C9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:2a:73:35:7d:fe:6d:7f:48:02:6e:c5:c0:
                    b9:76:f2:ae:b8:b8:22:34:15:37:00:9b:54:41:b8:
                    47:1d:9e:f9:1f:6f:16:e9:a8:82:0c:aa:91:28:f2:
                    d6:ed:c4:2c:20:c1:10:61:9a:6c:da:9f:bc:25:21:
                    eb:1e:4a:1a:7e:5d:37:df:cd:ef:85:a3:8e:23:23:
                    e0:bb:fa:19:2f:2a:5d:9d:82:a6:4d:c5:3b:f6:da:
                    c5:81:40:38:93:a9:eb:d8:b4:43:3e:ca:81:a1:a8:
                    82:5a:41:a3:52:c9:5c:72:0e:fe:cd:bb:3b:13:29:
                    ad:46:d5:66:78:72:40:ee:d5:ac:61:9d:2e:61:21:
                    5f:84:91:ae:3d:29:6d:d4:18:a2:55:b7:3a:89:15:
                    07:fe:30:49:98:db:4e:a7:12:3f:29:1c:b5:df:e1:
                    9c:a9:e4:89:e1:40:9c:9e:19:fb:cf:62:f7:36:d8:
                    16:05:04:4d:c6:55:57:f4:2f:ee:96:82:12:ce:5e:
                    01:73:ac:63:ae:cc:5a:c4:5f:5a:aa:3c:ae:72:d0:
                    6e:fc:b7:31:7e:fb:7a:1e:24:41:00:06:d6:51:83:
                    54:a0:e6:ef:e7:b5:1e:55:fc:95:0a:ba:2d:2d:55:
                    4b:e9:b3:c3:5c:60:c2:31:9e:c7:0c:9a:a5:32:d0:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8E:51:91:35:27:9C:60:41:46:C3:07:17:BB:F8:9A:AC:49:C9:E2
            X509v3 Authority Key Identifier:
                keyid:7D:97:56:BA:26:38:3A:8A:80:C6:5F:28:56:10:5B:0F:F5:15:43:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/7D9756BA26383A8A80C65F2856105B0FF5154379.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9756BA26383A8A80C65F2856105B0FF5154379.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac714122-860c-414e-a67a-684a1be960de/0/3130332e3134372e3134302e302f32332d3234203d3e203137373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:60:87:2e:3e:52:b3:cb:75:95:ce:c3:18:8f:b6:ef:91:
         7d:5f:c6:be:30:7f:02:b4:24:e7:6a:1e:a1:f3:fc:fa:3a:37:
         c4:58:c8:3d:7d:eb:32:f7:7d:28:d6:e2:8f:5c:64:f4:9a:b3:
         6c:c7:08:23:f4:71:e4:53:61:86:cb:41:06:97:d2:6f:bd:ad:
         64:b0:b1:04:a8:d2:a0:cd:5f:58:88:20:eb:82:75:1b:62:76:
         77:8c:3c:a1:32:19:bb:fe:79:28:06:e9:bf:05:c1:7b:f0:1f:
         69:d5:14:9f:b7:9c:6f:42:77:1a:86:d5:20:33:a0:c0:51:25:
         a2:13:ce:71:2c:8c:99:b6:ba:ae:6d:0c:e2:d9:d6:b3:32:04:
         1d:d6:e7:d1:4c:cf:d6:3c:ef:e3:8b:c7:50:02:ad:6d:66:26:
         ab:ca:ef:21:30:e4:eb:5b:bf:15:4f:56:a4:68:6b:bc:6c:1f:
         09:f6:d0:e7:61:f5:1f:0c:1b:f7:de:48:4d:24:9f:2b:a8:94:
         13:5c:5b:ed:82:a4:62:b3:ac:6f:65:42:a0:c1:d9:41:4b:49:
         ce:b2:2a:5c:f7:12:38:e9:f7:90:2b:48:db:95:ad:46:1d:60:
         4e:72:51:74:9f:31:0b:4f:ea:0a:c5:37:c5:8e:85:4e:93:95:
         cd:80:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:14 2024 by rpki-client on console-ams.rpki-client.org