Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
File:                     3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (raw, json)
Hash identifier:          /h2ooj97okLRbG64oxpX50CMxq6SPep2HGeG0logDLo=
Subject key identifier:   55:C3:FA:E7:C2:BC:2D:15:EE:11:5A:64:96:3D:53:8A:80:AC:A3:AC
Certificate issuer:       /CN=285218D0288125F1010B5469F03888B08A661969
Certificate serial:       191917C876CCF9D490841B09740BC56B50478564
Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa
Signing time:             Mon 31 Jul 2023 00:02:21 +0000
ROA not before:           Sun 30 Jul 2023 23:57:21 +0000
ROA not after:            Mon 29 Jul 2024 00:02:21 +0000
asID:                     139440
IP address blocks:        103.145.66.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl
                          rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 12:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:19:17:c8:76:cc:f9:d4:90:84:1b:09:74:0b:c5:6b:50:47:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285218D0288125F1010B5469F03888B08A661969
        Validity
            Not Before: Jul 30 23:57:21 2023 GMT
            Not After : Jul 29 00:02:21 2024 GMT
        Subject: CN=55C3FAE7C2BC2D15EE115A64963D538A80ACA3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d6:78:1f:f8:98:28:e8:9c:8c:75:00:35:5a:
                    97:4d:94:cc:3d:d7:7e:0d:b6:cd:5c:a2:fa:77:f5:
                    7d:09:35:48:e0:86:57:10:71:c2:cf:72:e7:85:2f:
                    1c:ea:fa:ff:a5:c8:38:04:d6:79:f3:2a:eb:a9:a4:
                    de:cf:41:d0:c0:cc:73:8d:92:8e:7b:72:2b:48:69:
                    72:46:4e:9a:9e:50:7c:bb:2d:f2:b4:67:bc:b3:50:
                    d7:1b:38:71:3f:a5:ab:0f:f6:53:1b:7e:74:8f:02:
                    ef:ff:91:06:5d:b1:a5:89:ba:e0:ef:9c:9a:94:9a:
                    88:a2:c2:f8:bb:db:b6:c2:cc:f3:3c:2a:ae:8c:93:
                    0a:c3:f1:48:fb:ed:85:f5:5b:2f:98:2b:37:91:c8:
                    d4:e6:14:7d:c7:89:86:05:a5:d2:ca:d9:e6:ad:95:
                    9e:dd:47:17:27:fe:ca:df:9a:86:0c:1a:01:dc:3b:
                    34:8f:61:a0:43:c9:36:48:b7:91:92:ff:0c:1d:e7:
                    ef:f8:8a:0a:52:dd:e9:47:0e:a9:fd:bc:f6:4a:af:
                    19:2f:aa:f9:d1:86:39:2b:08:30:52:44:1d:ad:11:
                    a3:15:db:11:8f:31:9a:72:89:5f:7b:a9:f5:c8:cb:
                    91:d7:e6:7e:ba:5e:d6:be:3f:6c:7b:65:d0:b9:95:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C3:FA:E7:C2:BC:2D:15:EE:11:5A:64:96:3D:53:8A:80:AC:A3:AC
            X509v3 Authority Key Identifier:
                keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:e3:78:77:8f:96:2d:d0:d9:28:aa:5b:5a:ac:9c:22:d0:ad:
         f6:9c:eb:4c:4d:3d:2e:db:96:c6:91:c4:3e:2d:e7:b8:ce:40:
         8f:cc:1c:2f:6e:a0:88:2c:20:65:21:d8:f3:2d:ed:ff:88:bd:
         2a:7f:ea:e0:ee:b8:5b:58:69:82:c2:7b:bb:bf:2c:5e:fb:3a:
         00:94:fa:9c:df:8a:42:b8:34:2a:13:7b:a1:4a:43:7f:82:8b:
         ed:66:aa:66:2b:da:5e:5b:ab:1f:05:83:de:29:92:9e:3d:95:
         63:d8:6f:f2:af:ec:a9:56:79:57:24:b7:ea:69:0d:99:60:30:
         99:ce:8a:20:bc:7e:f1:b7:67:ad:80:0a:d0:3c:14:3e:ba:d1:
         73:06:e7:91:68:ce:f2:7e:a8:e0:39:a1:6f:17:29:ed:5c:48:
         17:58:07:02:6c:54:b8:85:e2:d8:aa:42:36:f2:d1:08:49:04:
         f3:b7:61:86:7a:a7:e9:34:d7:46:19:c3:c3:f8:41:b4:a9:db:
         83:6c:4c:d7:cb:5f:3e:2a:98:1a:b0:df:59:cf:db:92:b4:e7:
         74:2b:dd:e7:6d:e9:13:0a:16:f9:cc:fc:e7:60:6a:2c:2e:3c:
         6e:21:88:d0:79:94:d3:d2:12:a1:a2:ee:7d:50:3f:a8:e1:56:
         8f:30:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 07:24:10 2024 by rpki-client on console-fra.rpki-client.org