Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa
File:                     3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (raw, json)
Hash identifier:          LkrFwqOPpzs5zV0cqzRbshMZbX2t2BtkJfrTGNSvUxE=
Subject key identifier:   8B:59:93:21:E6:4C:6F:12:4E:19:AD:C8:4A:F5:47:01:F3:07:06:58
Certificate issuer:       /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8
Certificate serial:       70FC00C333129DE2A22773A97F58478944CABF76
Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa
Signing time:             Tue 16 Jul 2024 04:42:37 +0000
ROA not before:           Tue 16 Jul 2024 04:37:37 +0000
ROA not after:            Tue 15 Jul 2025 04:42:37 +0000
asID:                     139374
IP address blocks:        103.142.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl
                          rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fc:00:c3:33:12:9d:e2:a2:27:73:a9:7f:58:47:89:44:ca:bf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8
        Validity
            Not Before: Jul 16 04:37:37 2024 GMT
            Not After : Jul 15 04:42:37 2025 GMT
        Subject: CN=8B599321E64C6F124E19ADC84AF54701F3070658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:97:b8:eb:a7:41:6c:0d:1c:43:9e:d6:93:98:
                    19:0f:4a:53:d4:5c:d3:9a:09:41:f3:07:87:7d:7c:
                    9d:37:69:0f:41:0e:1e:cc:5f:72:b7:16:df:24:bc:
                    51:65:18:de:21:de:74:08:5b:84:e4:b3:0c:9d:2b:
                    60:8c:e5:07:9a:ee:e5:a1:d4:38:22:46:ea:df:c3:
                    d2:a9:6c:d3:66:b5:bb:48:d7:a5:80:58:50:96:c6:
                    a5:a6:25:7a:b1:f4:e7:82:0b:20:e8:30:b3:12:66:
                    e6:75:09:9e:e1:85:ba:70:61:74:04:cc:1e:36:57:
                    e9:6c:c3:19:ba:04:8b:56:2c:fe:3b:34:4c:ef:e8:
                    5a:a6:13:3c:c0:2f:17:3d:b8:79:0f:80:24:75:8b:
                    c5:61:40:5e:59:f3:96:8f:8c:b3:aa:f4:b9:15:c8:
                    90:cb:47:1c:d5:55:c4:01:b8:41:2f:82:fa:f9:b2:
                    ec:0b:94:56:6d:16:9a:7f:5c:32:77:b8:f6:22:2d:
                    a7:ab:3f:d2:42:f8:15:0a:18:d7:89:a7:ea:9d:10:
                    a4:2e:f6:22:f1:21:d8:03:aa:4d:c9:f0:92:45:b4:
                    bc:90:2e:a5:fb:40:11:e8:dd:5c:5f:6a:41:6e:64:
                    04:21:33:67:f2:54:f6:34:6d:09:00:ba:de:97:40:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:59:93:21:E6:4C:6F:12:4E:19:AD:C8:4A:F5:47:01:F3:07:06:58
            X509v3 Authority Key Identifier:
                keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e8:43:9f:ea:26:20:d3:68:3a:d3:64:52:48:e9:dc:0d:f0:87:
         de:ee:3a:e3:a4:62:35:98:2f:21:28:29:a2:d9:50:52:d9:5d:
         63:62:3a:9a:41:1a:48:cd:69:7b:40:49:14:ad:87:86:a8:78:
         65:47:6a:bb:39:b8:ce:a3:59:19:fb:d8:13:43:30:86:87:03:
         7a:94:2b:db:a5:83:84:d7:be:dd:3f:b4:cb:14:80:f4:f3:49:
         ef:96:47:4e:f5:48:20:b0:a8:4b:88:e1:b0:55:c2:9a:39:e4:
         85:08:18:6e:c0:48:e1:4d:8f:ae:68:e8:aa:45:05:30:fa:07:
         f1:c5:1e:eb:63:60:ff:6e:4d:0a:16:4b:8d:00:ac:b0:20:7a:
         7b:02:2f:69:9c:bb:a4:6c:9f:a4:7e:dc:7f:2c:a5:a8:43:00:
         94:64:e9:be:bb:65:c8:cb:9e:d1:21:5a:44:aa:14:c9:97:e3:
         90:1a:2e:c8:7a:52:16:a3:d0:44:34:bd:da:2f:59:76:93:9b:
         bf:78:19:50:fb:89:90:a1:4f:22:89:54:52:e8:22:d4:b8:e0:
         3b:fb:a0:28:8e:dd:83:fb:fb:e7:dd:93:c2:12:1d:fe:7f:e2:
         7e:d6:02:3a:28:97:fe:73:a5:3d:00:12:e0:3a:60:19:70:2a:
         ca:d0:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org