Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
File:                     3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          m+1lPbv0ucPPhFKRoPs8l2UUin/SIPy8A9Dy/Kew8es=
Subject key identifier:   01:05:C7:A4:E7:D3:F3:23:27:4D:07:33:31:5E:21:74:80:9D:16:1B
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       7732432F12EDD03ED3DAE53F61C19511CEA50FBA
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa
Signing time:             Thu 07 Dec 2023 08:56:12 +0000
ROA not before:           Thu 07 Dec 2023 08:51:12 +0000
ROA not after:            Thu 05 Dec 2024 08:56:12 +0000
asID:                     142360
IP address blocks:        103.247.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:32:43:2f:12:ed:d0:3e:d3:da:e5:3f:61:c1:95:11:ce:a5:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Dec  7 08:51:12 2023 GMT
            Not After : Dec  5 08:56:12 2024 GMT
        Subject: CN=0105C7A4E7D3F323274D0733315E2174809D161B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:65:9c:ed:a1:bc:b0:4a:9c:22:76:44:d1:
                    cd:f3:c2:a3:e8:fc:25:6a:b5:fa:39:d4:49:58:76:
                    39:c5:7f:d5:e5:0d:6d:00:c8:3f:62:46:0b:0a:11:
                    90:4d:40:7b:ce:5e:2b:07:86:f2:50:17:c5:8c:ba:
                    2d:bb:ee:a6:ba:6e:d7:d7:5f:14:f3:6a:8b:0f:dc:
                    16:c9:25:14:0c:59:51:98:8a:33:87:dd:61:f2:8d:
                    b1:e8:cb:12:fd:6b:29:4b:95:ff:45:e2:4c:65:cc:
                    6f:6d:dc:5f:90:ce:35:26:fe:d0:74:fc:2b:9c:5c:
                    94:83:ab:04:d7:45:75:13:4e:48:9d:98:1c:87:2a:
                    0a:01:63:d9:a7:b8:69:be:cb:93:30:40:ab:63:16:
                    a1:eb:40:0a:e1:8a:34:ef:34:f2:8b:c1:2f:e2:46:
                    31:5b:5d:63:45:76:c0:6f:84:05:4c:16:16:d8:8d:
                    7d:d6:63:9a:93:74:1c:31:80:e9:ee:23:60:e0:4d:
                    04:51:68:6b:b2:ee:98:ae:d4:ee:33:ac:1c:9d:3c:
                    6b:1c:68:57:99:75:e8:4d:ed:b6:5c:da:d7:8c:19:
                    65:93:5d:d7:c2:b9:57:d8:72:fe:c7:43:fc:85:31:
                    fc:eb:04:61:c8:b8:0b:b5:fc:0a:93:4c:24:9c:1a:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:05:C7:A4:E7:D3:F3:23:27:4D:07:33:31:5E:21:74:80:9D:16:1B
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e3234372e3132322e302f32342d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:94:e6:6d:6f:0a:79:4b:a1:c6:83:b4:c1:b8:f6:35:11:76:
         4a:bd:d0:28:25:12:f2:68:d2:5e:f1:15:99:21:20:8e:36:72:
         b2:fa:26:7a:65:2d:13:3e:ee:75:a9:fb:94:21:c5:08:8c:38:
         9c:b3:73:e3:09:2c:3f:85:0d:b3:aa:d7:4b:97:5d:30:13:fe:
         9e:74:39:fd:cf:c3:b0:da:c8:2d:5a:9e:21:28:d7:a7:42:1a:
         9b:56:fc:29:10:c5:7e:68:a9:43:f0:79:d7:b9:43:f8:00:86:
         8c:a0:b4:84:0e:8b:d7:36:76:46:5e:5d:86:7f:45:2a:59:9d:
         26:6c:66:4d:e1:44:e4:ef:3b:e6:43:e7:28:84:b1:95:c2:63:
         43:a0:6d:e7:38:aa:81:16:4d:35:74:b7:b9:44:ce:6c:74:ac:
         ec:60:c4:c4:df:63:7a:71:8e:c5:13:25:00:4d:23:d6:c1:f4:
         fd:5f:aa:6e:3e:7f:2f:75:24:40:53:b0:f2:53:36:bd:1e:21:
         7a:23:01:f8:10:25:00:e6:6e:7a:3f:1d:ef:98:f2:d3:7b:82:
         32:9f:11:50:9c:56:ef:96:dd:62:1c:63:d4:eb:b0:f0:40:e8:
         c2:06:e4:5d:76:a0:e9:da:65:ef:6d:8c:30:7e:e8:a2:f1:88:
         78:84:fb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:49:47 2024 by rpki-client on console-fra.rpki-client.org