Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e302e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          ReaZM/wG+kzc6OyzjBDEVA9AdEGquuSyBTyYopgOZt8=
Subject key identifier:   DE:05:A6:D3:41:0D:BA:BB:08:0E:0B:AC:3E:90:71:AA:85:71:F1:B2
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       598289B48EB70517DDEC3BCB2F3FB1A97FFE027C
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa
Signing time:             Wed 27 Mar 2024 17:00:02 +0000
ROA not before:           Wed 27 Mar 2024 16:55:02 +0000
ROA not after:            Wed 26 Mar 2025 17:00:02 +0000
asID:                     135445
IP address blocks:        103.223.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
                          rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:82:89:b4:8e:b7:05:17:dd:ec:3b:cb:2f:3f:b1:a9:7f:fe:02:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Mar 27 16:55:02 2024 GMT
            Not After : Mar 26 17:00:02 2025 GMT
        Subject: CN=DE05A6D3410DBABB080E0BAC3E9071AA8571F1B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:41:16:f5:15:ed:a5:71:d4:35:99:06:08:
                    bc:f5:d0:8d:85:f7:3c:b0:12:c3:9a:34:2a:03:a1:
                    57:2e:97:d0:23:e8:87:48:33:17:e7:88:3e:ab:72:
                    96:77:1d:21:f4:1b:cd:59:63:b2:3a:11:d4:07:63:
                    42:3f:7b:f8:ec:63:83:a0:f2:56:5c:d7:a9:de:08:
                    45:42:84:50:4e:fd:4e:70:e1:78:f5:7a:c2:2a:b2:
                    65:ca:c9:28:d7:dd:81:d8:72:e7:96:60:e9:a7:6b:
                    c6:9b:a9:0e:c9:21:7b:ca:aa:04:82:6c:02:11:64:
                    5a:16:3d:b4:1a:93:49:83:91:d5:d0:e7:ec:90:88:
                    8e:21:1e:ef:f3:32:a1:25:d4:dd:74:b2:71:cf:91:
                    b6:7f:97:69:84:a2:6d:4f:91:ee:9f:34:04:0c:49:
                    93:ed:42:db:d4:aa:67:29:f5:56:3c:d9:a5:b6:79:
                    77:07:97:e6:7c:f6:a1:f0:13:ec:fe:c5:b4:42:8a:
                    3c:48:79:92:7e:fb:f6:84:78:8c:ea:f8:24:05:9d:
                    c4:38:f7:0a:1e:41:e4:a9:62:ad:d9:61:b4:ef:c1:
                    0c:1e:20:50:0b:30:18:df:b7:f0:27:c6:52:c7:52:
                    9e:47:f2:89:27:4f:04:c2:78:5f:8a:7b:97:87:c1:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:A6:D3:41:0D:BA:BB:08:0E:0B:AC:3E:90:71:AA:85:71:F1:B2
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e302e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:57:bf:bb:74:0b:61:e7:53:e0:23:a0:3e:9d:8a:f3:d9:8a:
         95:4a:b8:b4:79:a5:59:f3:68:3c:19:32:ab:81:e8:ae:41:f8:
         f1:89:0d:ec:f8:38:5f:07:62:86:75:03:9a:c4:ec:d3:79:dd:
         b4:1c:63:d5:fe:97:14:70:c1:03:2f:c0:88:09:62:bd:04:97:
         b4:21:2d:4b:0e:a9:35:0c:75:5f:35:2e:43:9f:2a:bb:f8:cc:
         d9:b4:1c:7b:03:84:a4:f8:ce:bf:0d:04:e4:c8:56:c2:da:28:
         65:18:c1:c2:b6:9e:f8:be:ee:fa:06:2d:94:1c:5e:06:67:45:
         71:cb:8b:20:a2:d3:18:55:9d:fe:47:32:a0:88:61:b9:a3:2a:
         ae:1e:1c:c3:53:f8:4b:f3:99:28:6f:16:ae:39:98:57:20:b6:
         07:0b:be:38:35:31:3a:98:49:18:85:3a:51:af:63:f1:2a:31:
         f1:db:fd:15:d2:93:1b:d1:68:92:63:ae:77:c1:fe:34:5b:26:
         98:b1:78:2f:bd:7b:34:05:bf:92:b0:a6:6a:4e:fb:07:79:96:
         b2:3a:2b:c7:0c:9b:3e:ae:2c:af:6f:f1:48:07:19:52:4f:88:
         bc:9b:82:59:00:18:55:dc:86:a9:4a:b8:ac:c7:50:ff:e9:0e:
         60:57:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:51 2024 by rpki-client on console-ams.rpki-client.org