Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
File:                     3130332e3232332e312e302f32342d3234203d3e20313335343435.roa (raw, json)
Hash identifier:          yueaDIdMgdVJQfC7s3ObNgdlTXND+G3gYO+jBsQUCqk=
Subject key identifier:   D0:47:66:C2:4F:A9:5F:F4:E8:BB:87:E0:DC:D1:38:59:58:93:60:94
Certificate issuer:       /CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
Certificate serial:       5AC6094C5AE1427ECD85CD2128BB07F4C55C31F1
Authority key identifier: 6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa
Signing time:             Wed 27 Mar 2024 17:00:02 +0000
ROA not before:           Wed 27 Mar 2024 16:55:02 +0000
ROA not after:            Wed 26 Mar 2025 17:00:02 +0000
asID:                     135445
IP address blocks:        103.223.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl
                          rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:09:4c:5a:e1:42:7e:cd:85:cd:21:28:bb:07:f4:c5:5c:31:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B
        Validity
            Not Before: Mar 27 16:55:02 2024 GMT
            Not After : Mar 26 17:00:02 2025 GMT
        Subject: CN=D04766C24FA95FF4E8BB87E0DCD1385958936094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:03:f6:74:3f:e7:b0:d2:e5:c8:47:75:52:86:
                    ab:e2:ec:96:0d:ad:a7:e8:aa:70:1e:01:ee:04:cc:
                    e5:c8:5e:06:71:2a:d8:04:d6:0b:f9:6c:66:0c:28:
                    d9:16:bc:36:c2:10:06:1c:c3:96:b5:2b:ab:94:61:
                    41:d9:62:a3:f9:ab:7d:45:27:e4:17:b8:4c:97:e5:
                    2f:a4:e6:c7:48:56:a5:5a:5d:73:5f:11:50:cd:05:
                    69:f2:57:ba:d4:57:ec:37:69:2b:d3:75:ff:d4:dd:
                    77:32:6b:d4:56:d9:8f:70:cb:e8:bb:09:13:88:1d:
                    9d:9c:47:99:8d:4a:94:f9:f0:7a:5c:89:b4:74:63:
                    27:ad:34:9c:52:d0:0e:7d:d5:28:5b:60:82:2d:9e:
                    5d:59:35:b7:31:61:8c:21:cc:51:e2:b9:29:9e:f9:
                    c5:39:28:cf:70:7d:aa:7c:7c:83:2c:67:9c:96:eb:
                    2c:b5:cd:ae:9d:88:7e:87:c7:94:4f:4c:af:d4:00:
                    83:dc:5a:c8:0a:ba:ae:7a:b4:04:78:bd:66:e9:c8:
                    87:d9:d3:b3:28:39:f8:c7:ca:c5:03:35:4e:22:6c:
                    44:d5:ca:7c:db:6f:d4:69:12:15:a3:8e:ff:92:bc:
                    3f:63:21:4c:d1:59:7f:71:79:e8:26:fc:1e:64:96:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:66:C2:4F:A9:5F:F4:E8:BB:87:E0:DC:D1:38:59:58:93:60:94
            X509v3 Authority Key Identifier:
                keyid:6B:4D:14:FC:6D:37:4A:FC:CA:B1:90:C5:4D:DF:3A:1A:9D:4D:93:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B4D14FC6D374AFCCAB190C54DDF3A1A9D4D930B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7545b85-9274-470a-ad27-2469e9d155bc/0/3130332e3232332e312e302f32342d3234203d3e20313335343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:25:af:ca:01:68:b1:ed:59:65:cc:90:d8:93:66:e1:f4:3a:
         4d:a8:19:0c:96:88:11:1d:0a:15:12:4f:7c:b8:e1:52:35:6a:
         4e:2f:1f:d8:2f:9b:f4:f0:8a:69:f7:a1:25:3c:61:f0:d6:25:
         9a:40:37:1c:09:3e:8a:a3:8e:5e:d8:22:c5:a4:36:75:5e:ee:
         5b:ae:54:f9:1d:96:c1:1b:40:17:fd:f7:24:d5:82:91:e2:76:
         1c:d8:f0:3e:da:e3:39:f2:22:0d:50:d8:48:d0:3e:84:27:8a:
         0a:e1:db:0a:b0:76:58:22:f0:6c:06:bf:51:25:d0:a0:37:6f:
         32:f5:a8:ac:f5:5f:fd:ba:43:d8:b5:0e:4d:ff:5f:fe:d3:d0:
         40:18:2a:1e:25:e1:70:cf:58:5c:5d:92:13:68:0c:54:59:df:
         7b:db:cc:13:18:53:cb:7e:6f:91:9b:03:51:b6:af:e4:f6:44:
         4f:19:8d:21:e8:66:fa:8a:07:51:92:ed:c9:ed:df:88:55:b0:
         e4:fb:29:3b:55:44:6c:89:c3:00:79:5d:25:2b:b3:70:f5:d1:
         ee:6d:7f:ae:bd:c0:8c:76:6f:f8:52:fd:d4:96:ff:a2:0e:7a:
         b5:a7:6c:03:80:fd:b4:34:b6:f4:d9:73:16:06:43:7f:85:65:
         ee:29:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:51 2024 by rpki-client on console-ams.rpki-client.org