Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa
File:                     3130332e32332e39382e302f32332d3233203d3e20313530323435.roa (raw, json)
Hash identifier:          smQtB5AYLm8ME58pDVamx7We9n4xCq6C6EbvAkJjzYM=
Subject key identifier:   66:A6:C2:1D:92:4D:6E:C8:16:41:D2:90:24:25:73:E9:D6:68:3F:2A
Certificate issuer:       /CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
Certificate serial:       6D01BDCE04D41EBE0959DE8C57721B32519ABD13
Authority key identifier: B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa
Signing time:             Sat 16 Mar 2024 07:00:01 +0000
ROA not before:           Sat 16 Mar 2024 06:55:01 +0000
ROA not after:            Sat 15 Mar 2025 07:00:01 +0000
asID:                     150245
IP address blocks:        103.23.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl
                          rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:01:bd:ce:04:d4:1e:be:09:59:de:8c:57:72:1b:32:51:9a:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2B2F42BF1978AD094186480A7DA0086FD7C2919
        Validity
            Not Before: Mar 16 06:55:01 2024 GMT
            Not After : Mar 15 07:00:01 2025 GMT
        Subject: CN=66A6C21D924D6EC81641D290242573E9D6683F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:17:23:d3:6b:56:2a:85:8f:6f:f4:e1:35:
                    f1:25:21:6d:68:f8:5a:21:3f:e9:2a:72:17:41:1c:
                    ec:dc:be:2a:f8:ce:d7:71:0e:bf:5b:66:65:3f:6e:
                    b2:e5:97:be:b1:b3:5a:66:9e:ff:0a:58:90:e9:f6:
                    3a:64:a0:37:fe:5c:76:3a:15:4c:39:29:68:42:4a:
                    16:25:bd:cc:96:51:d6:56:b5:04:4c:80:b5:8a:dc:
                    7c:60:d2:64:18:07:5f:0d:5f:66:64:a6:74:01:ed:
                    dc:60:b4:8f:eb:27:75:62:5e:f0:fe:49:a6:fe:b6:
                    97:3e:3d:f2:d8:88:81:84:71:e5:51:70:3f:4d:2e:
                    b4:b2:96:df:5b:a4:e7:39:aa:07:9e:e1:ee:38:c0:
                    0e:da:1b:47:e0:6e:c8:9f:27:9d:77:a3:77:cc:1c:
                    2f:8a:c0:34:58:3f:86:21:74:09:db:f6:4d:69:f5:
                    12:21:2f:74:cc:8f:76:62:77:0b:b0:3c:5e:82:95:
                    ec:04:43:fd:80:d4:0c:2f:5e:c0:24:af:5b:3d:55:
                    bc:ed:a0:ce:c1:e4:cc:c1:de:3a:56:89:47:8a:71:
                    ab:9d:cc:f8:67:da:ef:16:21:f5:ca:d4:ff:91:33:
                    c6:c6:14:0a:65:d8:f6:91:ba:99:ba:1d:3c:f0:e5:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A6:C2:1D:92:4D:6E:C8:16:41:D2:90:24:25:73:E9:D6:68:3F:2A
            X509v3 Authority Key Identifier:
                keyid:B2:B2:F4:2B:F1:97:8A:D0:94:18:64:80:A7:DA:00:86:FD:7C:29:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/B2B2F42BF1978AD094186480A7DA0086FD7C2919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2B2F42BF1978AD094186480A7DA0086FD7C2919.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c846f422-c302-4462-b584-700e9346ca09/0/3130332e32332e39382e302f32332d3233203d3e20313530323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:94:fa:a7:e3:cc:a0:23:f2:af:f6:5c:34:56:ec:71:2b:
         a0:bf:a2:4d:79:2c:db:4c:7b:25:76:4d:0d:01:ae:cd:ce:d2:
         f5:6d:dc:e2:61:5c:5a:9e:26:46:5d:95:fb:fa:7f:a2:d8:25:
         e3:3f:88:c1:bd:91:37:21:83:39:00:c6:4c:78:ad:c2:83:e9:
         26:89:1a:db:46:26:27:d3:e9:02:0e:17:df:2b:22:ee:b7:e1:
         5d:81:7c:96:a5:52:dc:fe:c6:ea:be:73:ce:b9:9c:8a:21:b6:
         2d:17:a9:8e:1a:44:42:6c:07:20:52:83:ef:12:cf:1f:7b:72:
         33:13:dd:02:cb:1f:46:34:45:f3:af:fa:d8:13:1c:83:e6:63:
         0f:29:6f:cd:cd:50:db:08:ec:3a:6c:13:16:2a:6a:f1:6d:1e:
         07:a2:af:70:f7:83:e7:13:8a:4f:fe:bf:ba:1a:d1:ee:05:26:
         28:04:b1:15:5b:d2:49:67:9b:d8:55:de:2c:24:ea:eb:6b:a9:
         b3:ce:50:d1:fd:fa:6f:3f:f6:a5:31:98:65:3d:4d:b2:8f:2d:
         ec:90:f4:c9:e4:dd:bb:77:01:6c:eb:1b:ce:e2:63:64:04:1c:
         1f:79:c6:c2:db:78:25:fa:22:45:87:27:b4:fe:6c:19:12:45:
         2d:da:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:29 2024 by rpki-client on console-fra.rpki-client.org