Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
File:                     3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          Rrg6EJ0QPNLRekRBI+MF39OQ1CW8hSJEI88A9TK9uk8=
Subject key identifier:   FF:63:AB:FA:FC:5B:E2:4F:65:F3:8C:16:E4:9B:EE:33:04:49:BD:FA
Certificate issuer:       /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
Certificate serial:       5C4C3742CB694C42D5778903CB3D1D194A2D69CC
Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
Signing time:             Thu 16 Nov 2023 14:00:00 +0000
ROA not before:           Thu 16 Nov 2023 13:55:00 +0000
ROA not after:            Thu 14 Nov 2024 14:00:00 +0000
asID:                     150265
IP address blocks:        103.90.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl
                          rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4c:37:42:cb:69:4c:42:d5:77:89:03:cb:3d:1d:19:4a:2d:69:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E
        Validity
            Not Before: Nov 16 13:55:00 2023 GMT
            Not After : Nov 14 14:00:00 2024 GMT
        Subject: CN=FF63ABFAFC5BE24F65F38C16E49BEE330449BDFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:60:eb:4e:66:a2:10:5b:cf:78:e8:34:39:0f:
                    17:9b:3a:a4:6d:86:c6:3c:9a:28:2b:43:c0:3a:d1:
                    9b:ab:21:ed:0a:fe:c9:c5:fd:9a:1a:b0:80:92:4a:
                    6c:c8:80:3c:59:f7:f9:1b:e7:76:86:b1:48:73:46:
                    4f:18:ba:7b:12:0f:db:bd:ed:41:28:62:97:80:aa:
                    b7:cc:b2:e6:19:80:d1:49:e0:6a:3f:e8:f1:54:50:
                    2e:99:b4:22:f8:10:0b:b5:e2:4a:48:ab:b9:30:39:
                    5f:d8:1c:1f:1d:99:8f:94:f1:c8:91:61:c7:b8:06:
                    08:5e:3e:bc:5d:a3:ff:68:5d:22:f6:6e:9b:5b:4e:
                    02:40:ac:14:64:80:39:83:f2:15:36:7d:9d:a0:72:
                    54:f7:04:85:54:51:4d:81:8b:b4:18:01:47:fe:e1:
                    a1:c6:e5:42:1c:49:c4:ec:85:6b:09:91:55:49:62:
                    37:3b:90:69:55:69:e9:89:59:ab:7d:be:90:f2:b1:
                    bb:d3:29:54:7a:aa:4f:06:0c:17:71:91:0d:eb:9a:
                    e9:19:bf:f2:34:92:03:b1:48:a9:b6:a0:7d:4a:04:
                    1d:b3:47:0c:a8:b6:33:c7:39:dd:a6:2f:62:a6:6a:
                    b4:e9:0e:04:e0:2f:5b:27:08:ad:8f:04:2f:5a:66:
                    61:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:63:AB:FA:FC:5B:E2:4F:65:F3:8C:16:E4:9B:EE:33:04:49:BD:FA
            X509v3 Authority Key Identifier:
                keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:5e:9a:9d:33:a4:65:93:3e:a7:3c:a1:1d:98:99:26:d9:
         7d:a2:03:9e:95:e1:a9:31:31:a1:4d:ab:7e:a6:70:2b:fc:c2:
         f2:2c:18:9a:2d:31:f9:76:d4:83:e1:33:7a:3f:1d:e2:9a:c8:
         27:c4:b3:3a:00:51:e1:ef:06:66:f5:ad:f7:c3:12:5a:b4:e9:
         a0:5d:e1:3a:91:a5:38:1b:18:0f:26:5a:10:fe:a5:8a:3a:9e:
         7a:73:ac:b6:b8:09:a4:51:d7:e0:a8:51:7d:35:7b:32:28:e0:
         32:f9:aa:04:50:59:ee:e9:8b:15:5f:ba:e2:da:56:3c:56:d6:
         1d:3b:96:ec:86:6b:83:c7:c7:91:ba:e1:94:50:5d:79:17:f5:
         a5:b3:34:08:9a:a4:11:ca:bb:6b:46:8d:17:f1:f2:35:f7:35:
         80:63:bd:d2:d2:4d:41:e6:1e:b7:03:9c:0f:e0:75:f6:02:6f:
         11:37:56:81:5f:7c:bd:9d:1d:03:6f:14:1c:7a:61:20:26:be:
         15:f9:a5:c3:df:22:47:09:26:26:c3:35:b6:ca:f3:68:d1:b5:
         d1:1f:5f:19:6c:c3:41:55:e1:94:6b:12:e9:14:74:5a:49:4f:
         87:87:e5:13:64:50:78:97:25:d0:b2:d4:bf:a3:3a:d4:4c:66:
         4e:72:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org