Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa
File:                     3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa (raw, json)
Hash identifier:          vGpl8V1e9xjX3gK4bAkO4MflBoHwIw4joWbSJsRIkWE=
Subject key identifier:   3C:46:C4:79:69:BE:85:CD:99:B2:49:3F:82:81:91:03:6B:CE:75:01
Certificate issuer:       /CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
Certificate serial:       32A3BD65E3D6ECF999C02BC88BDB6707BEDFE4D7
Authority key identifier: 9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa
Signing time:             Mon 31 Jul 2023 00:06:29 +0000
ROA not before:           Mon 31 Jul 2023 00:01:29 +0000
ROA not after:            Mon 29 Jul 2024 00:06:29 +0000
asID:                     132637
IP address blocks:        103.143.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl
                          rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a3:bd:65:e3:d6:ec:f9:99:c0:2b:c8:8b:db:67:07:be:df:e4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EA3AB422D824FDD9A25622F84924203216B1ED1
        Validity
            Not Before: Jul 31 00:01:29 2023 GMT
            Not After : Jul 29 00:06:29 2024 GMT
        Subject: CN=3C46C47969BE85CD99B2493F828191036BCE7501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:d1:22:94:f1:35:83:4e:e2:8f:c4:b6:b4:
                    06:90:d2:65:9b:be:87:c3:94:5d:9d:e2:b8:02:b4:
                    c9:bb:fb:46:fa:fd:11:e8:cf:94:62:5c:b0:36:a6:
                    07:56:6a:4d:32:b2:d3:5c:34:60:76:ea:04:b6:d0:
                    f3:62:6a:80:06:19:ff:75:d5:dd:e8:6c:22:b7:5f:
                    c1:af:04:ba:45:e2:41:65:c1:fb:a2:03:07:c1:f7:
                    49:f3:43:8c:c6:d7:ec:88:98:3b:92:63:b3:e4:27:
                    95:36:42:09:0d:46:20:85:1f:ee:96:68:5f:9b:78:
                    86:0a:24:60:3e:35:8d:9c:14:36:34:01:85:94:66:
                    8c:07:2c:4a:2f:54:b5:e2:0a:5f:4c:0f:f4:58:a8:
                    62:2b:ac:4e:8a:b0:b9:0d:85:60:4b:c1:ba:df:60:
                    dd:2c:78:be:9d:4c:71:b0:99:8d:e4:83:02:d8:85:
                    8d:26:b2:96:fe:99:5e:0a:f1:9f:ea:40:8e:3a:97:
                    ee:4b:d4:1e:f1:ef:67:f0:79:f7:b0:a8:7b:4d:c9:
                    e8:fb:ea:5f:fc:c9:07:68:b6:a7:69:5b:56:5d:4a:
                    9e:75:fa:ab:c7:f5:4d:ae:50:54:c5:d6:59:f3:38:
                    08:e1:e6:6e:b6:9b:3e:d7:36:a0:ae:6f:ca:53:72:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:C4:79:69:BE:85:CD:99:B2:49:3F:82:81:91:03:6B:CE:75:01
            X509v3 Authority Key Identifier:
                keyid:9E:A3:AB:42:2D:82:4F:DD:9A:25:62:2F:84:92:42:03:21:6B:1E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/9EA3AB422D824FDD9A25622F84924203216B1ED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EA3AB422D824FDD9A25622F84924203216B1ED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf6d5582-9a63-41e5-8969-db919277a5e5/0/3130332e3134332e3234352e302f32342d3234203d3e20313332363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c9:79:09:82:76:d8:bf:a6:1e:09:80:a4:44:9e:d8:dd:e7:
         1a:db:20:d4:41:82:3b:64:7f:a1:5c:01:9a:5d:5a:99:e5:89:
         2f:c4:ef:1e:c8:9a:de:85:e4:e8:0c:04:20:84:a6:fd:24:50:
         3c:e9:6f:22:15:c0:58:b6:cd:bd:c9:71:97:01:a9:ee:eb:50:
         31:ca:4e:0c:51:36:0a:a3:8b:1b:3a:cd:f4:37:60:c6:0b:77:
         9f:20:05:6f:6b:e3:d4:53:51:4a:3f:94:79:23:49:9c:6f:22:
         d8:2d:39:ef:d8:80:ac:82:33:48:41:97:22:c1:5d:3b:c2:98:
         ff:5a:60:c5:ff:95:85:7e:9a:6e:c4:84:17:23:b4:6f:55:0c:
         dc:a6:3a:5e:2a:a6:ad:f0:0e:04:f6:50:dc:42:b6:19:6f:2a:
         f2:7d:78:16:8f:ce:3d:ab:f8:ec:9c:7e:96:b0:65:76:0f:20:
         96:7e:b3:2e:86:46:5d:c8:6c:7f:bf:44:44:ea:ec:eb:00:bb:
         d8:47:62:aa:78:6c:78:e7:b3:1c:7e:01:9e:66:bb:e4:21:71:
         fd:8f:68:a8:5c:e8:65:a5:91:d6:ad:9d:50:7e:c7:03:84:0d:
         7f:67:10:70:96:9e:8d:de:4d:62:9e:30:8d:36:40:af:9f:e2:
         41:ef:43:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:50:56 2024 by rpki-client on console-ams.rpki-client.org