Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (raw, json)
Hash identifier:          X0ZViTLo6gLoiZWyKI9b9TcYlyOZhugYNAG2ECv+AUY=
Subject key identifier:   C1:61:92:60:26:AD:FE:EF:B5:D5:69:DB:45:33:3E:E6:C0:A9:1A:AC
Certificate issuer:       /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
Certificate serial:       2AF68809C46DDC1C275451126481AE01AED74CCC
Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa
Signing time:             Mon 31 Jul 2023 00:08:02 +0000
ROA not before:           Mon 31 Jul 2023 00:03:02 +0000
ROA not after:            Mon 29 Jul 2024 00:08:02 +0000
asID:                     139378
IP address blocks:        103.142.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl
                          rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:88:09:c4:6d:dc:1c:27:54:51:12:64:81:ae:01:ae:d7:4c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
        Validity
            Not Before: Jul 31 00:03:02 2023 GMT
            Not After : Jul 29 00:08:02 2024 GMT
        Subject: CN=C161926026ADFEEFB5D569DB45333EE6C0A91AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:a4:a6:44:9b:13:70:a8:64:50:fb:b0:d3:
                    4b:86:38:b1:cf:e7:60:2b:0d:69:8c:68:16:99:21:
                    11:e6:6d:04:aa:85:32:2b:0a:bf:ab:63:b7:4d:d4:
                    06:58:84:53:ce:d7:22:61:94:f6:44:1b:99:44:0d:
                    21:34:e6:23:c9:03:8f:93:c0:1a:bc:2f:97:f5:56:
                    1b:e2:de:f6:c9:8e:99:1f:b3:8e:4b:a7:17:3d:78:
                    97:67:ed:12:91:05:4a:13:15:94:b2:e1:4f:aa:31:
                    16:ac:14:19:db:7b:b0:f2:6b:bc:ae:90:10:47:99:
                    4c:f1:24:06:9c:e4:3d:4a:2e:3a:c0:13:a0:af:13:
                    0b:e2:1b:4d:9d:4a:d1:4e:c5:ba:66:00:01:15:1e:
                    e0:12:d6:1d:7c:ff:df:fd:bc:69:d1:d5:db:4e:96:
                    d2:73:5f:25:a4:c7:ae:38:24:8c:ea:c4:e6:8a:5d:
                    50:22:2e:e2:f6:9f:27:8f:82:48:d5:3c:7b:24:1f:
                    28:09:9c:08:82:68:99:89:90:90:3a:d9:91:e6:2f:
                    b6:87:a3:d5:ef:05:5d:d2:7a:c1:a3:ff:6c:cd:e9:
                    21:91:16:73:f9:2f:ab:e8:21:b2:29:d1:de:37:99:
                    d1:8a:b9:df:5a:df:29:1f:fb:c4:9d:43:25:21:14:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:61:92:60:26:AD:FE:EF:B5:D5:69:DB:45:33:3E:E6:C0:A9:1A:AC
            X509v3 Authority Key Identifier:
                keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:68:0e:54:15:80:81:80:cd:77:d9:26:e9:ed:cf:18:73:f2:
         43:99:45:b7:df:f0:bf:2d:84:e9:fb:8b:0b:0a:ea:22:91:3f:
         64:9c:61:c1:b4:8b:4e:e8:52:79:a4:06:3a:cd:28:29:8c:18:
         9d:89:4f:cd:1a:df:4c:c5:5d:19:c1:3f:f3:12:9a:a6:12:a6:
         03:41:69:f5:2f:df:f6:79:e1:5d:b9:49:7b:bc:18:7d:df:cf:
         00:9b:bd:a4:1e:90:d3:d0:16:24:0f:41:77:bc:04:b6:19:e6:
         84:25:5a:a9:b8:71:0d:eb:f7:7f:1d:79:76:07:74:32:ab:d1:
         fb:62:ed:73:31:2c:bb:4b:11:cc:e4:58:d1:35:b5:df:83:76:
         61:ca:c6:a2:32:1e:ab:d9:03:49:23:7f:35:57:f9:c5:04:f0:
         fe:29:7c:2f:63:fe:7a:a4:39:88:68:f0:52:b2:73:a6:c1:fd:
         ce:f8:75:fd:b4:26:6b:b6:c9:08:d0:8a:bb:e8:10:5f:44:8c:
         11:69:9a:fd:11:f7:3e:38:77:7a:ed:9a:63:4e:d6:26:10:82:
         03:67:73:4a:c4:b3:ff:49:96:6d:92:2a:ad:5f:a2:ee:83:d0:
         b3:e3:18:39:aa:c9:1a:7f:e5:50:36:1a:ad:31:b9:15:2f:05:
         54:f3:77:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org