Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3233203d3e20313439333734.roa
File:                     3130332e3138302e3132362e302f32332d3233203d3e20313439333734.roa (raw, json)
Hash identifier:          anSh19476/1j6QuEGS51frdZcd6wbq3L66zeB5O/pxM=
Subject key identifier:   CD:8B:C3:72:B9:5B:95:08:05:E0:94:D4:7C:E4:0C:A2:98:8A:4F:48
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       20FB2A393A5FDF4AE7731752272B7018EB888630
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3233203d3e20313439333734.roa
Signing time:             Fri 29 Mar 2024 04:07:05 +0000
ROA not before:           Fri 29 Mar 2024 04:02:05 +0000
ROA not after:            Fri 28 Mar 2025 04:07:05 +0000
asID:                     149374
IP address blocks:        103.180.126.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl
                          rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:2a:39:3a:5f:df:4a:e7:73:17:52:27:2b:70:18:eb:88:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Mar 29 04:02:05 2024 GMT
            Not After : Mar 28 04:07:05 2025 GMT
        Subject: CN=CD8BC372B95B950805E094D47CE40CA2988A4F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:1d:d9:aa:7a:2c:33:fe:bc:a1:a6:e8:c1:
                    5e:15:bf:24:eb:07:15:dc:55:17:28:ad:fa:0c:c3:
                    4a:db:36:ec:47:85:ae:54:e8:b2:6a:84:2c:37:15:
                    ce:f2:c3:a9:41:04:ee:9d:cd:03:78:5d:1c:2a:6b:
                    04:7c:88:c9:0e:6f:e1:cc:65:c5:8f:ae:2c:35:9e:
                    25:44:25:4e:fe:d8:cd:c1:e3:40:e8:88:29:b7:98:
                    d3:de:18:0e:5e:8c:c3:2a:ca:48:2c:22:e7:d5:f4:
                    b4:83:46:3c:8b:4b:4b:26:0e:40:9b:11:ce:e6:a8:
                    ec:4e:52:b3:e5:56:88:85:13:d7:58:79:1f:ab:ef:
                    45:cc:79:e7:7a:24:f0:74:5a:fa:38:26:85:74:25:
                    26:7c:08:57:04:3d:48:f1:04:05:15:f2:53:79:7a:
                    ed:c8:35:1e:c8:20:85:c7:56:ab:c8:2f:7c:23:20:
                    d0:7c:f2:e4:3e:b0:df:e8:f4:38:5b:04:82:a8:71:
                    14:26:bd:cd:38:2f:b6:43:7b:38:34:a9:ac:69:e3:
                    66:69:ad:6f:f9:2a:ea:30:8e:bf:d4:b9:f0:d5:56:
                    d7:10:e1:71:5a:04:95:d5:54:c1:0f:89:ad:9e:d7:
                    b9:97:5b:7b:71:36:26:f8:6d:4b:1e:c8:63:45:64:
                    a5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8B:C3:72:B9:5B:95:08:05:E0:94:D4:7C:E4:0C:A2:98:8A:4F:48
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3233203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:4b:7e:7f:25:90:65:2a:f0:7b:b4:d9:7f:66:c5:90:71:
         e4:a8:ec:78:5e:cd:c2:7f:b8:8c:ce:e0:a0:05:45:ab:7d:55:
         40:e4:4f:61:a9:dd:b7:11:6b:50:35:5f:97:98:1d:e2:c9:57:
         c7:09:f4:bf:10:a0:d4:d0:94:a7:d8:c7:12:fa:54:4b:c3:7c:
         18:26:cc:04:22:2d:6a:88:95:ae:4b:a3:a3:c6:9a:b6:61:2c:
         2a:6e:05:84:2f:36:6c:47:a5:82:89:9b:17:f1:b9:a2:72:3e:
         18:bf:b7:44:08:2c:f9:d3:c7:be:9e:5f:3d:eb:3d:1c:48:a3:
         99:b5:a7:9d:5c:ed:93:ae:ce:3e:16:22:28:09:45:9c:f4:bf:
         cf:d4:05:21:67:60:d8:4b:46:16:0e:5d:63:a4:81:c6:a0:eb:
         de:f5:8c:2d:56:f3:69:0e:f8:93:fe:5a:53:cf:db:4c:60:b5:
         d7:7b:c0:0e:90:e3:9c:bf:38:7e:46:52:ff:42:54:4a:01:6b:
         c7:7d:73:20:c5:ed:ec:cb:9e:e1:b6:7a:65:ea:5d:1a:17:57:
         b7:2e:a1:82:5e:ad:1e:06:62:fa:cb:6d:5a:7b:63:7e:2c:76:
         43:ae:6c:3b:ed:92:61:0f:a1:4e:18:b2:44:04:50:18:84:c5:
         2a:af:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org