Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
File:                     3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (raw, json)
Hash identifier:          tL+KWBsU0hXi5gvFIEemp7m9JYgXHsSa3SKSF/Ibzoc=
Subject key identifier:   F7:19:89:63:1A:9A:55:9D:6E:FA:30:E8:6A:F0:0D:99:49:DB:99:AD
Certificate issuer:       /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial:       2E654811335FB468456D01D5E44C186E7D6F6441
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
Signing time:             Tue 12 Dec 2023 02:00:02 +0000
ROA not before:           Tue 12 Dec 2023 01:55:02 +0000
ROA not after:            Tue 10 Dec 2024 02:00:02 +0000
asID:                     141957
IP address blocks:        103.166.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
                          rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 07:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:65:48:11:33:5f:b4:68:45:6d:01:d5:e4:4c:18:6e:7d:6f:64:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
        Validity
            Not Before: Dec 12 01:55:02 2023 GMT
            Not After : Dec 10 02:00:02 2024 GMT
        Subject: CN=F71989631A9A559D6EFA30E86AF00D9949DB99AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:83:4a:3f:c0:8f:b0:ad:25:4b:39:4b:a3:
                    68:1e:fa:21:b5:54:b1:20:b4:dc:a9:23:fe:66:db:
                    5f:4a:d2:c3:7f:61:4c:30:d6:61:87:2e:1d:2e:cf:
                    d9:36:ac:c2:4c:e5:7b:18:60:e3:28:59:28:f7:54:
                    af:b8:e6:50:1a:3f:55:2e:79:53:f8:15:2b:ba:f4:
                    26:3b:38:ab:4e:94:f0:2b:2d:ca:f5:b7:b6:5e:79:
                    d3:23:a6:45:3d:91:a7:05:57:84:49:0a:e1:b3:c0:
                    f1:6a:9d:8a:7c:a2:a5:26:56:8e:00:41:1d:e8:08:
                    a0:e9:2b:d2:d4:d8:74:a1:ef:d5:ba:03:73:fa:4d:
                    72:ff:e3:3a:11:89:ba:4d:04:be:b9:97:36:41:bc:
                    1a:08:78:76:c7:ea:36:5a:05:f8:4e:61:56:1f:31:
                    20:0c:27:19:31:b2:9e:30:22:1a:9f:75:35:94:bc:
                    33:eb:89:e3:f8:1b:55:95:e0:07:f6:30:0d:c0:24:
                    00:f0:b9:3d:e9:a0:1b:72:fa:cb:cd:c8:8a:53:5b:
                    fd:81:e2:96:9a:99:18:1a:2f:a0:3c:66:d8:28:e8:
                    26:8b:b7:30:1c:a1:c5:3a:b9:82:fd:ae:b7:2a:b8:
                    d4:61:28:a9:79:7d:5c:37:5e:db:1f:74:48:23:c9:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:19:89:63:1A:9A:55:9D:6E:FA:30:E8:6A:F0:0D:99:49:DB:99:AD
            X509v3 Authority Key Identifier:
                keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:13:f1:30:7f:ae:59:2e:7c:60:76:ac:b8:25:fb:43:ec:50:
         34:cb:b7:af:1a:85:73:b3:cf:f7:2d:5d:9e:1b:eb:df:86:b9:
         8f:b3:d9:f9:3a:b2:99:58:a1:0f:09:46:6a:8b:06:13:2e:25:
         ab:64:d7:e8:83:67:ac:60:a5:09:d1:ac:66:31:80:e5:84:18:
         45:2f:01:40:bc:e7:16:f6:7d:da:c7:3a:f0:4d:12:a9:32:e4:
         6e:9c:dc:b2:44:2c:c1:43:fd:32:1f:24:64:60:07:59:e2:5a:
         15:ec:e1:3b:f5:26:c9:7b:6f:ff:cc:76:33:8c:f8:a2:27:4b:
         50:3d:c3:01:01:98:35:1d:5c:b5:ac:14:a0:99:14:8c:b3:2b:
         16:89:00:ed:f4:26:5b:5a:1c:4d:ff:1c:31:f7:1f:ab:3d:cf:
         dd:df:75:ab:bb:a0:80:37:3f:fb:63:c8:c4:c4:09:24:fa:46:
         08:91:e0:b6:7e:f0:45:11:df:30:4e:df:92:3d:40:b8:e3:35:
         f5:8f:9f:5c:11:d7:64:e4:32:b2:77:ce:12:a3:9b:8f:cb:e5:
         4b:fe:10:f9:a7:07:35:15:f3:61:82:84:78:05:7c:47:75:76:
         42:31:b3:a5:52:fd:16:8e:75:e7:a0:94:dc:34:23:b7:d8:e7:
         57:6e:4d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:55 2024 by rpki-client on console-fra.rpki-client.org