Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32332d3233203d3e20313530393339.roa
File:                     3130332e3130352e382e302f32332d3233203d3e20313530393339.roa (raw, json)
Hash identifier:          IvWmSSnIDA+Mqcn9KZHG6riF6NfBV59WYYGGwN5u2xA=
Subject key identifier:   75:DA:5A:C1:CA:13:1A:12:18:3D:61:D6:7F:FF:E4:A5:F9:C2:6D:57
Certificate issuer:       /CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
Certificate serial:       27CFBC0E3969769AE37E440D2AC756D32544246C
Authority key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32332d3233203d3e20313530393339.roa
Signing time:             Tue 18 Jun 2024 10:00:01 +0000
ROA not before:           Tue 18 Jun 2024 09:55:01 +0000
ROA not after:            Tue 17 Jun 2025 10:00:01 +0000
asID:                     150939
IP address blocks:        103.105.8.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl
                          rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:bc:0e:39:69:76:9a:e3:7e:44:0d:2a:c7:56:d3:25:44:24:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98
        Validity
            Not Before: Jun 18 09:55:01 2024 GMT
            Not After : Jun 17 10:00:01 2025 GMT
        Subject: CN=75DA5AC1CA131A12183D61D67FFFE4A5F9C26D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:23:08:d9:68:f1:37:54:d6:e0:03:74:0d:b3:
                    56:80:d1:1e:cd:b5:a6:7e:24:3d:55:3b:40:55:a0:
                    a8:4a:55:e0:ab:6e:fb:9d:e6:5f:14:e8:b8:aa:d7:
                    54:69:b3:c0:97:ab:67:cf:bb:17:f7:2f:35:0a:9f:
                    2b:d1:9d:80:cf:9d:9c:d0:60:f4:16:fb:f5:b1:bd:
                    4f:00:44:ee:72:cc:8f:e7:30:df:74:9b:1f:df:4a:
                    d0:2f:5d:4f:b6:84:12:ea:00:e4:d6:a6:98:13:65:
                    39:0c:99:cc:0f:76:6e:e0:aa:39:68:bd:d7:80:97:
                    3c:54:1e:33:9e:d4:91:34:4b:d8:9f:cb:bf:33:7a:
                    aa:eb:ba:75:d4:64:8a:56:2c:fb:30:87:30:71:13:
                    68:04:7e:75:c8:84:e9:32:e8:2f:6e:a3:e4:ff:31:
                    22:f5:05:6c:5d:7e:f4:fb:2a:e0:11:5d:71:f7:be:
                    cf:d3:ad:43:da:dc:14:6b:f7:88:56:a4:d6:13:52:
                    ee:04:51:ec:80:f5:de:cf:54:73:d6:74:15:c1:dc:
                    0b:02:fe:a2:d9:89:ee:7f:a0:21:d0:be:18:bd:bb:
                    23:09:77:e3:a7:d5:e3:59:13:d7:47:7d:60:d8:8b:
                    bd:4c:a8:64:f1:80:25:74:a8:2c:4d:cc:eb:ca:43:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:5A:C1:CA:13:1A:12:18:3D:61:D6:7F:FF:E4:A5:F9:C2:6D:57
            X509v3 Authority Key Identifier:
                keyid:F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/3130332e3130352e382e302f32332d3233203d3e20313530393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:6a:83:3b:8b:91:0d:21:01:64:bc:95:30:7b:98:9f:3d:
         a5:b0:88:55:cc:97:9f:75:d7:01:fb:6f:53:dc:bc:b3:11:0c:
         2c:a3:9e:98:9b:a6:e8:a8:0f:82:4f:73:e4:73:fc:e0:32:81:
         15:14:19:81:1e:ed:36:af:b7:eb:7d:79:e8:f4:55:ce:db:a2:
         15:03:45:2c:57:f3:89:fe:7b:dc:fe:b8:10:e0:f4:2f:c2:f4:
         a9:7b:56:95:a5:6e:be:5e:81:39:e3:11:32:8a:df:b9:06:b1:
         73:f6:a2:a5:4a:a6:97:e5:af:95:09:8a:4a:5c:37:64:d9:c8:
         4f:7a:d7:9f:29:50:59:26:a8:5a:58:ad:4e:78:33:f6:e3:b3:
         34:cb:7a:c4:02:c1:7e:a7:0a:ee:54:c9:c8:53:cf:69:90:e0:
         52:63:6b:2c:92:aa:6f:82:fd:c3:3f:01:20:99:59:db:6a:bb:
         aa:f6:56:e8:46:36:32:b7:a9:be:48:8d:e8:b2:79:66:99:30:
         e5:50:b0:c7:a2:0f:96:d5:69:aa:31:b1:42:cb:bf:db:82:b0:
         9d:a0:4c:36:2f:47:ec:33:dd:f4:c7:9f:62:71:f9:e6:8f:12:
         30:d9:7c:1b:5b:a8:dc:a0:86:cf:55:f1:93:29:53:52:38:b7:
         a6:7f:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 00:18:59 2024 by rpki-client on console-ams.rpki-client.org