Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa
File:                     3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa (raw, json)
Hash identifier:          7wwDqsnChPhraqrH1GT9XhjB2K+bhJNdR/K7nBrMBgk=
Subject key identifier:   26:8B:D2:54:E1:89:10:8D:D4:04:2D:EA:F4:B1:E0:12:34:A0:FF:5A
Certificate issuer:       /CN=38992A0A64D724D15761F2F9410D85186E2311FE
Certificate serial:       3B50B852270382CA06E219B7ABA9084A0DA0062C
Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa
Signing time:             Wed 20 Dec 2023 00:00:01 +0000
ROA not before:           Tue 19 Dec 2023 23:55:01 +0000
ROA not after:            Wed 18 Dec 2024 00:00:01 +0000
asID:                     139392
IP address blocks:        103.143.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
                          rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 06:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:50:b8:52:27:03:82:ca:06:e2:19:b7:ab:a9:08:4a:0d:a0:06:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE
        Validity
            Not Before: Dec 19 23:55:01 2023 GMT
            Not After : Dec 18 00:00:01 2024 GMT
        Subject: CN=268BD254E189108DD4042DEAF4B1E01234A0FF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:52:79:a8:e7:b2:5a:2d:e0:a6:c3:25:58:ed:
                    2a:b9:a8:a4:67:a9:3b:9d:af:aa:f2:67:60:0c:81:
                    a7:e6:3f:7c:e6:50:18:45:a9:3e:42:1e:28:aa:1d:
                    01:b2:5e:02:3f:de:6e:4b:d2:bb:a2:22:35:13:d8:
                    aa:1f:ae:5f:31:71:92:0c:8d:8b:ff:05:91:b2:74:
                    6e:74:fd:2c:74:9e:b3:d4:32:8c:91:2e:86:0e:23:
                    0b:f4:70:26:a3:ad:43:47:39:16:87:3e:59:f5:4d:
                    21:14:5b:09:b2:9c:7a:8a:97:f5:5e:eb:35:2b:97:
                    11:19:73:f9:6f:a9:be:f3:55:18:90:be:99:49:77:
                    7a:9b:30:c4:e7:ee:e7:2f:ae:13:05:24:05:c7:d5:
                    bc:0c:a3:d7:5d:04:00:f5:43:58:4a:07:15:a3:84:
                    95:44:de:34:c3:0d:34:3f:6b:a3:9e:3f:cd:b5:5b:
                    d3:5a:a9:35:c6:70:83:26:6c:f6:d1:bf:9b:34:c2:
                    dd:c7:c8:6d:22:19:9b:50:8c:9b:c9:a5:f4:ce:d6:
                    43:cf:ee:6d:58:a0:75:c5:23:db:d7:90:d0:e4:70:
                    41:e6:77:2f:d7:71:7b:14:90:65:d2:44:3b:c9:ab:
                    0e:aa:43:3c:ca:a8:7c:03:cc:eb:fd:da:9c:b8:18:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:D2:54:E1:89:10:8D:D4:04:2D:EA:F4:B1:E0:12:34:A0:FF:5A
            X509v3 Authority Key Identifier:
                keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3134332e39352e302f32342d3234203d3e20313339333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:b5:97:98:ab:fd:90:51:c7:8f:28:46:3a:de:30:59:3c:79:
         ed:7b:c1:46:4a:b1:46:4e:43:63:71:fd:50:f3:c9:88:da:bf:
         af:0e:85:97:e5:08:50:fd:82:0d:93:2a:2d:6c:ab:4f:41:15:
         24:62:11:06:e2:66:c6:e9:7e:2c:70:f8:dd:d7:c4:22:3b:56:
         ad:e8:56:39:8e:e6:cf:37:d5:71:7a:dd:f0:ec:70:bf:d1:ff:
         12:cb:19:42:4d:df:8d:1f:70:3b:5a:aa:36:9b:f1:78:3d:ab:
         56:21:48:9f:bf:d9:05:68:42:2c:a0:42:f2:d3:d5:15:be:34:
         1e:95:49:ce:b3:48:44:3b:9f:18:e6:cc:75:9c:d9:01:6c:69:
         45:1e:a0:0d:aa:4e:72:fe:8c:36:48:8a:05:24:ef:ed:6a:3a:
         34:c7:1f:7d:35:3c:00:20:48:eb:00:05:56:f3:33:21:2e:bc:
         28:8f:db:b2:3d:b7:af:4f:60:31:82:86:c8:08:71:3a:c0:04:
         6b:29:ad:ba:b6:22:1b:ce:a8:bc:7e:c9:e9:81:e2:93:8b:e5:
         5e:cd:7e:3d:58:56:1e:d1:b0:db:a3:69:96:c1:49:ce:62:89:
         b4:8b:fe:a1:12:69:a4:5e:19:6d:ac:fd:4b:58:48:a5:59:ff:
         1a:6a:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 03:15:36 2024 by rpki-client on console-fra.rpki-client.org