Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa
File:                     3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (raw, json)
Hash identifier:          HvSfJkTmcOsud+92I/8dTbRfWtHO7i0J4ZoRFVB4OWk=
Subject key identifier:   17:36:5A:9A:1D:FB:2C:9E:37:24:ED:40:63:56:AF:D2:4A:1A:D6:F5
Certificate issuer:       /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
Certificate serial:       29956B9AEE0F297D662BCEE7D472C0CE13B74268
Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa
Signing time:             Mon 19 Jun 2023 01:55:55 +0000
ROA not before:           Mon 19 Jun 2023 01:50:55 +0000
ROA not after:            Mon 17 Jun 2024 01:55:55 +0000
asID:                     139369
IP address blocks:        103.142.60.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl
                          rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:95:6b:9a:ee:0f:29:7d:66:2b:ce:e7:d4:72:c0:ce:13:b7:42:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6
        Validity
            Not Before: Jun 19 01:50:55 2023 GMT
            Not After : Jun 17 01:55:55 2024 GMT
        Subject: CN=17365A9A1DFB2C9E3724ED406356AFD24A1AD6F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:d5:08:75:03:7d:ff:d5:dd:e0:8b:5f:d4:
                    40:41:9b:39:7c:76:8e:b7:1b:9d:75:08:1c:83:6a:
                    3f:42:35:e7:a7:09:90:a4:c5:33:ea:24:88:4e:9e:
                    77:c7:2b:86:54:c0:ad:f6:31:b1:1a:b5:29:f1:04:
                    c2:f2:93:b4:ac:3c:1a:60:1f:8b:bb:8c:2c:00:63:
                    dd:b4:0a:f3:99:b0:27:ea:10:f9:2d:65:30:b0:8f:
                    01:fa:4d:40:a8:35:c1:17:82:bc:ce:3d:7b:07:aa:
                    db:f4:45:57:7c:57:cb:ba:1a:ad:80:32:69:b4:6f:
                    c6:26:71:82:8c:0f:14:80:66:2c:f3:5a:8e:bf:46:
                    26:0a:78:da:58:f8:58:e2:37:f9:0e:c8:67:30:5e:
                    b4:05:ac:55:30:9e:e8:f3:a9:3b:d0:5b:25:d5:40:
                    22:6a:77:f3:ec:a0:34:c7:87:92:f0:65:c0:b2:0c:
                    3c:a6:25:a2:36:7a:bb:32:e2:98:a5:57:04:1c:3b:
                    9b:4f:93:71:2b:0d:d5:55:8f:da:1a:b9:2a:05:14:
                    f2:0a:87:c2:1e:cb:32:1e:ca:3f:73:35:6d:35:bb:
                    17:60:82:9d:46:f2:ba:e6:cf:a3:ef:be:80:7b:b5:
                    ff:99:8f:db:7a:cf:44:1a:d4:02:33:9a:b4:83:cc:
                    30:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:36:5A:9A:1D:FB:2C:9E:37:24:ED:40:63:56:AF:D2:4A:1A:D6:F5
            X509v3 Authority Key Identifier:
                keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:b3:6a:20:cb:14:46:77:ad:f6:19:2e:a4:1f:6b:03:3c:50:
         42:59:ff:71:b8:a5:15:5e:b1:9b:6a:07:03:9d:6a:8c:2d:a1:
         42:9c:6e:75:92:77:f2:73:c1:93:66:0d:39:be:c7:8c:2a:3f:
         2e:05:70:21:3c:97:cc:e6:4c:d2:9a:38:e8:34:67:e8:d2:b6:
         12:4e:e8:98:56:eb:cf:27:db:4e:85:63:85:b8:46:8c:aa:d4:
         80:e8:24:a0:20:64:4f:40:e8:df:63:ef:8e:31:e8:1e:e1:5b:
         22:79:0f:37:7d:94:2b:dc:13:e7:ec:db:eb:a4:c0:6b:73:f7:
         e5:1a:83:b0:f9:83:3a:47:61:bc:59:c9:cc:fc:02:78:f4:9d:
         82:d7:ac:6e:c8:da:42:2e:0a:3b:4d:46:13:fd:f4:03:4d:76:
         cf:5a:1c:d5:de:6a:78:4d:b6:6f:f8:ac:d0:3d:dd:fa:02:9c:
         b3:cf:bc:dc:19:cc:3b:b7:48:e5:4f:bf:38:e8:3d:ad:d1:90:
         60:0c:05:be:10:b8:4c:25:89:3c:98:ec:c5:e3:d9:87:ce:e1:
         7f:51:e8:da:b7:a2:39:ae:25:b1:20:4a:63:26:9c:f9:e0:4e:
         3b:f0:15:54:de:76:49:3f:74:e7:a3:4a:6a:c1:24:84:8d:42:
         82:c0:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 00:22:48 2024 by rpki-client on console-fra.rpki-client.org