Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
File:                     3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa (raw, json)
Hash identifier:          GCZ+ywLVdXETN59FcabnrSgZd/++3118oy4m7Uehvw0=
Subject key identifier:   0C:2F:50:A5:06:BD:EE:5A:F8:68:86:FA:B9:E6:5B:62:C4:75:8B:FF
Certificate issuer:       /CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
Certificate serial:       67EAA1F3FAD2FFCE57B47B6EAA8A727952FAFE7F
Authority key identifier: 10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa
Signing time:             Mon 01 Jul 2024 01:05:11 +0000
ROA not before:           Mon 01 Jul 2024 01:00:11 +0000
ROA not after:            Mon 30 Jun 2025 01:05:11 +0000
asID:                     140469
IP address blocks:        103.153.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl
                          rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ea:a1:f3:fa:d2:ff:ce:57:b4:7b:6e:aa:8a:72:79:52:fa:fe:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10C3E17639C8B193629F97DCBD1EF4332CC9A8AD
        Validity
            Not Before: Jul  1 01:00:11 2024 GMT
            Not After : Jun 30 01:05:11 2025 GMT
        Subject: CN=0C2F50A506BDEE5AF86886FAB9E65B62C4758BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:cd:43:a6:cf:74:0b:6d:fa:c9:ea:f3:eb:
                    68:39:ee:36:c0:2b:41:a8:dd:ce:1e:8f:8b:6e:a4:
                    cb:21:e6:26:27:47:d9:fe:5e:c1:ee:64:0e:b4:1c:
                    19:a5:2a:f8:af:07:6c:25:22:98:93:43:9f:0f:97:
                    18:a7:31:be:18:51:14:f5:34:22:0b:e9:95:ed:b7:
                    eb:1f:4f:6e:95:fb:97:e3:ec:b8:99:e8:2d:6a:73:
                    34:f4:b5:a0:87:82:d2:4c:b6:eb:88:92:1f:f5:63:
                    6c:e0:3e:b6:ad:75:c4:de:e3:bf:12:c4:eb:93:05:
                    90:33:07:ae:06:cb:35:b7:77:3a:5a:5d:85:77:78:
                    45:4d:9b:f9:40:f1:ee:3e:62:43:96:98:b4:5c:5c:
                    5a:65:d1:ba:4e:19:ca:36:fc:56:6a:71:4c:d9:1d:
                    6d:4c:9c:c9:6b:12:22:b2:4b:52:fa:bb:8e:ed:25:
                    23:1d:b8:c3:0c:15:5b:f5:9f:64:12:66:81:df:3d:
                    64:61:19:db:18:2b:58:25:2d:47:bd:e0:5d:7e:fe:
                    4e:17:14:e2:8a:3a:da:b6:6b:16:98:e2:2f:be:20:
                    a3:3e:d4:fb:71:cb:eb:8b:0e:2e:ee:9b:60:a6:ef:
                    f5:27:64:c4:fb:f4:d4:c5:71:6c:dd:a1:8f:96:38:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:50:A5:06:BD:EE:5A:F8:68:86:FA:B9:E6:5B:62:C4:75:8B:FF
            X509v3 Authority Key Identifier:
                keyid:10:C3:E1:76:39:C8:B1:93:62:9F:97:DC:BD:1E:F4:33:2C:C9:A8:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10C3E17639C8B193629F97DCBD1EF4332CC9A8AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc568b5b-b6ae-453e-8e16-d55dd635460b/0/3130332e3135332e3139302e302f32332d3233203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:8f:b7:94:63:e7:38:97:73:f5:a0:34:7d:75:90:a7:a7:
         c5:bf:00:5e:49:4a:3e:45:0d:4e:6f:81:52:35:39:a3:9c:58:
         80:6c:37:1f:c8:cf:cf:08:fc:64:b2:07:72:e0:f6:d2:43:06:
         f9:a8:f0:0f:ce:ef:c8:7f:c6:2d:c3:54:9e:a4:40:de:a7:98:
         e9:8c:9f:be:08:a2:a0:15:75:26:b9:37:6c:f3:8f:a6:06:6a:
         32:bf:19:53:45:8b:e6:42:06:e3:2b:76:ec:c4:80:30:04:33:
         51:9f:7e:7c:e6:b2:7c:cb:ad:c3:06:69:63:15:f1:ab:7f:a9:
         d8:61:32:d2:09:cb:37:c8:1a:09:7f:fd:9c:43:ef:26:f3:33:
         79:02:10:ca:b4:13:03:c1:55:4c:7e:56:40:f2:90:98:ff:ad:
         06:1f:ca:e9:c0:b0:59:2b:e0:70:9c:1e:ad:f2:dd:e9:23:8e:
         da:0b:be:4f:0a:26:97:b7:3a:2c:6b:17:8f:94:e8:ae:d9:a4:
         2c:ad:1c:3a:b8:ce:29:eb:f4:61:38:aa:fc:a1:f5:b3:f4:7f:
         19:e5:14:08:ec:02:bd:6d:2a:16:1c:8b:37:1e:74:e3:62:47:
         83:84:68:f0:98:46:1c:2c:a6:ab:1a:42:d9:ad:d6:aa:3b:1f:
         40:7b:d9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org