Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa
File:                     3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier:          AoZ8RljIE3sXnO86XdoW5R7gUlRU0G+ZvrfNhYEgmM8=
Subject key identifier:   D3:BC:92:EF:67:39:7A:BF:6C:4E:FF:74:18:96:B4:1E:B0:98:7C:A9
Certificate issuer:       /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Certificate serial:       6930469D57BF90E19B6FC2A6370D46206D6814FA
Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa
Signing time:             Mon 07 Aug 2023 11:00:01 +0000
ROA not before:           Mon 07 Aug 2023 10:55:01 +0000
ROA not after:            Mon 05 Aug 2024 11:00:01 +0000
asID:                     56233
IP address blocks:        103.233.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl
                          rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:30:46:9d:57:bf:90:e1:9b:6f:c2:a6:37:0d:46:20:6d:68:14:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Validity
            Not Before: Aug  7 10:55:01 2023 GMT
            Not After : Aug  5 11:00:01 2024 GMT
        Subject: CN=D3BC92EF67397ABF6C4EFF741896B41EB0987CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:4a:5a:c0:e2:70:b1:e5:07:ce:00:b8:13:
                    5b:8e:fe:8d:bd:65:76:1c:06:9c:7e:94:80:a3:11:
                    87:2d:af:be:31:db:9d:d0:7f:c1:ba:9c:71:13:22:
                    80:fc:6f:37:c0:84:75:08:11:a9:37:e5:2b:29:42:
                    ac:61:40:52:9b:64:7f:73:56:93:36:c0:70:14:7f:
                    41:dc:e5:de:2c:1c:b4:5c:f6:da:14:ec:5d:bb:b7:
                    bc:20:9a:d1:eb:a9:56:1a:b0:b8:43:a3:73:9b:b9:
                    dd:d0:bd:db:76:58:b7:08:e5:68:b0:1d:5b:ba:7d:
                    a4:b1:93:f2:8b:30:89:3b:0c:da:94:3f:a3:e3:8e:
                    8d:f5:6f:a3:0d:b1:83:36:d7:08:e2:cc:bc:dc:ec:
                    18:6f:3e:e7:e7:47:62:33:70:b7:b1:ef:d0:aa:80:
                    05:9b:cc:7f:f4:b2:ce:92:68:3f:e0:46:54:cd:51:
                    0d:15:49:2b:ec:24:9a:6e:bf:fc:26:9d:97:24:b0:
                    6e:85:e5:82:dc:38:4a:e8:1f:5e:bc:3d:45:fe:97:
                    8b:c8:77:7f:9c:f4:9a:ee:02:b6:c1:e1:57:5e:f5:
                    2c:5f:be:51:f3:dc:f1:72:bb:0a:01:ac:9b:ef:f2:
                    77:7f:20:66:52:6e:f0:4a:13:c4:21:cf:51:9a:e1:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BC:92:EF:67:39:7A:BF:6C:4E:FF:74:18:96:B4:1E:B0:98:7C:A9
            X509v3 Authority Key Identifier:
                keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:f6:95:51:b1:6b:64:dd:ec:2a:70:86:32:e5:16:2c:69:57:
         ad:fe:f5:45:cf:ab:72:16:bf:a1:1a:04:d7:51:a3:fa:33:fd:
         f8:f8:cf:d6:34:7e:e0:fd:1a:7b:33:64:df:48:6f:97:60:ac:
         6b:8c:bf:c1:0b:da:c4:96:61:5a:fa:4b:07:36:25:35:e7:79:
         b0:2a:4c:a2:43:ee:b2:ae:b0:68:a1:08:aa:27:75:2d:3c:cb:
         47:5c:67:11:fe:61:24:14:35:39:a9:2f:47:9c:e8:95:79:5b:
         a1:76:48:ad:6f:6a:d2:4b:96:19:9c:62:7f:dc:24:e7:b4:a4:
         07:ec:63:ee:c3:0c:13:fd:99:36:ff:63:4c:8c:72:05:66:f3:
         7f:98:ca:66:99:7f:06:4b:66:ce:e0:cc:6c:a9:ca:72:b7:8a:
         73:56:7e:90:56:c4:ac:0d:fc:01:bd:e9:cb:42:9f:c5:41:b9:
         cc:eb:4a:5d:82:05:5b:c5:d9:0f:49:38:c2:da:db:9b:08:4c:
         5e:92:5a:94:60:48:23:00:96:0b:68:69:a7:3c:19:fa:a8:42:
         ad:49:d9:ad:03:a8:d0:34:54:eb:79:58:c9:63:07:0e:71:78:
         02:d0:d6:8b:ed:68:a7:33:7c:f8:11:ea:1f:14:57:3a:c4:9e:
         7e:29:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:53 2024 by rpki-client on console-ams.rpki-client.org