Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
File:                     3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (raw, json)
Hash identifier:          rhBA8NRHfT/Vgh1+hcGeMcqMwtxAqO5xTgRXWd9D2aY=
Subject key identifier:   87:22:95:61:0D:C3:F6:D2:67:5F:DD:36:1D:FA:8D:57:27:AD:DB:E6
Certificate issuer:       /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Certificate serial:       0C8BB84267638C438B55154B9EF4C77AD4E8CF11
Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
Signing time:             Mon 31 Jul 2023 00:09:29 +0000
ROA not before:           Mon 31 Jul 2023 00:04:29 +0000
ROA not after:            Mon 29 Jul 2024 00:09:29 +0000
asID:                     138083
IP address blocks:        103.130.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
                          rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 19:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8b:b8:42:67:63:8c:43:8b:55:15:4b:9e:f4:c7:7a:d4:e8:cf:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
        Validity
            Not Before: Jul 31 00:04:29 2023 GMT
            Not After : Jul 29 00:09:29 2024 GMT
        Subject: CN=872295610DC3F6D2675FDD361DFA8D5727ADDBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:9c:d4:18:bd:c5:f5:76:35:aa:3b:b0:e8:
                    48:9b:70:91:d9:5e:29:cf:bf:a3:23:8f:5d:99:7b:
                    cb:b2:eb:57:1a:10:a0:59:1c:b6:a3:fc:5a:24:0b:
                    af:69:41:0d:2f:2f:65:d4:55:5c:cb:65:af:92:9d:
                    5e:4e:3d:bd:d5:e4:07:9c:b7:47:dc:5e:35:f4:3b:
                    29:48:24:1e:ed:9b:de:47:48:a4:78:09:09:03:bd:
                    64:67:1c:f6:5d:77:a9:23:a2:ae:68:67:eb:4c:24:
                    ae:78:43:30:89:8c:36:51:91:3b:b1:d9:50:2d:ea:
                    52:c7:68:32:23:74:65:2b:b6:2c:e8:8a:20:80:88:
                    08:60:11:f8:9b:e5:ea:ca:40:d9:a5:75:2b:89:16:
                    73:27:d0:71:f5:12:96:d7:62:8a:8e:1d:b1:82:a2:
                    3d:b8:65:74:48:85:29:91:91:62:73:9b:19:66:b4:
                    31:ce:5c:99:53:c8:53:43:d8:f1:b7:91:48:88:2f:
                    97:21:36:96:0b:37:3a:87:44:fd:4a:51:7a:af:25:
                    1e:18:70:74:1d:b8:c5:16:9e:53:4d:aa:bb:8a:c7:
                    e3:ae:f9:d3:96:a8:1a:b3:13:0b:bd:de:b5:c9:0d:
                    85:4e:16:f1:f0:03:ca:ee:da:73:c7:87:e7:14:79:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:95:61:0D:C3:F6:D2:67:5F:DD:36:1D:FA:8D:57:27:AD:DB:E6
            X509v3 Authority Key Identifier:
                keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:c5:65:32:a9:ce:9d:bc:73:bf:f8:71:b6:f1:4f:e3:67:55:
         ce:bf:5e:af:38:91:fd:f0:dc:52:9f:80:c4:3a:56:05:de:88:
         ad:1c:df:bb:99:b5:9c:1b:f7:e7:19:02:c4:5e:1f:b7:82:33:
         66:1f:a4:3f:a9:ea:11:c9:6a:49:b0:19:5b:f6:4f:ba:ab:9d:
         a4:2e:50:9f:4f:ce:e8:ff:e7:38:00:46:96:08:eb:ef:ac:56:
         3d:5b:9e:cd:96:c7:1b:6b:f2:9c:0f:4c:4c:65:36:fb:7e:23:
         4e:65:d6:c9:bd:94:c6:ed:21:61:62:bd:b8:07:84:ae:52:33:
         07:cf:5d:5a:8b:03:98:c8:02:43:11:b9:32:db:a3:db:6b:f6:
         94:d8:01:fa:6f:2c:d3:de:59:63:00:25:cc:f0:6e:8a:ee:63:
         95:7c:d9:39:e5:7b:a3:1c:90:67:ae:eb:01:15:81:e9:f7:e4:
         03:61:f4:31:26:f0:c3:c7:f2:5b:98:da:13:08:8e:5e:9a:55:
         f8:39:6d:51:a2:58:39:e0:30:1c:f2:6a:9e:08:43:22:9e:cd:
         fc:fe:ae:5f:05:91:24:c3:2e:00:22:2c:c2:a3:47:09:3e:fc:
         8c:47:ed:44:0d:e2:c8:88:8a:3e:d7:3e:77:dd:c1:09:a7:f3:
         b6:e1:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:15:05 2024 by rpki-client on console-ams.rpki-client.org