Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa
File:                     3130332e36342e31342e302f32342d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          9UWkSs2N/EqGJc8gF2V4oEKeIaomWmIqxQ5tW0CfAfs=
Subject key identifier:   88:6F:9A:B5:88:FD:73:92:1A:CB:4C:4B:18:F1:16:51:87:14:A0:2F
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       66A74243D5C6E378136E0ACDF8A2891E2807D258
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa
Signing time:             Mon 31 Jul 2023 00:07:37 +0000
ROA not before:           Mon 31 Jul 2023 00:02:37 +0000
ROA not after:            Mon 29 Jul 2024 00:07:37 +0000
asID:                     135448
IP address blocks:        103.64.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 07:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a7:42:43:d5:c6:e3:78:13:6e:0a:cd:f8:a2:89:1e:28:07:d2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul 31 00:02:37 2023 GMT
            Not After : Jul 29 00:07:37 2024 GMT
        Subject: CN=886F9AB588FD73921ACB4C4B18F116518714A02F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:42:1a:54:0a:7a:41:e4:7f:37:f5:36:a1:
                    93:77:2d:84:4d:ed:f0:4e:dd:6e:f6:26:97:d6:9d:
                    29:53:7c:ec:cd:88:61:a2:c3:78:ee:ee:8b:cd:9e:
                    67:33:f7:d0:6c:97:3c:28:5f:37:86:4d:29:8d:dc:
                    42:40:46:96:e8:92:3e:8d:e4:d9:51:a1:c8:a8:1b:
                    b3:ca:37:81:48:2f:a2:0e:73:3c:46:06:e4:f1:2b:
                    59:26:e1:0b:6b:59:81:27:2f:ba:47:f5:67:5e:3b:
                    df:24:db:57:47:7c:ae:59:bf:3e:8d:20:fb:53:7e:
                    e0:d4:f0:16:b3:a2:6d:d8:4b:35:4d:3b:eb:aa:65:
                    d6:1b:6e:62:13:fb:b5:6a:bc:52:90:b1:ea:97:2c:
                    ff:d9:42:ba:64:36:cd:9e:dc:e0:be:51:61:fc:76:
                    df:32:36:19:27:a1:64:1b:d2:19:5b:45:5e:74:19:
                    14:dd:62:9f:21:ca:6a:8e:79:d4:14:d6:3a:e5:12:
                    b9:63:ae:e1:5f:08:fb:7a:f8:46:8b:e7:88:fb:f3:
                    7b:7e:84:91:ae:7c:b4:9e:92:f9:e4:5a:5c:76:08:
                    35:ae:4a:ae:8e:c3:82:d7:ed:d2:94:5d:2c:5e:de:
                    db:d0:20:23:a2:ee:21:00:b2:ad:b5:6b:ca:16:10:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:9A:B5:88:FD:73:92:1A:CB:4C:4B:18:F1:16:51:87:14:A0:2F
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e36342e31342e302f32342d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:06:2c:67:8a:01:47:64:a9:31:6a:44:54:1e:19:68:df:03:
         8b:e1:11:6b:17:ed:06:86:2b:5a:be:39:b1:9f:93:c7:9a:c0:
         13:cf:5e:f8:bd:f6:a3:f1:a6:6d:5c:bb:50:8c:46:e9:82:a9:
         fa:b4:f6:08:aa:e6:09:c7:6e:da:7a:20:9e:07:0d:eb:86:e2:
         da:14:08:7f:cb:88:7d:0b:c0:92:ae:ec:68:49:b4:42:fa:a6:
         bb:71:bc:5e:da:a5:e5:f8:25:e7:9b:66:3d:2f:3f:e0:8e:19:
         24:8f:b9:be:9a:c3:71:6f:b9:92:ea:30:d7:7f:58:b5:09:9a:
         b9:2b:4e:15:c2:87:c6:b4:50:64:cb:10:92:1e:68:46:90:94:
         84:81:90:ad:01:1d:73:03:93:f9:39:f1:f7:86:ec:a2:79:76:
         d7:12:b9:e2:31:13:f9:1c:b3:b6:6b:b9:87:e5:df:14:97:a1:
         c2:c3:e0:a3:33:7b:6e:c0:55:fd:63:c7:0f:97:5f:3c:a0:b7:
         32:d4:a5:94:c6:ba:4c:be:c1:6e:b7:2f:ec:e2:ba:0d:5c:a6:
         3a:cf:2a:da:66:ea:15:ab:b8:1a:26:31:51:7b:72:3a:4d:3a:
         93:df:15:d6:c2:19:6f:7b:97:36:d6:1e:c3:aa:8e:92:d9:d6:
         fb:73:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:36:11 2024 by rpki-client on console-fra.rpki-client.org