Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36332e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          xJb8t1RJGvdxIUhClEcH5slyqWHTJA9fPztD9OFgl10=
Subject key identifier:   A8:F1:D8:AF:2C:36:63:39:7B:A0:D4:E5:50:29:B9:9D:27:A7:D5:21
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       1D8FB01CF71DFD3BBD4272703C0560C514936E8A
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 31 Jul 2023 00:00:06 +0000
ROA not before:           Sun 30 Jul 2023 23:55:06 +0000
ROA not after:            Mon 29 Jul 2024 00:00:06 +0000
asID:                     38758
IP address blocks:        103.10.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 01:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8f:b0:1c:f7:1d:fd:3b:bd:42:72:70:3c:05:60:c5:14:93:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jul 30 23:55:06 2023 GMT
            Not After : Jul 29 00:00:06 2024 GMT
        Subject: CN=A8F1D8AF2C3663397BA0D4E55029B99D27A7D521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:8b:9a:2e:22:20:6d:bf:dc:c7:2c:47:a3:
                    8e:43:5b:82:0b:34:70:20:c1:fe:ff:ab:a3:8e:f9:
                    08:78:77:3b:eb:3f:01:7e:4d:3e:9a:6f:0c:03:c7:
                    1b:9d:42:5a:f2:e4:9d:db:89:98:0a:df:95:f4:04:
                    81:2a:11:33:d5:db:c1:12:b4:7b:09:eb:8d:d0:34:
                    83:0a:97:fb:91:9c:56:8e:30:05:31:53:dc:d1:da:
                    1d:bb:4d:4b:81:59:65:5d:2b:3a:26:36:e1:c5:d3:
                    a5:6a:ea:c9:d8:a1:1b:a3:06:6b:fc:cc:f7:16:73:
                    26:af:73:de:c3:35:1a:b6:25:5d:4e:a2:a8:55:12:
                    76:fb:51:7f:57:a3:58:3b:3e:5c:20:4f:fe:e5:8f:
                    a2:54:83:ba:c1:7f:9f:e2:5f:92:80:bc:54:4c:ad:
                    80:84:46:4d:2c:10:8d:cd:d5:34:b6:1d:ad:a8:26:
                    ca:c6:e6:73:15:1a:6f:41:02:9c:d4:e7:84:af:8a:
                    12:fa:60:a7:4d:95:75:7a:78:78:cc:9c:6b:15:70:
                    1f:12:07:88:63:ae:0d:ed:60:50:28:35:05:83:4b:
                    4d:cc:47:a7:37:1d:af:d7:11:2b:c0:06:48:f4:69:
                    6a:92:91:0f:f8:87:98:e2:26:f9:38:7d:33:78:6c:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:D8:AF:2C:36:63:39:7B:A0:D4:E5:50:29:B9:9D:27:A7:D5:21
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36332e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:94:4d:3c:09:26:f9:5d:d5:c6:6c:6d:b5:6e:56:30:20:
         c8:20:0d:3e:2a:a7:c4:3e:ee:fb:15:6f:d9:83:af:b6:46:3d:
         70:09:1a:a3:e8:78:45:ba:ec:92:5d:b5:c5:ba:97:13:3e:0d:
         53:49:6c:0d:f2:3f:9e:e2:15:82:26:eb:26:04:5f:45:13:d5:
         98:63:52:c4:4a:7d:11:e1:7c:d4:5d:d4:b0:54:cc:75:9b:6f:
         ee:16:ad:92:a7:26:62:14:c6:3a:63:39:67:84:d9:ef:0f:04:
         95:9b:bc:ec:eb:7c:c4:1f:14:80:f7:1f:35:15:73:71:c5:0f:
         da:41:a1:78:76:50:51:b8:3d:d0:03:56:62:dc:c5:0f:2a:5e:
         24:ea:b5:79:db:ad:31:fa:e8:5b:08:aa:4c:c6:dc:3f:b6:80:
         b0:8b:60:37:57:73:24:e4:cd:41:16:17:30:9f:d8:00:7e:6e:
         10:39:96:b5:39:57:43:67:eb:55:10:48:35:9c:9e:61:e6:0f:
         bc:2b:7d:0d:4d:2d:f2:46:2c:60:ec:74:c2:cd:f3:43:36:66:
         cb:be:39:00:d7:0f:b2:60:71:86:f9:c6:8c:08:a7:85:3b:71:
         69:cb:30:36:9c:07:b2:f3:0b:74:86:e7:53:e3:9a:f2:8f:73:
         30:cf:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:53:49 2024 by rpki-client on console-ams.rpki-client.org