Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa
File:                     3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa (raw, json)
Hash identifier:          LSzUMoVvmiAEZu3xuJ4+608FfpEFwxeakvsDBs0f8CQ=
Subject key identifier:   FE:74:CB:33:DE:56:92:71:36:B3:89:98:50:FC:76:85:38:A8:7D:00
Certificate issuer:       /CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
Certificate serial:       38C4053BBA8F5C7347C36059ABCFC4F8B1728FAC
Authority key identifier: CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa
Signing time:             Mon 31 Jul 2023 00:03:15 +0000
ROA not before:           Sun 30 Jul 2023 23:58:15 +0000
ROA not after:            Mon 29 Jul 2024 00:03:15 +0000
asID:                     133815
IP address blocks:        103.130.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl
                          rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c4:05:3b:ba:8f:5c:73:47:c3:60:59:ab:cf:c4:f8:b1:72:8f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA03A07989107F547A2B2ABAA6AD4E70312AD5C
        Validity
            Not Before: Jul 30 23:58:15 2023 GMT
            Not After : Jul 29 00:03:15 2024 GMT
        Subject: CN=FE74CB33DE56927136B3899850FC768538A87D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:a8:8a:92:c0:94:5a:c2:8b:b6:a2:bb:be:3a:
                    85:40:21:23:66:ed:0b:b6:b0:3d:a7:29:9b:0a:af:
                    05:66:c9:77:2c:a9:c1:4d:c0:ce:9a:44:66:aa:27:
                    0c:bf:5f:89:19:15:33:a3:fd:c4:76:c2:34:6f:1a:
                    96:27:ac:d9:dd:1f:2c:8e:c2:74:51:ee:8f:78:80:
                    74:a5:6d:48:56:0f:c2:54:3c:8e:1b:41:d2:46:bd:
                    d4:d5:60:23:5f:02:b5:0a:87:d3:ff:66:03:11:de:
                    44:e6:15:5c:8a:d3:75:8c:d0:13:a8:68:1c:de:46:
                    83:0c:83:33:4f:68:6a:74:aa:95:94:23:b9:f1:ec:
                    46:1e:36:38:8a:40:84:12:46:93:55:e5:b9:12:b1:
                    36:83:f3:38:16:61:ed:a4:46:2b:9c:15:23:22:e9:
                    89:59:90:c0:5d:b0:7e:8e:6b:be:ab:ce:35:b4:2d:
                    6e:72:23:3a:d8:7c:64:b4:fb:ba:7b:ed:bf:16:d1:
                    6e:65:67:da:db:fa:d3:74:9c:1d:19:92:7b:3f:ab:
                    98:ab:80:a3:8c:8f:e3:36:b7:be:b0:ad:23:d3:40:
                    e0:d4:26:41:a3:1e:ff:40:c9:dd:2f:32:dc:92:a5:
                    40:39:ce:9d:a2:e4:46:f7:88:c3:5a:62:c1:17:b3:
                    f8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:74:CB:33:DE:56:92:71:36:B3:89:98:50:FC:76:85:38:A8:7D:00
            X509v3 Authority Key Identifier:
                keyid:CE:A0:3A:07:98:91:07:F5:47:A2:B2:AB:AA:6A:D4:E7:03:12:AD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA03A07989107F547A2B2ABAA6AD4E70312AD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a3ae485-a658-4c5c-abe2-1e7fd8b038a0/0/3130332e3133302e3133362e302f32322d3234203d3e20313333383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:46:05:09:22:3a:e6:76:05:82:ee:67:04:e4:38:e4:a0:58:
         61:26:85:24:59:96:21:30:ba:ce:48:22:7f:47:6f:b0:c3:5b:
         bf:fa:cf:f4:cf:24:bc:b2:71:6d:ba:05:a9:61:50:74:ba:6c:
         09:6e:5c:8b:c9:68:dd:84:00:67:69:8f:4d:ec:54:2e:f9:40:
         0d:1e:a2:fa:48:d9:aa:4c:fc:68:54:9b:99:ac:4a:e2:52:2a:
         95:2d:f6:42:8c:3c:15:73:89:eb:b4:59:e8:e7:21:dd:4a:c5:
         1b:c8:0d:1b:85:a0:a1:ed:50:1a:68:7d:85:db:0a:b2:af:55:
         12:53:04:93:13:6c:3d:ee:e1:40:fe:11:98:72:8f:cd:fa:a5:
         4e:7b:f2:8b:38:63:6c:e6:d8:e3:a5:cc:88:88:52:3b:9f:db:
         c3:0a:9d:78:a5:cb:5c:fb:9d:fb:e0:fa:07:94:80:fb:55:c4:
         bc:f8:8c:bd:bc:32:5d:6c:69:d0:fa:62:e7:c3:c0:c8:da:be:
         c1:b5:8e:a4:bc:93:99:c3:e9:0f:10:a5:13:cb:2b:6c:c7:59:
         ff:b2:c6:cc:26:08:00:f4:f7:e9:7a:25:c5:20:13:9f:df:12:
         72:3a:98:16:6a:f4:c2:e6:34:a3:ae:3c:cd:65:8d:23:5b:4e:
         0a:64:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 10:35:06 2024 by rpki-client on console-ams.rpki-client.org