Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3130332e32382e3131322e302f32322d3234203d3e203435333035.roa
File:                     3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (raw, json)
Hash identifier:          7fPB9r+cZC0i/jamblAgwowDKz9CUVqBHZsiydCp8bc=
Subject key identifier:   D6:E1:26:4B:18:57:CB:13:9D:49:8B:A7:04:B2:BA:6E:AE:7A:80:0E
Certificate issuer:       /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
Certificate serial:       30A016BE1F7AD26CED38E30FFE22846B93101657
Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3130332e32382e3131322e302f32322d3234203d3e203435333035.roa
Signing time:             Mon 31 Jul 2023 00:06:20 +0000
ROA not before:           Mon 31 Jul 2023 00:01:20 +0000
ROA not after:            Mon 29 Jul 2024 00:06:20 +0000
asID:                     45305
IP address blocks:        103.28.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl
                          rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:16:be:1f:7a:d2:6c:ed:38:e3:0f:fe:22:84:6b:93:10:16:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD
        Validity
            Not Before: Jul 31 00:01:20 2023 GMT
            Not After : Jul 29 00:06:20 2024 GMT
        Subject: CN=D6E1264B1857CB139D498BA704B2BA6EAE7A800E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:e7:db:49:6d:56:1b:25:11:22:70:11:52:
                    7e:c2:ff:c0:19:b8:55:32:dc:b2:a6:3c:9c:39:c5:
                    b0:e6:67:30:7e:77:d6:9d:9e:8d:85:1b:7e:6a:8c:
                    f5:44:d4:b9:3b:94:6e:70:92:b1:2c:6e:3a:bf:60:
                    b5:e7:42:81:34:43:cd:da:3c:35:49:13:cb:a2:7b:
                    df:88:2b:bd:c8:eb:60:8f:3b:ca:08:cc:d9:31:c3:
                    c9:ea:2a:1c:61:66:36:af:a6:40:24:89:9e:14:c7:
                    38:18:01:34:be:7b:49:8e:cb:7a:ff:f9:ff:7e:4a:
                    fc:16:d0:9c:c2:10:cb:04:90:97:33:e2:bb:d6:b9:
                    84:01:00:8b:c3:7b:5e:7e:f2:13:d5:89:f5:9e:63:
                    59:5b:37:ca:dd:eb:a1:09:34:0c:9c:b1:e0:13:f8:
                    23:4f:a0:2a:1b:5e:75:98:24:78:c7:ce:23:90:f7:
                    66:c1:6d:ea:e9:3b:75:17:78:92:c3:86:07:59:db:
                    40:7d:e0:10:99:e1:63:65:0f:c9:13:2a:43:24:ae:
                    7d:26:27:e2:cf:d6:7d:21:e7:ab:9b:62:b8:8e:15:
                    63:7a:76:c2:f6:47:9f:59:f7:67:ee:10:3b:5b:60:
                    0f:70:cc:ea:78:cc:7a:e2:13:a4:84:6d:eb:cc:85:
                    3c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E1:26:4B:18:57:CB:13:9D:49:8B:A7:04:B2:BA:6E:AE:7A:80:0E
            X509v3 Authority Key Identifier:
                keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/3130332e32382e3131322e302f32322d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:0a:ca:ee:c8:d0:bd:41:22:53:36:ac:cd:08:24:3f:fe:
         3d:4f:99:5c:ce:e7:54:95:43:38:fc:d8:6f:b3:ed:a1:4f:ab:
         67:cd:3c:15:c2:62:a6:b5:24:a2:b5:6e:0f:40:3c:f6:bf:0c:
         c8:bf:ae:a5:99:b3:4b:d6:06:e5:b0:5e:be:45:74:54:e2:cb:
         37:2f:0c:16:fc:53:17:34:ba:57:0d:5e:a9:15:92:7b:e5:1b:
         ef:f9:8e:ed:20:b4:54:7c:df:ac:c8:7a:7b:98:51:a3:33:7c:
         ed:02:a2:e8:3b:37:d6:fd:d6:0a:b5:d4:0d:4d:e8:d8:25:95:
         06:e3:7b:d9:86:f7:06:1e:ee:ca:be:71:4f:d5:53:70:22:c1:
         06:bf:70:a7:31:9e:6b:06:66:0f:24:b2:6e:00:ad:0c:15:89:
         93:cb:c7:ad:67:58:c9:f2:65:ab:e8:92:8d:5f:9c:ef:4c:6e:
         87:a0:42:0f:cc:75:3a:a7:4f:e8:45:a9:5d:0b:19:41:ab:d0:
         4d:b1:0b:27:d4:db:60:c5:6c:17:35:94:3f:9b:d3:d1:08:e0:
         3c:dd:4f:28:3d:40:5f:ec:48:a5:87:49:84:8d:17:c7:cd:86:
         2f:e8:71:3c:98:52:25:6e:8a:40:13:d5:2e:27:4b:da:70:35:
         0b:f3:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 03:33:43 2024 by rpki-client on console-ams.rpki-client.org