Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa
File:                     3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (raw, json)
Hash identifier:          fIqJaN9C1+zShmL6PCQrtUAmG3456/h7RtmjhnVJBtU=
Subject key identifier:   22:CD:D1:EA:56:CD:9B:DE:2C:6A:CA:D6:CA:AD:05:C1:BA:FC:52:66
Certificate issuer:       /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
Certificate serial:       73BBE7129B1C34776B237C0768963AF41BD99D1F
Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa
Signing time:             Mon 31 Jul 2023 00:09:26 +0000
ROA not before:           Mon 31 Jul 2023 00:04:26 +0000
ROA not after:            Mon 29 Jul 2024 00:09:26 +0000
asID:                     137331
IP address blocks:        103.112.162.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl
                          rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:e7:12:9b:1c:34:77:6b:23:7c:07:68:96:3a:f4:1b:d9:9d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126
        Validity
            Not Before: Jul 31 00:04:26 2023 GMT
            Not After : Jul 29 00:09:26 2024 GMT
        Subject: CN=22CDD1EA56CD9BDE2C6ACAD6CAAD05C1BAFC5266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:fe:07:7a:4f:8a:96:e6:41:c7:e1:1b:c8:
                    8f:6c:5b:cd:44:2f:c9:51:71:3e:85:8f:d9:1f:4c:
                    c6:41:11:69:7a:c5:cd:a8:12:98:1a:e5:3f:1e:ad:
                    f5:05:51:ba:aa:33:3a:fa:89:7a:f4:34:44:12:5f:
                    48:7a:39:0f:b3:26:2f:52:0d:d0:e5:08:d6:4f:c9:
                    8d:75:ea:d0:a5:be:3f:f4:6f:9e:3a:93:f9:9e:95:
                    a8:47:c4:ed:0e:c6:27:41:36:23:01:e1:89:c1:2b:
                    1f:58:1a:95:b1:e8:98:3c:a8:e1:07:8e:f7:96:12:
                    bb:38:2d:95:6b:ad:2e:5e:f0:c9:4d:05:63:23:48:
                    1a:5d:fe:79:f7:b1:6b:3f:17:55:8d:c2:e3:f6:0c:
                    19:e9:8a:17:e3:88:12:3f:16:91:21:09:07:26:56:
                    e1:9f:2c:7b:e1:74:19:36:55:84:d0:a8:6d:1e:ac:
                    12:2f:72:63:68:36:4a:27:7a:37:72:36:29:f0:02:
                    c4:20:aa:98:30:86:d8:87:c1:ee:33:b1:2e:69:4e:
                    c3:7a:78:26:b3:a6:4e:77:e3:d8:56:51:7a:98:31:
                    4a:76:7f:f5:25:09:2f:a0:ea:4d:77:3f:8e:f1:5a:
                    66:9c:8d:20:a7:6b:48:7a:a8:59:0b:11:5d:c6:70:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CD:D1:EA:56:CD:9B:DE:2C:6A:CA:D6:CA:AD:05:C1:BA:FC:52:66
            X509v3 Authority Key Identifier:
                keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:9c:72:6e:ec:f7:c7:fe:ec:81:a0:48:84:d1:4a:9d:04:
         61:17:e5:cc:5d:af:8e:a1:60:7c:66:33:a4:f3:87:ae:18:d1:
         24:8c:56:db:ac:62:23:74:b9:9f:da:dc:b1:e3:5b:78:28:10:
         3c:bd:eb:69:25:c0:ae:3b:de:79:fb:2e:52:0f:5b:c0:05:91:
         a3:37:c5:de:bf:9d:9a:5c:88:b6:d7:8c:62:b4:8c:31:f8:20:
         9e:56:d3:91:df:55:f7:dc:73:c8:cf:86:de:82:a0:e8:d3:55:
         1c:08:ce:2d:84:76:8f:13:b9:c3:f4:2a:8b:5f:5b:bf:e0:57:
         04:4c:6c:04:c3:6b:40:14:90:cf:10:c1:f9:9f:c0:2f:1b:1a:
         dc:75:32:e7:9e:2b:c5:c9:a7:80:02:79:c2:3f:ff:da:80:e4:
         08:66:ea:ec:5a:03:c1:85:32:38:e1:51:80:53:b8:51:6c:4d:
         3d:9d:1d:e8:0f:5e:2a:b4:99:f3:d8:25:e2:dd:fc:63:43:09:
         a3:cd:72:ff:27:48:f4:36:b7:07:8b:df:bd:0e:85:6b:79:49:
         5b:1b:ec:39:b4:44:0d:35:9c:78:ec:4f:8d:37:3c:1f:07:ee:
         f2:41:ce:ca:11:87:0e:b6:74:1e:28:81:96:a6:db:ae:4d:2a:
         44:4b:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org