Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa
File:                     3130332e3231312e342e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          pRv/Iet7KeN603tvh99I9sbJeTshnNw6pDZ9eVe/pNw=
Subject key identifier:   D4:C2:7F:B1:70:AB:A3:D7:46:6A:DA:BA:7A:79:41:D3:98:0E:06:08
Certificate issuer:       /CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
Certificate serial:       3DF1F797E3078BCE27AC6308F3A065F6B4FC7324
Authority key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Aug 2023 04:00:00 +0000
ROA not before:           Mon 28 Aug 2023 03:55:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     4800
IP address blocks:        103.211.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl
                          rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 21:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f1:f7:97:e3:07:8b:ce:27:ac:63:08:f3:a0:65:f6:b4:fc:73:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7
        Validity
            Not Before: Aug 28 03:55:00 2023 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=D4C27FB170ABA3D7466ADABA7A7941D3980E0608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:98:da:e0:da:4f:cc:bd:52:3a:b9:17:eb:07:
                    53:4d:aa:72:4a:37:e0:2e:d1:94:21:f6:c3:97:83:
                    b3:7e:89:f4:8d:7f:c1:81:87:de:7a:61:78:79:1a:
                    92:f7:1c:fe:18:b0:80:74:ff:07:33:cc:c4:b6:0d:
                    4d:bd:b8:b4:12:ab:0c:29:1c:6d:d2:6c:cb:53:a7:
                    60:25:e8:f0:9b:5f:00:66:de:73:99:be:46:39:14:
                    a4:97:57:a6:a8:53:ab:c1:65:4a:6b:ca:af:79:84:
                    89:53:9b:a8:76:04:88:fa:c8:c9:00:20:79:ce:68:
                    1f:70:62:01:c3:a7:20:a7:1d:00:3f:40:5f:1d:e3:
                    fa:80:e1:58:96:b2:f9:f5:10:22:e9:c0:63:5f:d8:
                    95:62:0c:a8:cb:8a:8d:2d:d9:0a:28:b6:47:51:ea:
                    bf:91:3c:4c:31:d6:c8:04:b9:e3:88:74:73:21:92:
                    ce:0f:2c:23:6e:7c:ee:69:2e:e2:ad:30:e4:e7:80:
                    c5:68:14:65:83:70:ab:51:4a:84:1c:0a:43:14:37:
                    24:5c:a6:a2:d8:33:42:b7:d1:6f:ed:4f:56:91:2a:
                    3d:b3:b8:21:4f:d1:75:63:e3:c7:12:c2:f0:ce:0b:
                    1f:76:0a:85:98:b8:f6:b8:9c:dd:4d:56:3e:03:21:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:7F:B1:70:AB:A3:D7:46:6A:DA:BA:7A:79:41:D3:98:0E:06:08
            X509v3 Authority Key Identifier:
                keyid:D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/3130332e3231312e342e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:48:ad:60:56:d3:05:74:96:0f:5a:38:71:49:cb:80:47:bd:
         19:19:ef:1d:52:10:1c:b8:0f:0e:cb:a8:af:dd:2e:74:2b:04:
         e6:bd:05:48:25:68:1b:3e:b9:1c:76:1e:4a:02:94:06:d4:98:
         c3:66:67:fc:0b:25:d8:31:4c:e7:0f:9a:2e:df:d2:d2:6e:f7:
         a8:7d:46:55:20:eb:02:8d:d8:51:a3:d2:0c:16:18:82:17:a1:
         55:13:20:8b:5e:ac:9d:9e:2b:9f:93:30:56:22:d5:e3:0e:26:
         80:a8:ec:12:6f:9c:35:d3:e6:14:0a:21:e5:cf:80:e3:ba:d1:
         41:d7:e3:11:1e:bf:7b:71:e2:59:4a:60:cb:3b:e4:9e:3e:7f:
         cf:9d:3d:9e:c2:d1:37:f5:1c:6c:de:d6:4e:6a:d6:11:a3:1c:
         17:85:32:86:4b:61:e6:72:70:bc:77:0f:9b:70:94:06:da:ef:
         a4:52:93:9f:d8:43:fa:d4:57:a1:42:ac:c5:2e:30:60:7b:84:
         bb:dd:77:c9:dc:df:a1:98:7d:3b:f6:4c:a7:7e:0e:0a:fc:3e:
         1c:7e:3e:be:3b:ed:45:f4:31:12:b7:d2:cb:18:5d:05:f7:7d:
         56:84:6c:9a:11:59:2d:83:e2:3d:dc:d3:b7:9f:39:6a:cc:77:
         86:33:7c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:16:35 2024 by rpki-client on console-fra.rpki-client.org