Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa
File:                     3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier:          9Pc0YDLggJwWJaYXQ3OoFN7it2eCxjtznO0GzK8pdWQ=
Subject key identifier:   EF:0B:1F:ED:81:90:E6:74:C4:DA:DD:4A:AA:F9:5C:41:95:FB:BC:33
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       758CF585CF3AA2DD4772B27245399B9FC26BD0B2
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa
Signing time:             Sat 12 Aug 2023 05:01:19 +0000
ROA not before:           Sat 12 Aug 2023 04:56:19 +0000
ROA not after:            Sat 10 Aug 2024 05:01:19 +0000
asID:                     38788
IP address blocks:        103.242.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:f5:85:cf:3a:a2:dd:47:72:b2:72:45:39:9b:9f:c2:6b:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Aug 12 04:56:19 2023 GMT
            Not After : Aug 10 05:01:19 2024 GMT
        Subject: CN=EF0B1FED8190E674C4DADD4AAAF95C4195FBBC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:23:9e:71:3c:1d:d1:0e:7e:1e:72:70:a4:
                    ee:7a:0c:17:5a:47:6a:1c:8a:5b:57:6d:37:51:d5:
                    a5:02:e2:d5:58:08:ad:9a:a3:08:7d:2c:64:05:50:
                    e6:e6:fa:96:f9:bf:c3:a9:56:1f:17:a8:ac:0d:18:
                    50:20:48:c3:19:f6:b1:5c:b1:b2:ee:5c:59:f5:48:
                    19:d6:67:2c:ac:6a:a2:e6:78:99:cd:4b:c9:cf:74:
                    50:ff:31:0d:e7:23:36:7a:3d:a5:1e:fb:4c:1a:96:
                    ac:69:c9:71:e4:e4:b8:96:62:33:b8:90:06:87:ab:
                    0a:a1:05:7d:0e:b8:be:af:3e:86:9c:e1:d6:2d:cb:
                    be:14:f2:7e:7f:5d:a5:1d:ac:9a:cf:da:bf:c5:96:
                    70:be:7e:75:c8:2d:0c:e9:3d:34:ac:d4:a7:92:14:
                    88:79:cb:d9:b5:84:e0:5b:e5:d6:48:a4:a6:80:eb:
                    7f:7d:a6:14:85:2c:5f:49:5f:aa:8a:20:9d:2d:f0:
                    ff:30:13:04:35:e8:61:d9:e5:ea:d3:80:f4:1a:2b:
                    a0:3a:ae:9e:8a:5b:ea:db:bb:90:46:80:82:28:29:
                    98:e4:f9:12:de:16:4b:b1:da:e3:66:df:12:2e:80:
                    c5:73:79:5a:fb:f6:bb:58:07:a1:a8:01:16:19:1b:
                    eb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0B:1F:ED:81:90:E6:74:C4:DA:DD:4A:AA:F9:5C:41:95:FB:BC:33
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:11:ea:e9:6a:3f:c9:4e:93:6a:8f:a1:49:10:1f:76:30:16:
         1e:fd:55:a6:80:0e:fb:0a:79:1c:56:be:3f:fa:e5:c4:1e:a8:
         03:c6:25:e9:51:94:22:1f:8a:65:f8:97:6b:39:99:15:91:df:
         1c:2d:2d:15:94:47:0d:27:70:f5:95:9a:ce:59:e6:36:5a:5e:
         a5:f8:70:e1:b4:7d:4d:ee:ff:af:f2:a9:30:f9:44:1e:cc:17:
         5a:69:7c:a8:99:0a:ee:58:0a:e9:16:38:d5:39:68:0d:92:ba:
         f4:27:7a:a1:cf:25:06:c7:50:a4:94:3c:45:29:78:20:7b:1a:
         da:7e:f6:f6:1f:b2:0c:f5:e2:1f:1f:f9:97:92:03:24:7c:08:
         b7:ba:2f:9c:97:a4:2a:30:1a:fa:20:90:e3:9b:f1:66:ed:20:
         3e:36:a7:18:ae:b2:4c:98:7b:90:63:02:b0:c6:ca:ee:30:bd:
         2c:e4:6e:17:02:2e:8c:82:fe:bb:0e:93:93:d4:77:68:6d:08:
         28:10:2e:4b:af:4f:de:a1:44:03:85:e2:ab:a2:87:32:da:2b:
         ea:b2:b2:6f:01:f0:23:84:26:94:ec:f5:67:a8:a9:26:65:5f:
         5b:d0:5c:7a:06:71:6d:b1:0a:74:40:b6:b7:b7:64:e9:55:44:
         22:63:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org