Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa
File:                     3130332e372e312e302f32342d3234203d3e203338373838.roa (raw, json)
Hash identifier:          1aa3LFRMZig1ObmRqoMxeqtdpL9wtQYieZy5hhi4vPU=
Subject key identifier:   14:52:70:3F:96:EB:EC:6D:5A:13:3F:2E:4A:8D:A1:F1:17:28:01:D5
Certificate issuer:       /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
Certificate serial:       4E498013445D58EF1CEBE0FCF2AC71DDDE83C007
Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa
Signing time:             Sat 12 Aug 2023 05:01:18 +0000
ROA not before:           Sat 12 Aug 2023 04:56:18 +0000
ROA not after:            Sat 10 Aug 2024 05:01:18 +0000
asID:                     38788
IP address blocks:        103.7.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl
                          rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 08:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:49:80:13:44:5d:58:ef:1c:eb:e0:fc:f2:ac:71:dd:de:83:c0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA
        Validity
            Not Before: Aug 12 04:56:18 2023 GMT
            Not After : Aug 10 05:01:18 2024 GMT
        Subject: CN=1452703F96EBEC6D5A133F2E4A8DA1F1172801D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:30:df:e0:cf:47:d4:2c:da:56:cd:1b:82:
                    87:66:36:f8:ae:33:c5:13:12:35:48:46:f9:22:bd:
                    eb:24:d3:30:7d:88:78:ee:99:35:9c:22:4c:43:a3:
                    85:ef:cf:43:3a:ed:99:c8:93:56:b5:32:6c:f6:1a:
                    34:1a:32:7a:f3:a8:39:0b:3a:d9:0d:67:a1:de:1e:
                    72:c7:ff:3b:13:30:3f:4a:59:ba:cd:fb:13:01:3c:
                    ab:3f:5d:49:48:99:5f:f6:6b:ca:05:b1:66:5f:8f:
                    6c:4d:af:2c:c6:4a:f5:91:e6:e9:d4:50:f1:c0:c1:
                    2e:5f:21:6b:86:9f:06:75:b7:90:df:33:2c:3c:e7:
                    0f:27:3f:2f:00:8c:e0:f2:7c:4d:bc:a2:71:ea:13:
                    d2:21:35:be:86:e9:1d:02:11:44:23:6b:f8:60:ee:
                    15:ff:5b:b0:67:40:73:6d:54:a8:83:a5:40:bf:f8:
                    60:88:65:f6:e8:7c:89:25:d5:29:1e:9b:90:2c:6b:
                    9f:02:6c:ff:49:df:fa:f4:b3:79:bb:4a:67:0f:d3:
                    95:8e:a1:26:87:35:6b:68:ec:32:41:75:c1:49:f4:
                    50:f5:c0:33:c1:ae:08:1f:0b:14:6d:b1:a1:2d:89:
                    d3:30:2e:24:a0:b3:49:f7:a8:13:d5:a4:ac:bf:55:
                    9d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:70:3F:96:EB:EC:6D:5A:13:3F:2E:4A:8D:A1:F1:17:28:01:D5
            X509v3 Authority Key Identifier:
                keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/3130332e372e312e302f32342d3234203d3e203338373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:34:23:e3:d8:5d:c8:62:2d:54:c1:e0:72:97:fd:86:d7:73:
         0e:e9:30:72:b5:bc:b5:a9:21:5b:12:f8:b2:a7:c1:f6:0a:e7:
         e4:14:92:56:f4:f0:0e:b0:06:ef:25:f6:db:a3:ff:44:e2:6c:
         fd:eb:c0:7a:d3:da:2a:5a:06:45:d5:9d:cd:26:b1:38:8a:e8:
         b6:9e:19:bb:53:5c:b3:43:fc:11:4b:b7:59:6e:94:b9:30:37:
         a5:0b:b1:3b:e4:fe:aa:87:02:ca:5e:2c:db:78:93:c8:e3:79:
         c0:24:7c:ab:04:b3:1d:0a:14:2a:02:9b:a5:46:50:06:49:e2:
         0f:63:f3:45:22:d4:30:73:77:bf:76:4f:c0:e2:3d:c2:ed:4c:
         2b:0c:5f:f8:85:ee:81:1a:91:94:ce:50:1d:a9:d4:07:7b:3e:
         3e:a7:7c:06:38:67:54:43:f9:52:62:d8:5a:a6:47:1b:e5:9b:
         95:2f:6d:1f:80:40:5e:b7:ff:1a:08:fd:a9:66:18:98:95:43:
         c3:19:8e:34:c6:f4:d2:2d:37:ce:76:c0:c6:e2:b6:75:3d:54:
         83:1d:ec:d8:5b:3a:6f:1e:f8:41:a5:9d:dc:a1:6b:49:a0:2b:
         e3:31:b7:cf:5a:b7:a4:9c:06:92:cb:43:2f:a4:85:83:45:f2:
         49:e7:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:27:57 2024 by rpki-client on console-fra.rpki-client.org