Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
File:                     3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa (raw, json)
Hash identifier:          cG0jqtiRaam6yK6FpJnEUJ21yH0pEKL1sDn6IHOg6BA=
Subject key identifier:   D1:90:06:E1:A4:C7:B2:60:41:FE:99:09:E6:5E:7E:3F:4A:0C:1F:90
Certificate issuer:       /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial:       4DB7C10046EA15F861F1C1D03313F6C77D559DE0
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa
Signing time:             Mon 31 Jul 2023 00:08:30 +0000
ROA not before:           Mon 31 Jul 2023 00:03:30 +0000
ROA not after:            Mon 29 Jul 2024 00:08:30 +0000
asID:                     141073
IP address blocks:        103.155.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
                          rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b7:c1:00:46:ea:15:f8:61:f1:c1:d0:33:13:f6:c7:7d:55:9d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
        Validity
            Not Before: Jul 31 00:03:30 2023 GMT
            Not After : Jul 29 00:08:30 2024 GMT
        Subject: CN=D19006E1A4C7B26041FE9909E65E7E3F4A0C1F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:a2:0c:3a:52:7e:b0:19:0a:71:07:b1:0e:
                    0d:c6:1b:78:e4:90:90:4f:d4:c1:10:f2:85:97:ed:
                    c8:5e:31:dc:90:c8:26:b2:8b:eb:d7:d9:36:fd:90:
                    52:e9:c6:d4:99:f2:5d:d0:ae:48:13:bc:38:d7:9d:
                    de:bf:83:8a:18:7c:bb:a4:1f:6c:84:ae:62:b5:ca:
                    77:6c:89:e3:09:c5:5b:46:2f:64:83:9b:a9:58:d9:
                    75:52:69:14:d8:09:51:d7:60:bf:a7:78:c1:16:ed:
                    97:be:18:10:cb:f6:c3:2b:49:6d:2a:38:80:a7:6b:
                    cf:63:a7:80:d2:e5:48:24:41:e0:70:6a:f4:cd:7d:
                    85:e4:e9:e2:ec:e5:0c:b3:53:df:70:f5:0e:25:d8:
                    61:d8:89:13:d6:46:3e:f5:40:18:3b:eb:4a:4f:12:
                    51:62:c7:c9:40:d3:4d:b1:11:8f:92:14:34:64:a2:
                    df:02:2f:3d:e7:5f:6d:1c:65:32:42:95:2b:77:d6:
                    3c:71:e9:9b:f6:54:26:47:6d:82:f3:f1:0e:6a:12:
                    0e:47:6e:39:b1:cf:b6:26:92:22:2a:2a:e5:d3:32:
                    9f:bf:4b:d6:71:64:2f:08:cf:b4:b8:11:31:0e:37:
                    3c:ff:ea:55:99:e7:62:26:77:54:24:60:ce:84:32:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:06:E1:A4:C7:B2:60:41:FE:99:09:E6:5E:7E:3F:4A:0C:1F:90
            X509v3 Authority Key Identifier:
                keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230302e302f32332d3233203d3e20313431303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:11:40:6d:0c:42:d4:9f:ea:ce:59:59:b0:80:1a:56:3f:c9:
         c7:9e:49:1d:a3:49:81:65:e3:b8:f2:63:bb:0c:b3:85:f5:ea:
         1f:19:75:4f:a7:2c:35:da:ab:ce:43:dd:f3:7c:e1:7a:fc:f0:
         fc:9d:22:7b:c2:5f:84:0c:bb:22:7d:7b:f1:a0:9f:59:c6:dc:
         6e:ef:87:25:28:21:db:71:5f:9c:67:ec:8e:e7:03:5a:03:46:
         cd:ae:f3:99:20:3a:14:8a:d1:a0:43:4f:6e:44:99:1b:63:92:
         a3:f8:9f:14:f9:32:ed:e0:78:52:e7:81:87:45:95:4b:10:a6:
         47:4b:5e:02:c8:11:44:bc:17:de:f6:57:e3:43:30:fb:8c:00:
         c5:0f:6c:43:40:72:c4:2c:c4:97:0c:99:89:5a:f4:20:f7:1a:
         02:cc:68:4e:e8:c3:a3:00:b2:b2:f9:7f:08:72:be:28:4e:c5:
         35:d4:4a:2c:c2:95:e3:81:06:60:a4:6f:42:d0:3c:51:c8:ad:
         cd:35:b6:b4:63:a0:6a:ce:e3:0f:10:a8:b3:d5:fd:14:a1:6e:
         e3:55:24:db:38:34:d0:8f:e8:23:1c:5b:ea:7e:13:49:8e:a7:
         bb:b4:48:ff:86:34:55:33:6e:d4:08:3b:71:9c:c2:06:5e:a1:
         39:4c:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:43:41 2024 by rpki-client on console-fra.rpki-client.org