Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
File:                     3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (raw, json)
Hash identifier:          Va4tPC22bM2R773KoBcoI7/GU5r/BBlbCAG8dUnwIf0=
Subject key identifier:   EE:AD:4B:B7:0F:FD:AE:38:56:7A:C7:CD:90:E5:18:F6:35:38:A7:98
Certificate issuer:       /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
Certificate serial:       469151EB1F9BBFA3285912E2ABB47B70CB42F7AF
Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa
Signing time:             Mon 31 Jul 2023 00:13:42 +0000
ROA not before:           Mon 31 Jul 2023 00:08:42 +0000
ROA not after:            Mon 29 Jul 2024 00:13:42 +0000
asID:                     58475
IP address blocks:        103.23.233.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl
                          rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:51:eb:1f:9b:bf:a3:28:59:12:e2:ab:b4:7b:70:cb:42:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98
        Validity
            Not Before: Jul 31 00:08:42 2023 GMT
            Not After : Jul 29 00:13:42 2024 GMT
        Subject: CN=EEAD4BB70FFDAE38567AC7CD90E518F63538A798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:25:5f:24:27:bd:4e:01:c8:5b:2d:4c:b5:
                    59:27:3f:71:37:9e:4c:90:12:53:fa:e7:93:40:14:
                    69:25:b4:a1:f2:69:f0:60:5c:34:d3:f9:d0:09:aa:
                    63:c4:6c:1d:f5:8d:2d:af:1c:3e:b8:44:50:d3:4e:
                    45:56:00:b8:89:74:a6:c9:77:c6:77:2a:de:21:30:
                    77:4f:19:d3:61:0f:56:a5:e9:84:cb:41:10:b2:93:
                    e5:b2:7a:78:c3:01:23:6d:ea:81:35:89:e9:61:aa:
                    52:4b:10:46:e8:c1:5e:f3:82:28:e0:21:08:22:41:
                    41:4b:32:b1:4e:d3:4b:15:58:7b:dc:10:c3:33:6b:
                    2c:43:24:30:79:95:c8:26:c9:15:cf:68:9f:96:ec:
                    a3:e7:25:e2:a6:ae:a6:9e:48:bd:ec:0c:85:8a:10:
                    31:7f:ae:74:a9:31:20:c5:dd:49:21:22:dd:5c:fe:
                    f6:4d:07:3f:fe:da:f2:33:cb:5a:f5:32:f4:3b:a9:
                    79:1f:52:73:6d:42:68:f1:12:7c:65:fa:6d:53:01:
                    ca:90:3b:d0:ac:5d:ce:47:c7:6f:14:93:16:06:e5:
                    14:00:d9:9e:98:aa:3d:d2:cd:f5:af:dd:46:88:19:
                    8f:a8:f7:7d:95:04:6b:25:37:9f:ac:35:97:e0:7d:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AD:4B:B7:0F:FD:AE:38:56:7A:C7:CD:90:E5:18:F6:35:38:A7:98
            X509v3 Authority Key Identifier:
                keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/3130332e32332e3233332e302f32342d3234203d3e203538343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:0d:5a:45:42:d4:78:a6:97:e6:04:0f:e6:73:e1:e9:9c:
         e5:89:d7:d3:b7:a5:22:8c:6e:b3:54:d1:df:25:b1:3e:a7:12:
         46:05:2a:8c:09:3e:6d:13:32:3b:15:b8:5f:c5:b7:69:06:76:
         cf:5a:48:df:a5:ec:88:f3:1d:d9:c2:df:a6:ca:6c:f7:80:2b:
         ec:01:1f:83:49:d0:5c:36:eb:ac:d1:68:f3:df:32:ad:7a:7e:
         ee:c5:db:43:de:1f:41:91:1f:2e:eb:fc:0a:b9:7f:ed:e2:b1:
         bd:e2:38:95:a7:87:5d:32:ae:ef:b4:5c:b8:a4:1f:3a:f9:c8:
         20:54:83:f4:f1:3f:f4:4a:52:40:2c:f7:08:db:1a:57:79:e7:
         9c:d2:71:40:e5:dd:07:77:cd:ce:68:a7:84:a2:6c:bd:d4:21:
         51:30:41:6f:f2:68:b2:d6:3b:01:79:21:ff:e8:1a:9a:b3:e2:
         27:c9:4b:9b:79:19:ee:f2:9d:3b:03:03:6a:ce:e5:67:96:af:
         68:ba:b0:cd:95:76:a6:f1:49:f0:47:0e:51:fa:27:b2:02:62:
         ee:80:7b:ea:46:9a:1e:55:3c:7b:e2:73:c6:4f:e0:04:21:f4:
         45:0a:d6:7d:a8:20:04:a3:10:63:2d:f8:ab:e6:a3:a3:a5:62:
         b0:c9:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 08:00:53 2024 by rpki-client on console-ams.rpki-client.org