Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          e93/VcZExxObyVbvLOHKpBMceSpM/uzphTQhgTlLQiY=
Subject key identifier:   49:36:BC:5D:4B:4D:F9:8A:2B:E8:AA:4F:05:29:F3:2F:FD:E8:06:8F
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       0CABD02825933044B2063AF242B942B4F1B23544
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa
Signing time:             Mon 31 Jul 2023 00:02:20 +0000
ROA not before:           Sun 30 Jul 2023 23:57:20 +0000
ROA not after:            Mon 29 Jul 2024 00:02:20 +0000
asID:                     132642
IP address blocks:        103.19.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:d0:28:25:93:30:44:b2:06:3a:f2:42:b9:42:b4:f1:b2:35:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul 30 23:57:20 2023 GMT
            Not After : Jul 29 00:02:20 2024 GMT
        Subject: CN=4936BC5D4B4DF98A2BE8AA4F0529F32FFDE8068F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:55:63:8e:b5:d1:d7:34:13:06:04:04:bf:
                    16:66:32:06:eb:39:d1:69:02:4b:3d:6f:e2:29:22:
                    c5:17:5c:c9:49:5e:32:f1:12:67:0a:50:33:2c:a0:
                    96:f7:15:8a:06:1b:41:5e:02:c7:e2:23:c6:1e:c5:
                    66:21:47:58:98:90:3c:09:24:09:5f:4a:03:30:92:
                    20:2e:2a:d6:71:58:82:7b:fa:8e:20:3b:ff:a4:6a:
                    bb:52:75:f8:39:06:bd:44:f6:02:14:79:0b:a3:ee:
                    d0:fd:66:a2:16:9c:39:55:fa:4d:75:8f:95:f0:0f:
                    fd:46:b9:f2:b4:72:f1:97:82:d3:26:7a:98:2e:67:
                    75:c2:d7:4c:a8:be:22:35:5c:f7:8c:49:96:c2:1e:
                    1a:cf:11:6d:28:11:16:83:bb:53:31:76:68:c3:85:
                    b6:b3:4d:e7:8a:b9:36:d5:c2:ec:45:6b:4f:35:be:
                    e6:16:fb:70:7e:aa:b0:76:b6:97:2c:ab:42:67:c4:
                    fa:83:8d:91:83:3d:29:3f:8f:53:cc:82:76:69:bd:
                    0a:5c:1c:44:73:4b:d3:cc:f1:77:9b:74:65:8e:55:
                    50:72:b1:23:ed:e3:1a:b5:75:93:ba:98:b8:1d:6a:
                    8b:90:81:92:7d:b7:90:4c:41:3f:7c:83:68:eb:a6:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:BC:5D:4B:4D:F9:8A:2B:E8:AA:4F:05:29:F3:2F:FD:E8:06:8F
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:3e:af:a8:b7:e8:92:6a:73:91:be:c3:cd:f6:73:a7:d1:
         85:61:b5:dc:fc:10:83:f1:07:a0:35:b3:5d:93:ad:72:da:7d:
         38:d3:f5:c2:e6:40:c3:66:5d:f0:ed:9b:ca:fd:d7:ff:23:56:
         56:a9:44:10:57:17:ce:29:f4:b9:bb:7e:92:f5:56:4a:34:e4:
         80:05:e3:61:e2:66:80:08:ed:0f:8d:a4:a9:6e:14:9d:98:79:
         41:55:c1:fa:6d:8e:83:32:c8:f1:bc:9c:62:8f:00:4b:9a:a7:
         12:d9:cd:c5:be:be:fc:31:8b:39:ea:27:a5:43:be:85:92:f1:
         b4:29:25:a3:9b:c3:17:c6:0b:5e:21:bb:40:ba:78:7b:f8:9f:
         71:28:67:7c:da:ea:07:3f:7d:59:c3:24:9d:ff:54:dc:90:16:
         f8:81:58:52:9f:3e:9c:f6:fa:47:c6:0c:15:54:c8:b0:1e:d8:
         4c:d5:1d:71:b5:63:6b:1c:f6:bb:65:a5:e1:9f:1e:df:a9:7a:
         f9:24:35:e5:c0:f1:0f:b7:7b:a6:4a:1c:c4:a8:20:a2:4d:f0:
         ea:56:4f:10:00:d2:06:d5:56:a4:bb:97:23:00:f3:a1:90:2f:
         c7:05:be:09:bf:45:15:e4:13:13:13:f0:c3:bc:63:83:b2:0b:
         38:05:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:52 2024 by rpki-client on console-fra.rpki-client.org