Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
File:                     3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          L2NWxGe8nxOTlws4xSMnbdvN27BJJ/udaRjtOrF24Zo=
Subject key identifier:   CA:01:35:03:35:50:21:BF:F6:45:52:E4:25:07:93:05:6E:90:75:C9
Certificate issuer:       /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial:       0C654D2628BFD264D0982EBE681BACADC75F0CFD
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa
Signing time:             Thu 10 Aug 2023 09:00:01 +0000
ROA not before:           Thu 10 Aug 2023 08:55:01 +0000
ROA not after:            Thu 08 Aug 2024 09:00:01 +0000
asID:                     133800
IP address blocks:        103.58.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
                          rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:65:4d:26:28:bf:d2:64:d0:98:2e:be:68:1b:ac:ad:c7:5f:0c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
        Validity
            Not Before: Aug 10 08:55:01 2023 GMT
            Not After : Aug  8 09:00:01 2024 GMT
        Subject: CN=CA013503355021BFF64552E4250793056E9075C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:fa:96:dc:92:5b:73:15:64:c5:0b:b9:77:
                    fc:b5:5b:0d:be:68:0b:ec:6c:35:fc:09:b4:dc:c5:
                    1a:1f:95:ac:43:0e:4c:7e:64:61:24:9d:25:74:92:
                    01:af:5c:a5:95:21:86:e9:e3:f8:27:b8:f6:96:bd:
                    d0:de:05:34:0b:ca:58:b9:8c:38:71:76:42:a1:d0:
                    10:31:7b:5b:59:07:3b:87:c3:1a:37:26:0f:08:06:
                    d7:7b:51:bb:23:9f:50:13:d4:e0:29:1a:75:86:54:
                    27:a8:c0:d3:c6:2f:41:2f:ab:1f:33:ef:87:ab:61:
                    c6:c6:1e:9b:91:e6:c6:b3:8c:79:a2:9e:94:4e:9d:
                    e8:f4:55:6c:26:62:5d:99:f6:88:d1:4d:ae:90:8d:
                    0f:5e:9e:83:42:5b:fb:0b:4e:c1:09:25:93:ee:1b:
                    ca:b0:29:87:48:4d:18:cf:f5:d4:a3:d8:08:c5:fc:
                    15:b3:3a:d0:8e:1b:44:fc:b4:35:03:08:69:73:84:
                    3d:48:01:51:c4:f2:c9:ee:8e:ee:35:6e:69:1f:d2:
                    5e:df:88:f9:6f:17:b6:29:37:d2:91:af:e2:38:c0:
                    b7:fa:08:94:ac:9e:5f:ae:01:46:6c:2d:de:73:73:
                    b2:cf:51:e0:43:45:a4:6f:51:1b:52:0e:3f:81:90:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:01:35:03:35:50:21:BF:F6:45:52:E4:25:07:93:05:6E:90:75:C9
            X509v3 Authority Key Identifier:
                keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:5c:d9:b7:46:cf:5a:f3:46:64:a5:a6:ba:f1:17:f7:21:
         1e:d9:91:15:2c:ad:57:3f:cf:a9:9a:bd:2c:ce:5c:0b:2e:73:
         3e:45:fe:7e:ab:7e:2c:fd:56:e0:c8:f6:e9:d5:28:2c:a6:fe:
         57:93:ed:b9:0c:bf:17:9f:92:c4:c4:5e:3d:fc:50:6b:ba:91:
         f1:7a:cf:a9:2f:ab:48:70:83:a0:23:23:78:47:09:bf:48:08:
         92:3f:31:29:78:61:9e:ba:47:64:55:11:fc:44:a8:0d:67:75:
         d8:83:4f:21:bb:77:60:08:ca:03:7c:00:06:f2:88:37:35:26:
         85:15:2d:ee:80:26:ba:1c:2c:78:7c:df:01:95:27:82:03:5a:
         78:b0:5c:b3:21:47:6a:da:16:40:c2:23:c8:8d:5e:77:f8:17:
         c1:55:b2:29:19:c7:5c:a1:88:e3:d2:de:78:9a:64:1f:d9:80:
         ab:c2:3a:1a:5e:6c:e9:1c:14:9d:2d:c9:0c:22:24:b5:8c:c8:
         ff:7c:b8:8f:19:1e:52:cf:b8:6a:23:97:d8:a1:ee:1a:df:3c:
         98:1c:89:ef:6d:93:25:a6:9d:c2:ed:27:8c:3f:d3:e1:52:17:
         94:6c:c1:6f:54:96:47:8f:0f:a7:d1:fb:b0:34:36:b1:a8:5c:
         d9:6c:c5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 18:30:05 2024 by rpki-client on console-fra.rpki-client.org