Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa
File:                     3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa (raw, json)
Hash identifier:          vljOpq7OvN6M93H7+9JV3DUYN07B73LWsiogMwNkg/4=
Subject key identifier:   D9:82:45:13:18:9B:D0:58:8E:C7:C4:87:54:22:30:62:81:F5:BF:9B
Certificate issuer:       /CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
Certificate serial:       1B2CF19ED0EB5777E2356F8ACF052EB7AE90A42E
Authority key identifier: F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa
Signing time:             Mon 31 Jul 2023 00:09:44 +0000
ROA not before:           Mon 31 Jul 2023 00:04:44 +0000
ROA not after:            Mon 29 Jul 2024 00:09:44 +0000
asID:                     136840
IP address blocks:        103.100.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl
                          rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2c:f1:9e:d0:eb:57:77:e2:35:6f:8a:cf:05:2e:b7:ae:90:a4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3
        Validity
            Not Before: Jul 31 00:04:44 2023 GMT
            Not After : Jul 29 00:09:44 2024 GMT
        Subject: CN=D9824513189BD0588EC7C4875422306281F5BF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:fc:65:67:21:84:08:46:5b:b2:75:06:b8:
                    cb:ac:a0:28:2b:f6:11:88:33:bd:a4:76:84:da:0d:
                    3e:ca:69:72:1c:74:b1:d7:f0:e8:d9:13:ab:ef:a7:
                    95:36:6a:49:86:fd:72:f4:84:16:f0:15:1d:8d:87:
                    34:3f:a4:08:ee:76:5e:7b:b5:d6:af:61:79:62:0d:
                    04:ef:26:86:2e:5a:91:1f:0a:7e:c8:59:2b:51:3d:
                    d8:f0:7d:2c:82:dc:6e:dd:5b:83:1a:eb:2d:8f:12:
                    e6:e0:54:f1:a9:c3:c9:a7:ab:01:b4:5e:06:3d:af:
                    29:dd:f2:15:17:1b:f3:5e:63:f7:a6:3b:a0:6b:41:
                    b8:a8:ff:97:d1:f8:48:ae:97:a8:a5:e9:e0:a9:69:
                    e3:56:b6:3b:fe:27:59:22:d2:20:d8:41:da:35:7a:
                    b6:a3:88:43:43:e0:aa:f8:30:10:ec:f1:c6:2c:5b:
                    7f:30:c6:5e:57:14:a7:56:7f:d8:8f:cf:97:81:c8:
                    31:ba:fd:a2:32:1b:88:02:2a:c7:05:b7:3b:5e:a3:
                    80:49:0f:79:da:7d:b8:d3:c7:b9:56:b4:8c:ed:21:
                    9d:18:0c:39:59:8b:01:b5:cd:1a:7f:13:4c:a5:ec:
                    05:2a:a9:98:d9:a8:f4:e0:09:e5:c1:4e:22:01:31:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:82:45:13:18:9B:D0:58:8E:C7:C4:87:54:22:30:62:81:F5:BF:9B
            X509v3 Authority Key Identifier:
                keyid:F3:F9:AB:30:AC:2C:50:B3:ED:F7:C9:1C:45:31:CC:9A:EE:9C:9D:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3F9AB30AC2C50B3EDF7C91C4531CC9AEE9C9DA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ef08900-f2c6-4d07-b694-d188baa3b8f2/0/3130332e3130302e3138332e302f32342d3234203d3e20313336383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:4e:25:48:87:2d:df:25:90:27:26:e2:41:31:73:5f:1f:77:
         13:e1:e0:8c:4b:cb:35:35:10:5b:12:f4:37:84:04:34:58:b7:
         e0:53:fd:9b:49:d8:24:4a:87:9b:ec:0d:46:23:b0:f4:b4:1c:
         5a:8a:c2:c7:82:dd:df:bc:50:fb:1a:86:7f:5c:db:cc:03:e5:
         a0:90:3a:4a:dd:f4:e9:ce:20:33:da:8d:6f:af:0a:30:7b:03:
         fa:be:e0:f0:c2:39:ec:19:8e:1b:2c:a3:88:dd:43:64:7c:70:
         b1:bb:ac:97:cf:78:c3:af:04:84:5a:af:42:20:eb:46:81:ca:
         6b:be:8f:be:76:f7:f3:31:e1:da:11:e5:82:79:dc:df:3c:fb:
         5e:c7:fb:d5:a3:1c:57:1e:18:de:e3:68:fb:a2:65:63:31:fa:
         09:d6:96:54:45:d9:78:a4:6e:41:c3:4f:be:04:ac:63:7d:91:
         b6:07:a5:69:9a:64:19:30:9c:bf:36:d3:84:0a:c3:59:ff:19:
         9f:a5:43:c0:7b:16:5c:d0:b0:39:17:de:db:79:2e:70:2b:2e:
         28:5a:1d:d1:75:48:67:8a:a9:bf:2d:bb:85:7c:b4:88:37:79:
         40:4d:af:31:4a:65:fa:c3:34:e6:a6:b6:a5:e4:3e:51:05:52:
         51:6f:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:41:02 2024 by rpki-client on console-ams.rpki-client.org