Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
File:                     3130332e31392e3230382e302f32322d3234203d3e203435323934.roa (raw, json)
Hash identifier:          fC2bvvgG5U8l9Q1vc64tvgrtZi8gDm8M2g3GDgMJRHU=
Subject key identifier:   88:32:57:50:60:04:4A:D7:6D:2D:63:3B:6F:4E:3E:35:40:63:E4:4A
Certificate issuer:       /CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
Certificate serial:       6A797DE1B14E357696E6E5F770CA891E81CB12CB
Authority key identifier: 66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa
Signing time:             Mon 31 Jul 2023 00:14:38 +0000
ROA not before:           Mon 31 Jul 2023 00:09:38 +0000
ROA not after:            Mon 29 Jul 2024 00:14:38 +0000
asID:                     45294
IP address blocks:        103.19.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl
                          rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:79:7d:e1:b1:4e:35:76:96:e6:e5:f7:70:ca:89:1e:81:cb:12:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662AD5930EC54A484925409FC2E9C8D5C6E618E2
        Validity
            Not Before: Jul 31 00:09:38 2023 GMT
            Not After : Jul 29 00:14:38 2024 GMT
        Subject: CN=8832575060044AD76D2D633B6F4E3E354063E44A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:e4:36:24:3a:19:26:1c:61:30:79:52:dc:
                    1a:a9:7f:dd:15:eb:41:ac:36:06:63:71:2a:1e:fd:
                    c7:4e:7e:6f:b7:66:43:cc:4e:4a:c7:ef:e3:73:1d:
                    dc:de:40:27:bc:b9:ee:b4:74:de:da:c0:53:9d:c2:
                    72:3a:1f:fc:01:d9:cf:f1:93:7a:43:6b:1c:a3:a6:
                    13:85:b0:9d:ba:2c:a4:bb:bd:a6:2b:f3:a1:c1:f1:
                    66:d6:21:88:17:57:f7:ab:94:83:8d:56:e8:04:46:
                    97:ab:2c:b0:80:af:c4:be:c8:71:a2:9a:55:b0:df:
                    c7:4e:0d:c2:c6:83:7e:7c:77:47:61:c4:ba:a3:27:
                    9c:a4:89:23:16:92:ef:e9:a5:9c:7b:9a:75:42:9b:
                    75:2e:78:43:8a:53:75:3c:ec:fe:4e:8f:62:94:0d:
                    f0:e2:83:4c:7c:7c:b0:88:2f:06:c2:5b:cf:66:49:
                    4c:a0:a3:1b:01:a5:6c:44:4a:66:ce:78:d3:ed:cc:
                    30:c5:8d:00:d8:f3:48:ca:70:45:57:8d:bf:54:c2:
                    b5:26:f3:43:73:39:95:07:0e:5d:3e:95:ab:c9:d5:
                    57:fa:78:ca:40:21:ea:02:84:8e:2f:84:52:cf:5b:
                    fe:ae:5b:fb:cf:08:f9:7f:e6:8c:ef:b3:b4:9e:77:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:32:57:50:60:04:4A:D7:6D:2D:63:3B:6F:4E:3E:35:40:63:E4:4A
            X509v3 Authority Key Identifier:
                keyid:66:2A:D5:93:0E:C5:4A:48:49:25:40:9F:C2:E9:C8:D5:C6:E6:18:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/662AD5930EC54A484925409FC2E9C8D5C6E618E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/662AD5930EC54A484925409FC2E9C8D5C6E618E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64833074-330e-4aaa-8c00-040890a71a11/0/3130332e31392e3230382e302f32322d3234203d3e203435323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:8c:2e:ad:e4:07:34:9f:b2:ac:f4:8d:0f:99:a7:0c:8b:
         dc:ac:9a:32:5b:06:0e:2e:7d:a7:76:f6:33:80:73:45:c5:16:
         3a:6e:18:8b:f9:48:6d:93:a5:7a:77:5d:38:84:87:0f:81:1f:
         d2:a9:4e:dc:ad:d8:02:52:42:73:e6:92:e2:55:23:8c:02:6a:
         85:d4:35:ca:ed:ef:47:a4:9d:13:fe:cb:2f:ea:df:b0:d6:ec:
         88:bd:2e:97:61:8c:3b:91:4e:a2:fe:ed:14:29:c3:4f:9b:55:
         dc:cd:03:9f:64:2e:5b:a7:bc:87:55:7c:95:6b:37:b8:bd:eb:
         30:48:a0:1a:3c:84:b4:bb:60:7b:cb:8a:90:44:cf:c9:a5:0c:
         d1:09:c9:65:1c:d1:09:dd:8c:a7:6a:a0:4e:a9:fb:34:20:15:
         bd:df:87:02:14:c0:c9:9b:3a:38:2c:92:fd:62:2b:a4:a9:10:
         ac:50:f0:98:9d:f5:50:5e:21:77:f3:87:f5:37:35:62:bc:cd:
         01:c9:c1:85:67:3c:9e:a3:18:14:bf:74:d2:a1:f8:6a:f1:74:
         b6:a4:2f:46:e9:6f:a4:01:ca:b3:a6:8b:56:46:a6:ae:52:23:
         c0:04:36:38:93:94:8e:64:07:f7:0b:cd:a8:e8:1a:64:fb:78:
         17:54:3d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 22:58:34 2024 by rpki-client on console-ams.rpki-client.org