Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
File:                     3130332e33302e302e302f32322d3234203d3e20313331373738.roa (raw, json)
Hash identifier:          9uTVa1P/Nfp/d2PQacfrJ6lROYi8ZktYBbZDbsawQcY=
Subject key identifier:   A1:A3:25:88:0A:5E:06:59:06:BB:73:6D:EB:9B:51:DD:9D:0F:D5:F8
Certificate issuer:       /CN=4C493E592E006837A093CD288BB55329BE38D2D2
Certificate serial:       5E80C781BE8C6A5877FD9FDB9663254BA435FE50
Authority key identifier: 4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa
Signing time:             Mon 31 Jul 2023 00:08:22 +0000
ROA not before:           Mon 31 Jul 2023 00:03:22 +0000
ROA not after:            Mon 29 Jul 2024 00:08:22 +0000
asID:                     131778
IP address blocks:        103.30.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl
                          rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 12:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:80:c7:81:be:8c:6a:58:77:fd:9f:db:96:63:25:4b:a4:35:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C493E592E006837A093CD288BB55329BE38D2D2
        Validity
            Not Before: Jul 31 00:03:22 2023 GMT
            Not After : Jul 29 00:08:22 2024 GMT
        Subject: CN=A1A325880A5E065906BB736DEB9B51DD9D0FD5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:00:3c:79:df:3a:14:9a:b6:7a:11:47:f6:75:
                    23:4a:cd:43:4f:0f:a0:bc:7b:31:3a:36:4e:01:5e:
                    95:9b:b9:db:ee:fa:92:a0:61:ca:c2:0e:36:12:13:
                    6f:cb:50:c5:00:80:9c:95:d0:aa:bd:01:f0:84:a9:
                    60:07:ab:07:66:b1:5b:c4:78:24:db:6d:e5:c3:7d:
                    5e:31:ed:de:da:cf:d3:ab:43:5f:6a:30:3f:76:1f:
                    02:76:a0:60:ee:ba:7e:37:e1:1f:0e:e4:d0:34:83:
                    c1:79:52:72:b2:18:ee:fa:73:01:17:b0:fe:2b:62:
                    24:b5:21:2c:e1:4d:94:c8:42:96:5e:9d:95:86:81:
                    cb:8f:22:cb:08:9b:65:8b:5b:f1:63:75:dd:aa:49:
                    75:a5:5d:b3:b8:57:7a:c5:5f:99:f0:29:f0:e5:b3:
                    24:71:b5:4f:07:13:6f:3a:63:84:67:7e:95:f6:78:
                    83:e7:0b:a6:04:b2:cb:ef:91:00:8b:96:ea:db:91:
                    fe:c1:f7:0b:ca:61:b3:e2:dd:ec:95:d9:94:b4:43:
                    b9:25:33:dd:37:bb:54:20:bb:7f:b6:fa:6b:fb:52:
                    25:12:bd:e5:38:22:a1:2d:3c:0a:45:a4:73:83:90:
                    b8:7a:22:11:87:a8:42:d0:98:26:98:17:53:0c:51:
                    4a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A3:25:88:0A:5E:06:59:06:BB:73:6D:EB:9B:51:DD:9D:0F:D5:F8
            X509v3 Authority Key Identifier:
                keyid:4C:49:3E:59:2E:00:68:37:A0:93:CD:28:8B:B5:53:29:BE:38:D2:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/4C493E592E006837A093CD288BB55329BE38D2D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C493E592E006837A093CD288BB55329BE38D2D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68002f3f-bf17-4e48-9e85-8436063313d2/0/3130332e33302e302e302f32322d3234203d3e20313331373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:9c:72:83:17:c6:cc:7d:20:21:38:d6:a2:7e:50:69:2e:
         1a:59:8b:e5:f4:58:1c:a4:71:6c:f5:1e:97:23:f9:a4:d8:7a:
         13:6f:d2:58:72:5b:28:8e:8e:c3:50:88:18:b2:62:11:02:cf:
         74:97:ae:4c:30:7e:24:0a:9e:df:8c:b7:08:b7:57:47:8e:5e:
         28:c3:f9:d3:8c:1e:91:21:95:56:55:81:8a:f2:2a:a5:91:d1:
         62:6f:52:e0:9a:73:23:c6:eb:3c:a7:ad:78:6a:45:4f:53:47:
         96:95:51:bc:67:d0:34:7f:fe:9f:e2:f3:c1:b5:f0:1e:fa:58:
         0e:95:dc:4a:14:4c:eb:5e:23:32:96:4e:46:b7:6d:23:56:92:
         d7:ac:d4:b5:b6:be:11:93:16:1d:f1:d1:fe:33:15:77:83:aa:
         72:20:60:00:a0:63:d5:7a:d4:7c:d1:7b:6d:f1:93:f3:00:89:
         35:27:d2:63:7a:a7:05:bd:d3:02:ff:79:77:40:44:9e:0a:d5:
         cf:53:59:38:0a:88:94:a2:70:2c:c9:cc:4f:be:f1:5b:9d:0d:
         59:6b:96:03:87:81:c1:be:6d:2e:b6:10:f3:26:ca:78:21:26:
         15:ab:f9:05:ed:68:1c:33:ba:77:c9:d3:f9:f2:0c:c1:11:1a:
         6b:12:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 10:57:39 2024 by rpki-client on console-ams.rpki-client.org