Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
File:                     3130332e32382e3232342e302f32322d3234203d3e203538343832.roa (raw, json)
Hash identifier:          bMJE/451bd4d43sm+bBoQrgVdgOIGMatn+HNDruuSmc=
Subject key identifier:   E7:B7:61:B8:10:13:52:40:85:F7:15:79:93:C0:0D:0C:3E:95:3F:C2
Certificate issuer:       /CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
Certificate serial:       46B04F468DCB5DA4F9B5F19709FF921D43EBF54B
Authority key identifier: CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa
Signing time:             Mon 31 Jul 2023 00:03:19 +0000
ROA not before:           Sun 30 Jul 2023 23:58:19 +0000
ROA not after:            Mon 29 Jul 2024 00:03:19 +0000
asID:                     58482
IP address blocks:        103.28.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl
                          rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b0:4f:46:8d:cb:5d:a4:f9:b5:f1:97:09:ff:92:1d:43:eb:f5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC8674326238BE355329012E1CFDDB99EC5B6BA
        Validity
            Not Before: Jul 30 23:58:19 2023 GMT
            Not After : Jul 29 00:03:19 2024 GMT
        Subject: CN=E7B761B81013524085F7157993C00D0C3E953FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:b1:ce:c2:6f:9f:91:f2:b3:8b:02:75:7a:
                    7b:fd:5e:cc:e6:47:2d:a8:1d:58:32:fd:5a:87:81:
                    e7:0c:df:b8:5e:e5:af:db:82:19:89:35:9e:fc:d6:
                    e0:93:1f:38:18:38:47:aa:cb:c8:b6:38:4f:3b:43:
                    c4:0a:f0:c2:61:50:a1:ff:09:48:42:c4:0e:7b:c6:
                    89:12:d5:8a:7e:15:df:c8:16:df:d4:71:27:33:ff:
                    7d:94:9e:91:9e:cf:a9:4c:77:4a:7b:6f:bd:32:37:
                    ab:a2:cf:23:22:7c:28:c6:ab:ce:95:3e:d4:4b:d0:
                    37:86:38:9c:23:eb:45:d0:76:42:10:6f:e5:6d:c8:
                    0a:20:b1:86:f9:02:76:1f:8e:76:80:a0:af:cf:68:
                    89:60:2b:f7:ac:00:3a:72:15:39:11:f7:f1:55:c6:
                    e5:06:1f:32:c6:58:51:d6:d7:c2:c1:4e:81:a4:25:
                    55:41:16:43:cf:0a:67:7c:86:6b:55:62:79:53:03:
                    6c:4e:80:38:2d:46:3d:87:a1:59:4b:12:d5:7b:ac:
                    cc:5d:bc:66:74:f2:0f:f5:88:a4:ee:22:fb:5f:44:
                    4d:52:8b:a6:d4:d1:a3:64:9a:03:6c:8c:c3:ab:af:
                    a3:4e:67:0b:24:3f:be:d3:2c:c7:86:a2:5d:a4:2a:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B7:61:B8:10:13:52:40:85:F7:15:79:93:C0:0D:0C:3E:95:3F:C2
            X509v3 Authority Key Identifier:
                keyid:CD:C8:67:43:26:23:8B:E3:55:32:90:12:E1:CF:DD:B9:9E:C5:B6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/CDC8674326238BE355329012E1CFDDB99EC5B6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC8674326238BE355329012E1CFDDB99EC5B6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69e2f3bd-d4ec-42cb-aacf-adc2825c184b/0/3130332e32382e3232342e302f32322d3234203d3e203538343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:01:c2:eb:46:c7:70:c1:c7:19:cb:36:2a:53:d8:c4:9c:72:
         8b:d5:18:a6:6e:ea:d7:c0:2e:bd:05:fe:e6:17:0c:55:c7:fb:
         e6:6f:aa:9e:45:cd:c6:fe:4f:a5:c9:bd:e2:2d:f7:a9:de:bd:
         67:d1:c7:06:ac:19:a3:39:75:eb:0a:3b:2a:3d:d8:2b:b8:50:
         6e:8b:d1:a5:0d:cc:2d:eb:27:7d:2f:6c:9f:7d:1e:d9:8c:e2:
         4e:b8:f2:a5:88:89:6e:0f:fa:69:78:41:ad:34:2b:45:0c:94:
         67:7e:19:ee:9a:a8:c4:c7:08:bd:95:b7:98:06:57:51:b1:95:
         29:f4:e2:28:3a:4b:98:3c:a0:02:3c:b9:31:b6:ad:8f:08:45:
         3c:5b:52:81:49:7e:9e:ac:2e:5d:e0:5e:97:c3:02:03:58:ed:
         14:a0:62:ad:b3:dc:d7:bd:1d:76:fb:8d:67:48:7b:ac:14:61:
         bc:5d:3f:c8:6e:92:da:ac:5a:4a:e4:eb:3d:10:b7:e8:26:bf:
         17:06:e3:2c:af:19:09:11:f0:80:f2:19:9c:98:ba:2e:9e:21:
         1c:bf:3c:e4:40:86:0b:b4:1a:7c:a3:a0:6a:1c:49:35:37:70:
         d8:eb:d5:32:d4:98:1b:50:26:cd:9c:50:5d:ee:75:79:30:49:
         72:7d:5e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 05:01:04 2024 by rpki-client on console-ams.rpki-client.org