Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa
File:                     3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier:          tUBQwmNfTtd1ZRc1pL2Njk/ECLWut6S4/vSZi1KRM38=
Subject key identifier:   EA:56:6F:7B:B5:88:3D:F8:89:4A:26:E7:13:A5:26:C1:37:17:99:CB
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       11FC5EDF4B665C463A289FCA8487B69CE908F6E7
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa
Signing time:             Mon 31 Jul 2023 00:07:16 +0000
ROA not before:           Mon 31 Jul 2023 00:02:16 +0000
ROA not after:            Mon 29 Jul 2024 00:07:16 +0000
asID:                     136088
IP address blocks:        103.87.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 20:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fc:5e:df:4b:66:5c:46:3a:28:9f:ca:84:87:b6:9c:e9:08:f6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul 31 00:02:16 2023 GMT
            Not After : Jul 29 00:07:16 2024 GMT
        Subject: CN=EA566F7BB5883DF8894A26E713A526C1371799CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7f:c9:b5:ec:fe:16:5d:b9:36:d0:90:4a:e6:
                    03:26:dc:03:72:8b:84:9f:cc:0b:b2:b9:25:73:83:
                    d0:a8:f5:85:3f:16:16:28:55:30:d0:48:db:99:da:
                    03:db:e3:e9:2e:a8:b9:92:46:e6:02:63:dc:b7:75:
                    42:9f:6c:c8:12:7c:dd:44:c4:c7:9b:f9:5c:89:87:
                    03:c1:77:38:3a:0c:88:f9:fa:0b:dc:e7:d0:21:45:
                    27:8c:c3:b0:2c:a3:8f:a7:be:18:66:db:c0:96:a2:
                    62:13:13:5b:c8:d8:0c:c5:ef:70:3e:41:47:6a:d2:
                    e8:dc:16:0a:d7:1b:cd:d4:84:f8:1b:f5:08:1f:8a:
                    ea:48:ae:51:53:43:1d:b4:18:83:72:e3:1e:af:b9:
                    61:ff:b2:fc:74:b3:31:1a:22:02:2d:79:69:34:33:
                    d2:03:ff:b5:c9:31:56:7e:f7:2d:8b:54:bf:bd:39:
                    ef:98:8d:f2:5d:41:40:50:bc:91:67:28:a7:48:f8:
                    5b:4e:23:f8:bd:5c:d5:14:41:c8:9f:12:5d:55:5e:
                    c1:dc:ec:46:0c:6e:80:48:03:95:3b:6b:44:e7:4b:
                    93:f7:92:b2:8d:7c:73:7d:93:96:32:2c:3c:d9:54:
                    db:2b:2b:bc:35:26:bc:7d:fc:dd:b8:1c:f8:2d:5d:
                    93:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:6F:7B:B5:88:3D:F8:89:4A:26:E7:13:A5:26:C1:37:17:99:CB
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3232382e302f32342d3234203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:bc:27:9a:39:32:37:90:25:36:98:3e:0b:85:25:f0:53:
         74:2b:26:a2:12:31:71:92:3c:25:9c:9f:f5:eb:d9:7a:1a:30:
         0f:8b:9c:2f:89:7f:1f:b6:79:31:0a:5f:26:4c:ee:6d:af:41:
         6f:41:4a:29:26:f7:3b:2d:6f:31:16:2a:8f:5c:ae:30:1a:98:
         b3:5e:9d:d1:d2:eb:6b:b6:d8:d3:8b:0e:0a:1b:c6:23:4e:78:
         b7:e2:b2:97:4d:82:76:b5:ac:22:8e:b9:22:7a:a3:8c:da:f1:
         c2:06:b0:c3:ec:97:13:e2:f4:c0:08:f6:db:05:7e:d2:ab:9c:
         b8:31:88:8f:ed:f1:1c:76:83:fc:23:d0:5d:49:7f:44:04:7d:
         9e:3d:ce:bd:45:ef:c7:64:64:0d:4d:ba:f7:12:9e:c7:31:ff:
         41:9c:c6:95:e7:06:cc:a7:90:3e:82:ca:b1:3d:ec:2b:3f:88:
         20:f4:64:01:01:17:7c:31:4e:9a:71:d7:42:21:d7:df:42:c8:
         73:85:8e:26:21:ae:ba:53:2f:a5:7a:7c:c3:53:15:3b:45:62:
         7d:6e:79:d2:39:84:08:70:33:68:e4:0c:b4:42:3f:56:20:22:
         a3:f6:9d:d1:65:2e:f9:ed:43:1a:50:32:7b:28:bf:a6:85:c6:
         fa:6d:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:43 2024 by rpki-client on console-fra.rpki-client.org