Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
File:                     3130332e34392e32382e302f32322d3232203d3e203633383632.roa (raw, json)
Hash identifier:          xD5J1KsdNWTxj0ipfnq65tJY2HWNY+8NxRmlKPSGFtI=
Subject key identifier:   C0:FB:0C:0D:B5:43:44:2A:E1:E1:5F:EF:7F:FE:51:48:B4:23:A4:DB
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       280BFD1A5968C86C8BFA86937BCAAF2FCBF9F14D
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
Signing time:             Mon 31 Jul 2023 00:14:31 +0000
ROA not before:           Mon 31 Jul 2023 00:09:31 +0000
ROA not after:            Mon 29 Jul 2024 00:14:31 +0000
asID:                     63862
IP address blocks:        103.49.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 16:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0b:fd:1a:59:68:c8:6c:8b:fa:86:93:7b:ca:af:2f:cb:f9:f1:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul 31 00:09:31 2023 GMT
            Not After : Jul 29 00:14:31 2024 GMT
        Subject: CN=C0FB0C0DB543442AE1E15FEF7FFE5148B423A4DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2a:2c:6c:54:5f:5f:2b:6f:47:9e:cc:49:51:
                    bc:c1:81:c0:1f:da:fe:95:df:88:03:9c:2a:4d:6e:
                    ae:70:d7:55:b2:b1:3c:1c:52:a6:2a:e2:4a:a8:5b:
                    a4:2b:23:8d:5b:98:0e:23:30:24:5c:34:c3:6b:34:
                    65:e9:e6:ca:91:cb:37:02:fc:b9:a4:74:92:15:f9:
                    f3:73:ef:f0:25:f9:a4:cc:4a:13:79:57:7f:db:59:
                    1c:f7:a6:e5:38:51:39:f5:6b:e8:5d:de:24:5d:02:
                    94:b0:5f:15:fc:78:8c:a4:92:b9:1c:bc:54:dc:a9:
                    b6:fd:10:72:5e:d8:55:23:9d:bc:c4:86:e5:94:9f:
                    ce:39:73:20:7c:d8:33:cb:cb:50:34:f4:76:62:87:
                    d6:9b:6e:01:61:2c:80:d5:5c:5a:c8:42:f3:fd:6b:
                    3c:de:50:f8:5f:e9:d8:e8:47:fb:9a:91:a4:8d:37:
                    f1:37:d1:6e:72:85:53:09:82:c2:a0:7d:9c:4a:9b:
                    e9:3d:22:58:7c:85:1f:b2:ac:13:eb:b2:ed:55:ac:
                    75:f6:60:34:d9:0b:8a:d0:c1:09:5a:e8:54:db:f8:
                    f1:67:4e:0b:f2:ad:f9:d0:8f:ea:9d:2f:51:b9:1f:
                    26:33:12:71:c6:1f:dc:fb:38:55:1b:64:a5:66:85:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FB:0C:0D:B5:43:44:2A:E1:E1:5F:EF:7F:FE:51:48:B4:23:A4:DB
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:a7:2e:58:28:eb:69:22:ae:4a:9a:7d:76:51:55:87:57:
         52:e8:67:e1:55:7b:9d:7c:97:a0:cd:c2:3a:e4:ae:5f:d0:54:
         b3:3e:db:56:22:da:c5:b9:af:2b:16:af:61:ec:47:a7:37:eb:
         68:b0:3f:3b:2d:77:a8:e9:1f:9b:ce:4e:c0:70:cb:e5:bb:85:
         f5:f7:f6:04:93:72:8c:21:04:a1:53:2e:45:0a:e9:cb:1e:01:
         8d:6d:2b:b0:a6:9f:56:8d:36:da:f0:62:1c:67:c3:57:d6:6f:
         fb:b5:6c:66:ad:c3:9a:e7:d4:e2:8c:a1:88:4e:27:9c:e3:b0:
         61:b6:e3:db:34:c1:71:f4:0b:c0:e8:4f:1c:b9:c7:3b:59:6f:
         d7:c0:a0:cf:63:b3:47:32:9d:91:93:6c:16:43:6c:73:34:f4:
         7b:41:46:d6:72:1a:43:61:74:15:a2:29:17:b8:fa:1e:9e:bf:
         2b:63:60:1e:14:ee:9a:35:90:bd:98:6b:74:58:b7:c0:38:65:
         5b:d5:d4:4a:2d:a1:51:11:9c:fb:f1:01:be:5f:5c:c4:55:3b:
         ad:f2:a6:6c:85:50:45:ee:8f:6f:42:b6:44:9f:11:96:5d:b2:
         32:0a:12:df:6c:20:19:90:48:db:9b:c9:1d:b0:29:ec:4a:39:
         48:7c:f3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:34:43 2024 by rpki-client on console-ams.rpki-client.org