Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa
File:                     3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa (raw, json)
Hash identifier:          ajz2AQhcosOEQBt0BhxaHCyJVgPnaCAb9sbmKEj1UXU=
Subject key identifier:   DA:A3:6D:49:FA:4E:A8:3A:40:FE:75:9A:15:3A:83:48:4D:DD:21:2C
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       195AD846A676415F7A87A538F8A100EA821A5F49
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa
Signing time:             Tue 11 Jul 2023 03:18:47 +0000
ROA not before:           Tue 11 Jul 2023 03:13:47 +0000
ROA not after:            Tue 09 Jul 2024 03:18:47 +0000
asID:                     23679
IP address blocks:        103.103.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5a:d8:46:a6:76:41:5f:7a:87:a5:38:f8:a1:00:ea:82:1a:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 11 03:13:47 2023 GMT
            Not After : Jul  9 03:18:47 2024 GMT
        Subject: CN=DAA36D49FA4EA83A40FE759A153A83484DDD212C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:99:50:ee:a4:bb:2d:1e:38:11:65:99:bc:
                    48:47:b0:ee:8d:10:a6:cd:bb:e4:04:41:54:83:74:
                    a3:5c:94:dd:f7:95:04:18:d6:fd:70:40:5f:42:3f:
                    ac:33:59:59:28:75:8e:c3:12:04:e8:ac:02:5c:78:
                    3e:26:39:84:74:bc:06:41:20:be:6c:a5:93:1d:79:
                    f5:ca:47:b6:82:df:13:20:0e:c8:8a:bf:03:e1:66:
                    7a:0a:19:a2:7f:3a:0b:f7:50:7a:2d:dd:b0:2f:9d:
                    ac:c1:4d:fc:6e:9b:12:18:d9:8d:ea:5a:bd:97:aa:
                    4f:bc:85:fa:a5:f8:f7:c9:9d:b8:62:91:e4:cc:5d:
                    cd:a4:8f:71:a4:5c:61:56:32:f4:08:d6:de:a1:f0:
                    d7:59:fb:f2:35:21:40:75:72:d5:c3:26:4f:62:ba:
                    3f:58:2b:c7:6f:78:de:cf:95:e2:5d:df:4f:84:c6:
                    28:6f:1c:a3:0f:cc:ad:0b:de:0c:69:18:54:97:03:
                    0e:e9:6f:d8:51:7d:1e:76:a4:71:5e:74:a7:bb:f3:
                    77:e5:f2:45:90:13:4f:bc:94:bb:ab:4d:be:89:28:
                    d0:24:ac:b1:3b:a1:60:d0:a6:39:e8:10:62:6a:56:
                    c5:cb:dc:92:bf:0b:df:ad:51:d8:5b:cf:b5:9e:88:
                    52:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A3:6D:49:FA:4E:A8:3A:40:FE:75:9A:15:3A:83:48:4D:DD:21:2C
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:d6:17:12:92:f1:75:d5:5e:d7:3c:00:5a:e8:95:76:25:d0:
         e0:be:7c:84:93:41:cf:2f:a3:bb:d8:87:7e:8b:64:a0:b8:8b:
         2c:64:a6:9f:34:ac:89:b9:90:b4:7d:e7:2c:d6:c3:ea:05:80:
         f4:0f:70:f0:00:11:3a:aa:cf:80:49:3c:37:b0:b6:99:fe:d1:
         d8:13:f0:f6:ab:d2:5a:f3:2f:cd:03:da:ce:35:e7:1d:03:65:
         97:72:2e:fa:02:0c:31:9e:64:d4:05:92:75:75:88:14:ce:65:
         88:d3:84:1b:5c:4b:6d:d3:ad:90:14:a2:e4:f3:d8:a7:50:d2:
         50:ca:f6:e7:be:d5:25:18:4b:b3:1f:81:a9:f7:ca:50:88:b5:
         30:0b:52:d0:d7:de:70:04:c6:1d:ef:28:da:f6:eb:92:e3:bf:
         5e:65:c7:20:28:d6:2b:85:7e:a7:2e:b7:93:7d:12:7b:98:6b:
         1f:21:45:43:a2:7b:3e:c0:28:61:6c:c7:a7:af:9f:e4:f2:1e:
         90:b2:25:32:2d:f2:84:69:d1:10:d7:de:c7:9d:b4:ae:6f:d1:
         e2:dd:4e:8d:a4:29:07:ab:13:ad:e0:24:7c:34:60:74:eb:9e:
         a3:ec:7b:4c:7f:06:a5:03:7d:a1:b2:f1:86:78:a3:ac:09:76:
         e0:4a:d0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:12 2024 by rpki-client on console-ams.rpki-client.org