Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32322d3234203d3e203233363739.roa
File:                     3130332e3233382e3230302e302f32322d3234203d3e203233363739.roa (raw, json)
Hash identifier:          ZucduNUfDNI0UYERUGx2RLwdT46HeotsjPa16Pq+JLI=
Subject key identifier:   70:4F:7E:C4:7B:63:68:C9:C2:3C:CD:AF:AB:B2:BA:7D:A0:2D:6B:D6
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       06366E43A9F4F27B7F5D43C3AF2A4C1B8EFD62CE
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32322d3234203d3e203233363739.roa
Signing time:             Tue 11 Jul 2023 03:17:48 +0000
ROA not before:           Tue 11 Jul 2023 03:12:48 +0000
ROA not after:            Tue 09 Jul 2024 03:17:48 +0000
asID:                     23679
IP address blocks:        103.238.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:36:6e:43:a9:f4:f2:7b:7f:5d:43:c3:af:2a:4c:1b:8e:fd:62:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul 11 03:12:48 2023 GMT
            Not After : Jul  9 03:17:48 2024 GMT
        Subject: CN=704F7EC47B6368C9C23CCDAFABB2BA7DA02D6BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6a:0a:52:80:0f:16:b2:38:b5:27:34:e3:ed:
                    ec:6b:e9:ae:ec:6e:42:20:fd:27:8f:00:48:79:a7:
                    f6:7f:d2:93:c8:93:07:80:b3:a6:a5:37:69:6c:03:
                    9e:b1:cf:dd:07:58:28:5c:50:77:2d:81:38:fb:f8:
                    bb:3d:d0:68:4f:7b:e1:0a:22:85:14:f2:9a:97:af:
                    a6:65:15:23:8d:53:77:84:ee:e0:8f:92:56:e8:52:
                    00:f8:4d:13:05:4e:52:61:0a:09:6a:37:c9:eb:51:
                    ac:84:e2:f0:84:54:32:77:5c:34:01:7d:4e:6e:de:
                    ed:60:01:0e:32:65:0d:dd:3e:f8:f2:18:82:02:ec:
                    d6:53:b4:fa:35:7c:2d:9c:53:c8:d8:48:f9:ba:a6:
                    9c:0c:f0:14:26:ee:f9:5a:c5:59:ec:26:c0:92:34:
                    4e:12:94:93:e5:ec:85:a6:4a:75:b7:8d:9f:14:d7:
                    c9:59:ce:3a:96:08:e2:b2:20:70:f4:ee:df:77:52:
                    22:dd:09:ac:55:ec:13:22:12:fc:4e:11:7d:0a:dd:
                    81:0e:66:90:d0:3c:4c:a3:2b:43:fd:c7:37:f1:ba:
                    df:3e:28:94:10:e3:1d:9d:cf:2d:6e:4e:b7:05:38:
                    37:d7:fd:93:96:d6:46:47:69:18:db:16:cf:4e:ec:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4F:7E:C4:7B:63:68:C9:C2:3C:CD:AF:AB:B2:BA:7D:A0:2D:6B:D6
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230302e302f32322d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:92:5c:e7:49:57:f1:88:46:02:85:37:b2:df:2f:07:eb:28:
         9e:7c:c9:b4:8f:72:f0:2e:5c:b0:35:d9:42:f8:0b:d7:37:cb:
         7d:17:11:3a:c1:08:ef:84:41:cd:f7:03:98:e1:73:db:b6:0c:
         fd:39:25:11:ef:de:20:74:c3:c3:ed:ab:ed:dd:26:c5:c9:92:
         6a:36:0a:bf:4b:da:c1:e6:ef:a0:16:8e:a9:57:ba:a9:58:5e:
         be:7d:8f:33:53:f0:43:06:b6:bf:b8:5d:9e:9d:4c:84:ee:91:
         58:61:13:84:20:73:bb:60:a7:9f:3f:be:3c:b5:47:bd:d9:3c:
         22:51:f6:4a:3e:f3:d4:a3:6d:5c:d0:0a:4f:87:32:7e:09:16:
         e6:4c:40:b1:a6:4e:4f:7f:97:ac:46:7b:91:93:cf:f3:43:ce:
         8a:c8:d7:e5:e5:a2:ad:c1:10:3e:9a:5c:be:2d:58:ee:50:78:
         4d:af:ae:7f:d1:4f:46:db:43:95:0e:38:c3:44:1c:c6:1a:3f:
         cf:1b:b9:2b:88:2e:48:0f:53:9d:85:2f:30:77:aa:60:32:3b:
         e5:5b:e9:ee:d1:a9:19:8c:07:8f:01:ab:92:93:96:87:4c:6a:
         5c:71:a2:fb:9c:ab:ec:8b:e4:be:57:73:aa:26:4c:93:7a:ac:
         ab:ed:31:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:12 2024 by rpki-client on console-ams.rpki-client.org