Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
File:                     3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          B4p4syP/neXNaYGQ2K7SPSTlIXncUplfBUobZVMz2zE=
Subject key identifier:   C8:62:AD:ED:60:AA:1F:26:C6:46:E9:52:14:EA:94:87:9E:68:0B:CE
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       6EE2048D0BA40BE6D91316A09E6EF020260BF8A7
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
Signing time:             Tue 08 Aug 2023 17:17:35 +0000
ROA not before:           Tue 08 Aug 2023 17:12:35 +0000
ROA not after:            Tue 06 Aug 2024 17:17:35 +0000
asID:                     23679
IP address blocks:        103.238.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e2:04:8d:0b:a4:0b:e6:d9:13:16:a0:9e:6e:f0:20:26:0b:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Aug  8 17:12:35 2023 GMT
            Not After : Aug  6 17:17:35 2024 GMT
        Subject: CN=C862ADED60AA1F26C646E95214EA94879E680BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:73:85:09:e6:3c:c1:f2:4c:89:d6:78:cb:
                    7a:80:f4:33:89:d7:bc:7a:91:ef:05:a3:ad:a1:6c:
                    6a:54:a1:d1:e6:4d:78:70:a5:a4:be:5c:86:f1:80:
                    72:ae:da:48:2c:a6:bb:00:27:4b:fe:49:3f:c3:ae:
                    3c:62:a8:b0:56:0a:94:30:5a:be:27:44:db:93:ca:
                    38:65:6a:74:7f:7d:8d:65:6c:15:86:4f:fe:71:1e:
                    2d:ef:cc:a6:93:a1:a2:38:f4:44:f1:9b:03:ee:ce:
                    71:c8:b2:82:59:46:ce:62:cc:47:b6:c1:6e:75:02:
                    2b:67:69:a1:47:72:97:62:40:73:d8:f4:b6:77:70:
                    5b:30:cb:21:fd:76:51:58:78:8f:d4:19:84:60:0b:
                    2d:ca:55:e2:1d:8b:de:3e:4a:eb:39:f3:c5:a3:d1:
                    b6:68:05:3a:e6:9c:e6:e0:05:b3:00:ea:98:c3:7b:
                    bb:a8:6e:57:1b:5e:27:02:39:2f:53:26:51:2d:e9:
                    5a:55:b6:50:49:3a:e1:49:b1:94:96:62:3a:4d:16:
                    43:98:ab:c6:5d:ca:98:83:df:8b:5f:5e:e1:5e:4d:
                    44:59:c1:01:40:17:94:49:49:bd:1e:41:e2:27:2d:
                    21:3e:cc:bb:5d:bb:5f:62:56:77:f5:12:3c:62:a6:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:AD:ED:60:AA:1F:26:C6:46:E9:52:14:EA:94:87:9E:68:0B:CE
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b5:41:4c:37:31:86:93:8f:02:91:2f:1d:84:69:3a:9c:39:
         01:52:4d:2e:94:6b:7d:af:ae:e8:dd:f5:4d:57:be:15:73:4c:
         8c:9c:8c:65:b8:0e:38:17:02:75:48:65:7b:53:ae:7c:42:0a:
         28:46:fd:2a:7f:04:de:60:f4:f7:23:d5:46:d0:d3:69:eb:5c:
         fe:c9:bf:a2:63:d3:c6:7e:17:75:36:3b:e0:f2:36:34:6e:56:
         82:23:1a:9c:2d:2a:2d:99:01:a1:db:96:66:b8:d7:e1:8b:4f:
         fb:5a:3d:84:0c:e4:2b:f8:a3:03:32:0a:47:0a:b7:6e:e9:df:
         16:73:4a:ea:b2:11:25:c8:e4:16:6e:c1:0f:98:a4:dd:1e:5b:
         a0:c7:54:2c:43:12:17:8e:c5:77:e0:af:07:aa:37:c6:a5:9f:
         b8:16:ad:56:db:a2:31:b5:29:dd:8f:10:31:1c:18:10:f9:49:
         9f:35:1e:fe:1f:3e:5e:30:c3:d7:a7:40:aa:0e:b2:33:af:bb:
         16:b8:c1:c8:b4:6d:67:c5:43:d4:d5:d4:3e:2f:6d:a2:5c:3c:
         40:fa:24:88:11:78:17:a5:7b:65:d6:58:fd:31:4a:0d:1c:9c:
         29:28:35:e3:f4:8f:b7:74:6e:e0:0c:28:49:28:1d:74:f6:63:
         d7:8a:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:12 2024 by rpki-client on console-ams.rpki-client.org