Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa
File:                     3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (raw, json)
Hash identifier:          OysmZ5zUwkV9xJIpuPK0LvLoGPBS+DcLu2dEb5WHytU=
Subject key identifier:   4E:0E:9B:EF:98:67:DE:2C:72:33:E4:53:AC:0C:89:8B:C5:86:57:3D
Certificate issuer:       /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial:       19815E4D7CA2006899B07E64CA858ED221D89C7D
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa
Signing time:             Mon 31 Jul 2023 00:08:15 +0000
ROA not before:           Mon 31 Jul 2023 00:03:15 +0000
ROA not after:            Mon 29 Jul 2024 00:08:15 +0000
asID:                     133839
IP address blocks:        103.144.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
                          rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 02:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:81:5e:4d:7c:a2:00:68:99:b0:7e:64:ca:85:8e:d2:21:d8:9c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
        Validity
            Not Before: Jul 31 00:03:15 2023 GMT
            Not After : Jul 29 00:08:15 2024 GMT
        Subject: CN=4E0E9BEF9867DE2C7233E453AC0C898BC586573D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:fe:51:ce:15:ad:cc:35:36:0f:d2:f9:34:
                    04:6d:1d:a5:10:85:26:3c:cb:48:bd:a4:ca:c7:4f:
                    ed:14:f4:4c:08:f3:07:8a:77:bb:05:d6:a9:9f:90:
                    e0:f5:59:19:9d:37:a2:d0:c1:f0:83:96:27:f1:63:
                    1c:54:23:08:b8:4b:7f:25:94:14:5e:34:69:97:2d:
                    65:b0:dd:29:f4:93:f0:09:32:2e:be:51:5e:73:74:
                    be:e8:01:8f:6b:44:e5:20:32:a0:b9:ab:85:dc:8d:
                    79:71:71:9c:5a:ae:d1:03:01:62:e2:72:b5:fa:40:
                    e3:74:22:99:2c:c1:f2:b5:1d:bf:46:db:03:4f:b9:
                    a1:69:77:5a:80:c9:c5:cd:5a:8b:6e:c5:11:fc:0c:
                    b6:84:58:4d:13:3c:6d:9e:2f:65:8b:7f:cd:84:32:
                    69:8a:4d:d3:9b:ba:23:27:ad:bf:22:71:37:87:0a:
                    97:bb:00:04:cf:e1:ff:df:60:81:12:d3:74:72:ac:
                    15:21:ee:d2:7b:14:31:c0:dc:97:33:e3:3a:04:7a:
                    02:6d:78:f1:5e:35:3c:8e:70:c0:fb:53:30:d0:89:
                    0b:cb:56:56:94:6d:2f:aa:e6:85:b5:95:51:17:79:
                    39:d8:48:70:99:ab:7a:21:27:68:9e:e8:c7:1e:68:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0E:9B:EF:98:67:DE:2C:72:33:E4:53:AC:0C:89:8B:C5:86:57:3D
            X509v3 Authority Key Identifier:
                keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:fa:40:54:c1:50:1d:41:24:b1:34:cc:e8:00:43:79:eb:
         6c:26:fd:b4:84:34:0e:c9:a6:59:d0:f9:e2:90:b8:cf:36:f3:
         a2:90:ef:30:be:c6:8c:41:79:3b:b7:39:1c:5f:49:79:78:5e:
         c2:89:83:b8:88:53:e3:64:64:eb:f6:6b:21:f9:53:bd:8e:fc:
         d1:da:8b:9d:ee:36:2c:f7:83:b9:9d:1c:90:12:c3:44:b5:86:
         01:34:45:3b:e2:c1:e5:a3:ff:17:42:46:2c:cb:c1:08:63:2f:
         e8:43:5a:f5:73:15:7f:ff:cd:72:cf:0e:29:b5:c2:8a:a7:fa:
         2e:18:42:5a:68:4a:5f:27:ec:14:36:16:5b:29:77:ff:4c:2d:
         24:ab:8f:be:15:25:b5:ee:7b:58:7b:33:6d:a8:36:e9:5b:8a:
         cf:f8:f8:7a:65:53:6b:76:be:a6:2d:dc:26:4d:a5:a6:e2:23:
         d5:50:f6:33:15:1e:25:88:72:c2:aa:14:45:64:bc:e2:da:f4:
         ed:d0:f5:c2:9d:ac:7a:24:01:c2:57:0e:bf:f3:e3:33:b4:f0:
         ec:c0:74:96:23:b6:75:66:59:74:a1:3f:82:ba:3d:7d:5a:9d:
         5f:4b:fe:ea:e7:d4:22:b7:20:dd:8e:4e:04:23:68:ce:4a:b7:
         85:ff:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 22:43:12 2024 by rpki-client on console-fra.rpki-client.org