Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa
File:                     3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (raw, json)
Hash identifier:          dTplUIV2j8ZYpxSDqYJ4z3SfZ9upKzrNaMtuTCrGf6s=
Subject key identifier:   DD:DD:23:94:D2:B0:42:34:30:F1:A8:2D:F3:FC:EC:AF:4C:B3:C9:C9
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       269EFF7EACD798BA9334EC0272215C00157CC546
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa
Signing time:             Mon 31 Jul 2023 00:03:44 +0000
ROA not before:           Sun 30 Jul 2023 23:58:44 +0000
ROA not after:            Mon 29 Jul 2024 00:03:44 +0000
asID:                     46032
IP address blocks:        103.148.110.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9e:ff:7e:ac:d7:98:ba:93:34:ec:02:72:21:5c:00:15:7c:c5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Jul 30 23:58:44 2023 GMT
            Not After : Jul 29 00:03:44 2024 GMT
        Subject: CN=DDDD2394D2B0423430F1A82DF3FCECAF4CB3C9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:e7:e8:88:80:74:4d:a5:5c:f9:44:81:53:
                    3f:18:cb:9c:27:a0:dc:ba:ce:9b:a2:79:81:ee:9d:
                    84:62:98:b4:80:23:36:01:89:44:99:29:16:84:38:
                    70:55:6f:3e:6a:72:ad:6e:1e:df:06:86:53:aa:8b:
                    f9:a1:12:16:a4:57:ab:be:23:6b:35:df:78:98:5b:
                    06:43:3e:bd:ee:b6:dc:76:e9:66:d3:79:17:36:94:
                    67:11:3c:dd:73:45:fa:8c:ac:0a:9b:e2:54:e4:1c:
                    07:00:fe:86:46:31:ff:93:4d:cb:d3:1d:3a:31:0f:
                    a7:1a:84:43:05:f3:eb:04:7f:cf:ee:08:d2:78:9e:
                    e0:08:55:9b:f8:19:87:39:5b:7f:3b:b4:97:47:a3:
                    fb:6f:f6:71:a4:41:25:8f:ea:40:27:28:8d:56:b8:
                    32:87:83:c4:38:c4:7d:53:4f:60:8d:e2:89:ba:48:
                    11:91:3d:72:be:1d:ae:a0:eb:a7:30:29:bd:dc:5d:
                    96:53:5b:73:b1:2d:60:e6:00:d0:fc:ea:be:b4:9a:
                    17:b4:db:e0:0f:9c:9a:8b:a1:2b:00:3e:fe:1e:95:
                    76:eb:ec:a7:5f:58:18:6a:2d:47:2c:b7:47:8e:1b:
                    25:53:13:20:32:6c:c2:02:04:60:28:97:e2:1a:ac:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DD:23:94:D2:B0:42:34:30:F1:A8:2D:F3:FC:EC:AF:4C:B3:C9:C9
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:18:62:37:e2:67:a7:9f:6b:a2:5c:f0:6b:3b:b4:8d:03:
         6b:aa:56:01:6e:83:52:f4:81:4b:9c:2c:4e:be:ad:ad:6b:87:
         94:93:92:db:55:f4:25:78:bc:21:e3:10:34:8f:b7:79:72:c9:
         1c:a4:7e:f7:26:d5:5f:10:ec:48:f3:88:46:c6:ea:92:59:8e:
         74:ad:eb:8a:89:fc:7d:9e:12:89:55:a4:a1:fa:19:9b:f8:41:
         3d:d7:7e:5b:67:22:6c:a2:85:5c:84:25:95:77:0e:c9:f8:09:
         9a:c4:d1:d8:bc:4f:6b:8a:6a:d7:a9:6f:ee:93:2e:d7:c8:fd:
         09:7f:a0:71:f3:25:7d:d7:eb:eb:1a:81:d5:0d:fe:dd:ac:19:
         81:e1:8d:79:e1:8a:93:f4:08:6e:29:c1:7b:18:11:03:d7:4a:
         0b:0c:43:04:c1:bd:a8:d6:fb:ca:92:7a:98:ae:8e:6d:ae:ec:
         e6:81:bf:22:60:0e:60:36:d9:2c:43:89:ab:98:77:cf:91:1c:
         cb:65:fa:cb:d9:84:ee:15:ec:77:1d:58:0a:69:21:fe:a1:3b:
         be:54:45:36:f8:99:56:75:6f:e0:34:6c:85:ce:c2:a2:f7:e0:
         18:f1:80:c9:73:b3:88:e6:4c:58:70:dd:51:5f:af:d1:ed:05:
         bb:dd:a0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 02:00:59 2024 by rpki-client on console-fra.rpki-client.org