Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa
File:                     3130332e39302e32362e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          xbDBcz7h5MQ8p7Ub6USn4BOYLaC1Dw7K29tSjpxMTaY=
Subject key identifier:   F9:1E:2A:E8:DE:9D:69:FB:04:8F:6F:86:7B:C0:4E:A3:BF:5F:D9:23
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       6D3C0137E03F16E16F617DD29E4F2B9C5A0F9242
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:08:10 +0000
ROA not before:           Mon 31 Jul 2023 00:03:10 +0000
ROA not after:            Mon 29 Jul 2024 00:08:10 +0000
asID:                     63497
IP address blocks:        103.90.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
                          rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3c:01:37:e0:3f:16:e1:6f:61:7d:d2:9e:4f:2b:9c:5a:0f:92:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Jul 31 00:03:10 2023 GMT
            Not After : Jul 29 00:08:10 2024 GMT
        Subject: CN=F91E2AE8DE9D69FB048F6F867BC04EA3BF5FD923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:5f:84:d8:f9:5d:e8:14:6d:09:32:17:7b:
                    f5:fd:2c:96:bc:20:24:ca:22:0d:2f:c9:12:30:f2:
                    19:96:7e:45:e9:d8:3a:fc:50:6c:01:34:21:c5:12:
                    f0:d7:dc:87:89:43:13:62:22:1f:27:ea:cd:c8:3c:
                    0f:1d:4f:5a:ef:0f:2d:2a:ac:a3:2a:0d:08:99:7c:
                    c6:2e:5b:03:2f:76:1e:39:1d:b4:3b:8b:26:21:da:
                    a4:dc:5c:74:99:3f:eb:f5:96:22:7f:45:fb:30:a7:
                    6b:49:fc:8e:22:f7:37:47:36:5c:bf:d9:00:21:d1:
                    a8:92:a6:2d:16:9d:0d:c6:5f:19:58:db:54:be:5f:
                    dd:1e:4c:fc:37:b6:85:11:39:84:4a:ec:b2:4c:a7:
                    1c:38:8c:21:73:51:8a:63:b9:50:95:af:0b:83:fc:
                    6e:69:dc:d9:20:fe:cc:0a:06:5f:ae:04:5f:8a:ef:
                    81:56:bf:4c:1b:20:6a:bd:fd:d8:f6:d5:0b:cb:59:
                    29:e0:f2:b7:19:de:ae:24:1f:ff:2c:47:3d:ce:34:
                    ab:af:99:1f:86:bd:cb:b5:76:06:fd:ea:c3:1b:0f:
                    c9:2b:99:c3:3c:70:87:28:af:4e:e5:10:43:70:1a:
                    2a:58:ac:50:c4:35:b1:32:86:e2:ac:8d:8e:31:fa:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1E:2A:E8:DE:9D:69:FB:04:8F:6F:86:7B:C0:4E:A3:BF:5F:D9:23
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:de:74:37:ae:74:cc:97:78:83:94:cb:d5:e6:68:2f:ad:
         22:0f:d2:f5:d8:47:38:fa:08:53:58:8d:8c:d2:77:9f:49:55:
         ea:d7:85:32:c7:1b:03:24:0a:6c:6e:31:76:bc:75:81:c3:25:
         8c:34:7d:e6:f4:9b:e0:c9:22:bc:31:ed:23:84:76:a8:67:c9:
         b6:ac:69:da:a6:2a:a7:bf:e3:59:e8:ae:13:74:ab:e7:1a:42:
         08:ae:21:bc:6a:d1:81:19:ad:11:cb:39:db:d0:55:f5:2c:e9:
         e8:60:f5:b8:6f:df:b5:3b:2e:8c:f5:1e:98:56:fa:36:43:53:
         3b:f7:a5:b6:37:fb:c8:d7:5d:7d:ad:b0:55:c0:e1:5f:77:d8:
         c8:79:7b:35:f2:db:c3:f4:55:59:f4:50:8a:43:41:68:c5:c1:
         40:fc:14:8d:d9:2f:dc:a7:68:fe:ed:09:39:5a:11:22:cd:f2:
         a1:b0:fe:25:0e:01:ff:52:13:58:c8:bb:b8:c0:13:bb:6c:f3:
         4d:71:71:c9:6e:6d:d7:55:f1:16:89:e8:2d:e6:cb:37:88:6f:
         0e:72:4f:c0:2d:67:aa:b7:fc:1a:7a:b3:e3:ad:65:0c:ae:c0:
         60:26:3d:b5:83:00:0c:3a:2e:eb:84:6f:ca:79:42:4e:94:b1:
         85:a3:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 08:00:53 2024 by rpki-client on console-ams.rpki-client.org