Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa
File:                     3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          lpLAQq4/aSfNdAjl749DWgFLqjyCOmpPyHfDM8Rd+rY=
Subject key identifier:   C8:80:C1:44:43:83:8E:30:B5:48:02:04:3B:8A:7B:1E:A2:09:04:21
Certificate issuer:       /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial:       1C8CD7A567824C5B81C235972CF8D34414C6F83B
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa
Signing time:             Sun 24 Dec 2023 07:18:33 +0000
ROA not before:           Sun 24 Dec 2023 07:13:33 +0000
ROA not after:            Sun 22 Dec 2024 07:18:33 +0000
asID:                     134658
IP address blocks:        103.55.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
                          rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 18:54:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8c:d7:a5:67:82:4c:5b:81:c2:35:97:2c:f8:d3:44:14:c6:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
        Validity
            Not Before: Dec 24 07:13:33 2023 GMT
            Not After : Dec 22 07:18:33 2024 GMT
        Subject: CN=C880C14443838E30B54802043B8A7B1EA2090421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:5a:1f:69:b7:23:d0:c8:b2:8a:ca:4f:89:
                    50:6e:cb:46:94:55:f3:3d:93:32:55:39:74:07:17:
                    23:6e:d7:ed:d7:34:1b:68:43:8a:f3:1d:16:d2:07:
                    9b:77:59:fa:db:fa:19:65:97:4b:c3:56:5f:1c:43:
                    a5:7e:3e:89:da:ca:b1:ef:70:fe:01:db:6b:61:0d:
                    13:21:ff:cf:0c:7c:26:c2:f2:65:dd:15:64:bb:a2:
                    90:92:3a:33:73:8c:87:d0:c6:66:4f:98:24:45:0d:
                    e5:c2:0d:a6:96:80:b3:c6:c1:44:91:fe:bc:e1:f1:
                    62:bc:2c:3d:1f:03:81:df:4f:d5:5d:41:0b:05:2b:
                    73:13:21:2b:38:06:5a:0b:ca:6f:bd:f9:a4:58:0c:
                    73:9c:de:12:27:4a:43:86:84:41:1b:74:21:69:76:
                    73:2e:f1:14:bd:5a:4d:76:5c:f4:36:a2:c1:7d:00:
                    5b:03:1f:88:b5:9e:35:12:be:69:e6:90:3b:cd:9a:
                    c1:4c:5f:72:03:80:0f:23:ba:84:fe:ed:a2:35:f0:
                    dc:af:4d:a8:6a:71:31:bd:d7:a5:24:df:83:03:7d:
                    1d:3d:d4:7e:c6:e4:c8:54:0f:00:5b:50:cb:fa:14:
                    b8:b5:9e:0b:d2:b0:5f:3b:24:99:22:fe:09:8c:e4:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:80:C1:44:43:83:8E:30:B5:48:02:04:3B:8A:7B:1E:A2:09:04:21
            X509v3 Authority Key Identifier:
                keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:85:fa:4b:35:6c:ab:4f:57:fb:8b:dc:49:a2:92:47:2e:3c:
         cb:5f:08:4d:92:15:be:55:47:98:c1:e0:13:f0:e9:66:64:08:
         f7:0c:f3:01:46:26:1d:c6:31:22:7e:23:a6:7b:b0:71:9b:bf:
         0c:7c:4b:e1:6e:f7:27:3e:3a:a4:26:14:cd:ff:63:be:f3:5a:
         53:6f:99:68:a7:54:a3:1c:22:62:12:f8:5a:0a:62:4e:fe:6b:
         99:2a:e1:ce:6b:e5:2f:ef:e4:54:50:00:c0:21:80:98:30:ee:
         30:0d:1d:fb:7b:dc:ff:11:bb:f2:1e:0d:2a:18:74:f3:88:40:
         69:57:d3:cb:9c:cc:3f:06:37:d0:1f:1a:85:cd:90:50:c0:c6:
         d3:80:df:1b:34:5d:a8:5c:54:2d:4f:81:17:4b:ad:b5:88:97:
         ef:ef:29:00:8b:23:01:0c:84:4a:cc:97:04:85:5c:1c:41:95:
         67:ae:88:a5:a8:38:f2:25:a1:00:e4:47:45:76:b6:a5:26:4d:
         9c:e3:ee:89:a9:8e:7d:65:c4:c4:81:fb:58:15:cb:55:db:de:
         35:42:71:01:de:5c:65:e7:e3:de:72:ea:52:3f:22:5c:a1:17:
         c4:ad:f1:27:78:3a:6f:05:18:87:ea:8f:8a:98:dc:38:ea:4c:
         fe:78:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:17 2024 by rpki-client on console-ams.rpki-client.org