Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130332e32372e3230362e302f32332d3234203d3e203535363838.roa
File:                     3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          6sn1IVw1eIhaHfpBQapDJPCxqkms0Xi4zlimi+ErLnQ=
Subject key identifier:   20:BD:46:9C:4F:95:7C:DB:A9:EC:82:AA:1F:1A:6A:94:AA:F4:28:59
Certificate issuer:       /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial:       2B8D0A946250EF3252D88C39CC63D1E4347B165D
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130332e32372e3230362e302f32332d3234203d3e203535363838.roa
Signing time:             Mon 31 Jul 2023 00:03:10 +0000
ROA not before:           Sun 30 Jul 2023 23:58:10 +0000
ROA not after:            Mon 29 Jul 2024 00:03:10 +0000
asID:                     55688
IP address blocks:        103.27.206.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
                          rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Apr 2024 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8d:0a:94:62:50:ef:32:52:d8:8c:39:cc:63:d1:e4:34:7b:16:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
        Validity
            Not Before: Jul 30 23:58:10 2023 GMT
            Not After : Jul 29 00:03:10 2024 GMT
        Subject: CN=20BD469C4F957CDBA9EC82AA1F1A6A94AAF42859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:35:14:15:41:73:fc:db:3b:f4:c8:75:1f:
                    c6:3b:b2:99:7c:5c:0d:78:cc:66:8d:bf:f3:f2:27:
                    a9:ac:5d:f5:4f:74:7d:42:a8:99:4b:89:dd:56:48:
                    60:2d:4e:4f:e4:ed:98:50:69:6f:02:bd:14:c5:b8:
                    d4:78:32:f3:56:10:29:ec:63:b7:b9:1e:13:6e:cd:
                    25:df:11:56:ee:98:0d:52:91:55:d6:ae:62:4c:f5:
                    3a:6e:da:68:d6:2c:f8:a0:75:b2:d2:2e:35:05:36:
                    2b:56:49:3a:b1:72:29:7d:53:b7:6b:55:19:76:e0:
                    85:13:76:70:fa:68:82:b0:0f:60:a4:ab:6b:1c:7d:
                    68:b8:28:c0:c1:36:14:d9:47:8f:39:d6:e8:af:01:
                    d6:76:8d:fb:07:2e:04:40:71:62:4d:8b:c6:0e:be:
                    a6:6e:77:71:0e:4e:c9:5c:42:30:89:29:06:e0:88:
                    74:bd:d3:10:7a:d0:d5:b8:e8:5a:ca:7a:36:84:2c:
                    1c:50:7e:a5:25:fd:8f:05:e8:49:dc:a4:e8:bb:1a:
                    13:e1:92:d8:4f:5c:ec:5b:a8:05:3d:a2:34:c6:ea:
                    a0:fe:1e:1c:9e:08:c8:54:70:4f:c1:c7:0d:18:46:
                    eb:d1:2b:38:ea:8d:a3:b3:64:bb:90:7c:9e:67:de:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BD:46:9C:4F:95:7C:DB:A9:EC:82:AA:1F:1A:6A:94:AA:F4:28:59
            X509v3 Authority Key Identifier:
                keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130332e32372e3230362e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:e4:73:51:08:f8:90:b3:d7:05:41:b5:66:33:75:c5:90:
         25:65:48:99:28:55:00:69:70:ca:ff:0e:34:fc:5c:b6:05:41:
         8b:9c:51:85:53:1e:f3:aa:2e:d1:f2:2f:ab:89:3c:0b:74:e3:
         6c:d5:26:f9:71:75:79:0e:dd:ce:02:b4:b1:38:6f:43:7e:fc:
         e2:e1:41:05:4f:df:e9:a0:5e:91:cb:00:dd:7c:3d:3a:47:8c:
         88:30:99:5e:68:c2:26:03:04:54:76:19:40:a6:92:61:6e:f1:
         dc:20:43:6a:1a:a5:b7:05:bb:20:38:da:b4:df:90:25:f3:5a:
         82:1b:de:02:3c:bf:6f:fd:91:1b:7e:c3:43:8a:85:70:c7:94:
         15:79:6b:77:26:bc:00:ca:f1:ea:8d:f6:84:6f:e6:89:b2:c3:
         47:2d:0f:bc:29:a9:7f:32:2d:f0:4f:1b:d2:6e:95:b0:06:25:
         7b:3b:c5:57:3f:c6:6e:81:ca:f9:91:46:e1:56:ef:39:d1:20:
         c2:fc:3c:b8:f3:69:d9:b6:0b:cc:6b:3d:b1:7d:53:0d:c1:84:
         00:43:48:36:95:b8:df:65:29:9d:d1:5f:2b:36:fe:49:9b:65:
         4c:e8:50:cc:58:cb:1a:5c:da:14:a0:d6:e5:65:92:10:0b:8d:
         ac:ed:1b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 03:55:45 2024 by rpki-client on console-fra.rpki-client.org