Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
File:                     3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (raw, json)
Hash identifier:          1n5BIvoTU8i5eqilwGB9WwtsU3uy97yPi+6tXtViFCA=
Subject key identifier:   E8:E6:F3:F2:B8:A4:6C:E0:1E:69:3D:5F:D7:A2:6C:33:95:BA:1D:30
Certificate issuer:       /CN=90508FF980097E19CEF65ED72A856616A6F690AB
Certificate serial:       089C2F127FD72F8A4414CA897A0AE10844FDD41B
Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa
Signing time:             Mon 31 Jul 2023 00:14:36 +0000
ROA not before:           Mon 31 Jul 2023 00:09:36 +0000
ROA not after:            Mon 29 Jul 2024 00:14:36 +0000
asID:                     64315
IP address blocks:        103.119.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl
                          rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 00:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:9c:2f:12:7f:d7:2f:8a:44:14:ca:89:7a:0a:e1:08:44:fd:d4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB
        Validity
            Not Before: Jul 31 00:09:36 2023 GMT
            Not After : Jul 29 00:14:36 2024 GMT
        Subject: CN=E8E6F3F2B8A46CE01E693D5FD7A26C3395BA1D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:8f:52:b3:ee:ee:e8:1b:eb:5f:bd:34:8a:
                    be:c7:74:0f:5b:b7:07:31:b4:b0:0b:60:0c:90:83:
                    45:52:8d:60:48:da:83:20:d9:89:9a:74:84:c9:d0:
                    7a:29:fd:d5:f2:ac:06:eb:b7:84:f0:d9:c3:af:76:
                    b9:66:af:5d:5c:01:d0:64:62:07:14:d2:e6:e7:2e:
                    8e:c3:e2:b9:68:f0:7b:05:6f:4e:ec:a1:10:7a:23:
                    55:41:25:9e:80:5b:6f:e0:e4:98:b2:7a:3d:02:cc:
                    7f:00:fe:ce:9f:42:f0:cf:a4:36:0a:d6:f0:90:26:
                    5d:52:d0:de:42:8e:c7:b8:4b:93:9c:2b:ce:6c:f6:
                    7f:c2:d5:32:b2:13:1c:6b:4e:aa:87:d8:86:8b:65:
                    eb:96:ed:c5:b8:57:c7:b7:9d:54:35:cb:1c:41:ca:
                    18:48:1e:a4:dc:e6:56:f3:96:47:8f:dc:a4:c7:b8:
                    ae:a3:f2:03:7d:f1:b8:1b:61:f1:4e:78:57:ae:12:
                    f5:0c:48:96:f4:7a:1a:a6:85:54:1b:0a:21:5a:59:
                    0c:67:dc:c3:da:ec:94:1a:08:48:24:eb:e1:e2:49:
                    ca:c1:38:6e:fd:12:17:90:d6:97:2d:49:5c:f7:b2:
                    08:2d:97:68:2d:82:ba:a8:2d:e9:a6:ef:02:60:66:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:E6:F3:F2:B8:A4:6C:E0:1E:69:3D:5F:D7:A2:6C:33:95:BA:1D:30
            X509v3 Authority Key Identifier:
                keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:46:03:6e:a0:ac:3b:0b:42:1d:1f:ac:23:33:aa:bf:f1:08:
         15:e4:bd:27:c1:e1:ba:73:1d:05:a5:dd:53:f2:b4:61:04:ac:
         5f:96:8b:fc:0d:78:25:2e:34:c2:fe:05:64:50:22:24:5f:be:
         48:f2:4e:66:3d:3d:3c:0d:f9:73:d8:31:44:20:2e:6f:dd:c3:
         2a:7b:02:0f:8d:8a:d4:ab:fc:10:60:72:06:1c:b9:e2:31:8b:
         29:84:b0:63:21:2e:c6:e3:14:0e:30:68:6a:cb:0b:f9:ed:2c:
         9d:13:e8:e8:66:c9:b1:89:44:19:f3:80:ba:82:87:bf:88:25:
         72:59:0d:b3:3f:7d:22:fd:e3:9d:2b:2e:1d:22:7d:aa:b4:ff:
         40:32:80:1f:24:c7:5f:53:9a:f2:ec:b6:dd:e3:c2:a1:d3:be:
         2e:2f:57:d1:f5:b2:de:74:17:89:94:15:03:9d:21:a3:15:59:
         3b:1e:fb:06:ff:c1:a4:6f:be:78:58:ce:29:d7:18:fa:09:e8:
         78:b5:3c:9b:34:cd:46:b8:72:88:39:82:bd:00:83:1d:82:e7:
         0e:e4:74:3f:cb:7c:11:f1:80:c0:96:38:57:ec:a4:ea:da:63:
         e0:9d:b3:17:aa:d1:2a:89:c9:98:17:c8:df:b3:5d:5e:98:22:
         fc:a9:a6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:39:53 2024 by rpki-client on console-ams.rpki-client.org