Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa
File:                     3130332e342e302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          mtiW7XIytaVvwlYSiFXop6ax06gAzpgmx7SDLXTC1k4=
Subject key identifier:   FD:C7:6F:B5:F7:5C:B5:FE:9D:0E:0C:7D:AE:63:48:CD:AB:C3:65:C4
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       1B0EF031C153410DD3574F00254E948400739126
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 02:56:11 +0000
ROA not before:           Fri 24 Nov 2023 02:51:11 +0000
ROA not after:            Fri 22 Nov 2024 02:56:11 +0000
asID:                     18059
IP address blocks:        103.4.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0e:f0:31:c1:53:41:0d:d3:57:4f:00:25:4e:94:84:00:73:91:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 02:51:11 2023 GMT
            Not After : Nov 22 02:56:11 2024 GMT
        Subject: CN=FDC76FB5F75CB5FE9D0E0C7DAE6348CDABC365C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:0b:58:f8:b0:dd:a4:a7:56:94:74:2a:92:
                    4f:48:c2:a7:5c:ca:68:72:18:b8:39:91:ac:a6:5c:
                    05:33:96:a7:bf:01:dd:eb:c4:54:26:5c:1b:ac:a5:
                    12:30:46:f7:52:3d:e4:4e:45:53:e2:b1:2d:6e:df:
                    e7:3f:27:c0:56:6b:d5:90:a4:59:d3:3d:73:69:84:
                    b2:7f:7b:8c:24:a7:e5:d1:a4:37:43:95:b6:d8:78:
                    93:4e:f7:d0:d0:e6:69:df:53:84:0a:9a:bd:39:8d:
                    4c:9e:dc:e8:25:0e:00:96:fd:c5:ad:29:ca:98:97:
                    7d:74:10:41:cd:5e:fb:3c:22:26:e5:1c:e2:80:aa:
                    d4:3f:a9:3a:ff:3a:62:78:87:1f:e2:b2:89:2a:4b:
                    0c:9e:46:6b:93:a0:20:04:9b:e0:d1:e4:47:0e:53:
                    c5:81:4c:70:e4:90:0e:3a:37:5f:cb:e4:24:ed:0d:
                    12:ce:3f:9b:22:e4:77:7d:d5:8a:3e:1e:07:90:63:
                    95:96:89:cd:55:28:f2:a7:07:33:f1:63:b4:4e:5f:
                    34:1d:4d:9f:85:7e:64:57:b0:69:bb:78:1f:0b:1b:
                    e8:7c:5b:2a:da:69:ee:d6:a5:42:81:0b:43:e9:0c:
                    e1:c5:db:c6:47:c9:1f:6b:cf:8c:2f:0e:af:ac:d0:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C7:6F:B5:F7:5C:B5:FE:9D:0E:0C:7D:AE:63:48:CD:AB:C3:65:C4
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3130332e342e302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:16:d4:b6:80:07:8b:b8:f9:b6:49:6a:43:42:e9:14:ce:3f:
         69:6c:36:bc:49:7c:e0:ae:93:51:4a:c9:eb:06:37:af:1b:d2:
         af:e1:c8:4b:02:32:cd:be:a9:80:a6:38:d1:eb:6f:ce:12:2e:
         23:ac:71:20:30:19:ce:89:92:d9:42:89:2d:1a:39:f0:4e:c2:
         60:8a:a5:b5:4f:1a:70:99:68:3e:17:ab:1b:46:cd:bc:b4:b9:
         9f:71:0c:42:5a:ca:fa:46:59:30:44:84:11:8c:3c:82:f0:0a:
         26:97:da:45:5d:aa:b0:80:05:30:98:cb:32:44:94:e9:7c:87:
         d7:33:11:c7:e5:48:86:f4:e7:50:6c:1f:02:69:b6:74:32:0f:
         ee:ae:4d:b4:7d:da:39:14:f3:65:9a:c1:0d:d1:cd:1b:ca:e0:
         10:35:5a:2c:aa:2f:6c:39:22:d3:f3:20:e6:19:75:b9:23:94:
         50:90:d3:1b:88:55:ba:ac:0d:60:1e:ee:9c:19:f3:84:22:b2:
         02:6e:d5:6d:9a:d1:12:65:ec:eb:1a:cd:92:1c:72:bf:b3:d5:
         8c:0b:0d:3c:9b:36:5f:20:75:a1:c5:1a:8c:5c:87:95:99:14:
         d6:20:f2:b8:9d:f7:d0:83:a3:6f:f9:88:9f:04:dd:93:b9:b0:
         89:b4:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org