Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e342e302f32342d3234203d3e20313338303933.roa
File:                     3130332e3133302e342e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier:          5yhsIEQvDBiWdm8up/aNoqHUawKIAOvpOinTsIQal1E=
Subject key identifier:   4B:E7:25:72:58:1D:E2:67:72:1A:70:54:55:7E:01:35:56:E6:6C:87
Certificate issuer:       /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial:       2C5B8CEAB97A1885DFDADF6B7D5CED2C3D1090BB
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e342e302f32342d3234203d3e20313338303933.roa
Signing time:             Fri 18 Aug 2023 14:00:01 +0000
ROA not before:           Fri 18 Aug 2023 13:55:01 +0000
ROA not after:            Fri 16 Aug 2024 14:00:01 +0000
asID:                     138093
IP address blocks:        103.130.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
                          rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5b:8c:ea:b9:7a:18:85:df:da:df:6b:7d:5c:ed:2c:3d:10:90:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Validity
            Not Before: Aug 18 13:55:01 2023 GMT
            Not After : Aug 16 14:00:01 2024 GMT
        Subject: CN=4BE72572581DE267721A7054557E013556E66C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:cf:e2:3e:16:5e:ff:3d:66:d4:c2:31:ca:
                    ea:24:a6:f1:e3:36:65:36:3b:63:36:f7:f1:b6:f9:
                    b7:88:d8:63:f2:02:93:71:a8:b6:ce:56:04:14:52:
                    6c:8d:85:af:fa:79:73:3c:3a:78:1e:5c:80:a4:ab:
                    59:90:9a:8f:56:bc:51:75:fd:b3:69:17:6d:af:a0:
                    02:b0:10:10:3f:b5:0f:1e:6c:64:5f:9a:03:93:4d:
                    5d:ca:51:7d:ab:f3:e3:e8:c3:e3:67:43:f5:f9:81:
                    01:6c:3c:58:53:1b:00:97:8b:db:e4:61:30:7c:a6:
                    c3:a5:27:0f:11:fe:87:f9:d3:79:9a:0d:d7:8f:fd:
                    56:b0:69:4e:ae:b6:5d:3e:6a:f9:b1:2c:7f:a5:08:
                    e5:c7:80:6b:fb:47:f1:e4:fb:01:0a:4b:a6:d2:63:
                    ec:55:ca:e4:0d:b4:55:ac:98:a5:7e:f2:f1:1c:d6:
                    ca:3b:3a:d7:30:c4:61:b9:20:ae:9e:9c:8b:3e:b1:
                    7c:e6:90:ab:4d:56:a5:79:cd:3f:91:21:c0:f5:86:
                    dd:b8:04:ba:a5:e4:db:f9:82:9f:1c:da:65:79:99:
                    51:f8:27:32:12:e2:05:ea:70:b6:8e:16:05:ed:09:
                    73:2b:db:fc:62:72:c3:22:e1:e1:31:b1:29:a7:87:
                    33:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E7:25:72:58:1D:E2:67:72:1A:70:54:55:7E:01:35:56:E6:6C:87
            X509v3 Authority Key Identifier:
                keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e342e302f32342d3234203d3e20313338303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:e0:be:1d:d0:10:d2:a5:67:d4:68:4d:fe:fa:90:52:94:01:
         ac:b3:db:63:d7:e5:bf:b6:7d:7a:46:b0:fd:66:8f:91:42:19:
         d5:d4:97:2d:c0:07:71:6d:da:62:3a:a0:18:cd:6f:17:a1:ae:
         40:48:b2:6a:6f:c7:ef:d2:99:05:9c:a2:1e:c0:37:27:17:ce:
         f0:37:3d:25:f0:87:c3:f2:0c:e3:68:5c:81:41:63:4c:42:41:
         06:dd:0b:b0:b0:87:ee:58:6b:bf:89:87:30:bb:e8:36:82:8a:
         73:79:0a:70:b3:c4:06:05:8f:75:aa:d5:75:9c:93:dd:12:c9:
         8e:67:d4:de:b5:11:aa:3f:0e:fb:7b:96:a9:c0:bc:57:df:8c:
         23:d2:f0:b5:19:a9:4a:77:18:5b:ea:52:23:7c:89:3f:d6:1c:
         cd:1f:e9:fb:89:1b:d6:78:07:1b:db:d8:77:4f:3f:a5:d6:a4:
         20:6b:a9:1a:33:f5:4e:e9:26:fb:6d:5b:71:3f:3d:67:ac:de:
         c4:8c:d7:2e:08:39:04:38:cb:6b:ed:62:88:dd:82:d3:b8:85:
         b5:e1:1e:b8:6b:01:b4:da:7a:4f:f2:b3:40:e1:96:09:66:7e:
         ca:74:2c:71:81:6d:6b:e8:5b:ca:10:bf:c9:b5:5b:e8:d6:37:
         73:3f:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:50:32 2024 by rpki-client on console-fra.rpki-client.org