Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa
File:                     3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier:          0RrPfbpk+xcbyzgWiGEqZ6C13BPi43+NYiRziFVAs1Q=
Subject key identifier:   8D:41:FE:03:AD:BF:E7:71:6C:2D:06:EC:2A:15:8A:FC:2C:89:92:3D
Certificate issuer:       /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Certificate serial:       2969CB8C79C07422FE205209BB7F7F24D8F5C778
Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa
Signing time:             Mon 08 Jul 2024 12:00:50 +0000
ROA not before:           Mon 08 Jul 2024 11:55:50 +0000
ROA not after:            Mon 07 Jul 2025 12:00:50 +0000
asID:                     56233
IP address blocks:        103.233.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl
                          rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:69:cb:8c:79:c0:74:22:fe:20:52:09:bb:7f:7f:24:d8:f5:c7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Validity
            Not Before: Jul  8 11:55:50 2024 GMT
            Not After : Jul  7 12:00:50 2025 GMT
        Subject: CN=8D41FE03ADBFE7716C2D06EC2A158AFC2C89923D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:30:43:5c:19:d1:21:b2:25:03:f7:d7:cd:
                    8c:04:3c:24:74:f8:66:98:7d:62:a0:d9:24:ae:ae:
                    32:85:f6:78:8e:2f:c6:fb:53:9c:7d:ec:a7:27:98:
                    92:03:03:17:82:7e:90:e1:64:48:bb:78:d5:e3:92:
                    83:a7:0a:43:6e:fc:6c:b8:77:e9:f8:fe:c3:41:37:
                    05:b4:67:f9:4c:55:b8:1c:45:36:94:d5:b7:4d:5b:
                    e3:d6:23:e1:05:c6:20:ad:4b:0f:37:f9:ef:a1:a8:
                    dd:eb:45:05:15:41:e2:30:a2:1a:78:90:cc:a1:26:
                    90:3c:a8:bd:bf:8c:2d:02:5d:41:1f:a9:68:d2:0e:
                    eb:a7:25:61:83:22:6b:fc:2d:ef:90:18:ef:92:50:
                    49:5a:eb:96:1f:0e:6a:c7:1c:cd:86:ab:d3:dd:33:
                    3a:1f:f2:87:93:dd:83:8f:37:b0:0d:ce:91:0f:f6:
                    7f:79:d6:f1:21:57:b4:3f:ec:f8:4b:5f:19:06:22:
                    16:4c:e3:e7:b1:43:d8:80:28:8d:5f:fc:36:d9:a8:
                    a0:fd:6f:ea:c5:3e:81:14:0c:3e:06:a5:46:9c:7c:
                    87:07:42:a7:a8:18:ff:28:17:9a:4f:58:54:95:97:
                    40:82:2f:b3:e9:d5:24:49:df:d6:3f:6f:ff:b4:a6:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:41:FE:03:AD:BF:E7:71:6C:2D:06:EC:2A:15:8A:FC:2C:89:92:3D
            X509v3 Authority Key Identifier:
                keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e3233332e38382e302f32332d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:13:06:a3:e8:d0:37:c2:fe:06:83:7e:b6:74:75:94:e3:4d:
         94:7d:d6:3f:79:0d:21:56:63:d2:3b:8c:ac:36:7e:98:db:3f:
         01:2d:49:d1:e4:29:6e:41:be:4c:3b:52:43:1c:cf:63:04:1f:
         7d:57:f0:b5:ad:66:6f:59:b7:82:b5:5b:64:6e:33:fe:03:aa:
         45:ab:96:10:10:e5:e3:0d:9e:f1:59:85:47:5a:cc:bc:89:d2:
         19:b7:32:c3:be:1d:f3:fa:22:2c:47:1c:0f:a5:d6:95:2f:ce:
         83:b5:78:2b:6f:c2:73:42:28:38:14:dc:e9:b7:07:30:81:30:
         f7:84:a1:c9:13:b6:e0:74:f5:0c:57:14:b2:83:14:19:8b:88:
         32:39:e7:77:92:ca:dc:f7:0e:2f:a1:0e:f7:d9:9d:b2:7f:50:
         25:6c:b9:81:f2:68:dc:b7:f8:0d:cb:1a:0b:b1:df:cc:ce:3e:
         e6:e5:81:56:6a:bb:13:fa:ce:f3:88:90:f3:a9:a7:1b:e7:07:
         7b:7c:3a:08:a4:ba:b1:7a:9e:be:4c:c4:c3:54:03:fd:a2:60:
         ce:ef:01:7a:6a:1b:db:ab:3e:a8:c2:1f:ff:39:05:45:8b:f8:
         f0:9d:8d:a0:5f:de:af:66:9d:bd:80:99:b4:f9:04:3d:6e:16:
         ad:9b:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:40 2024 by rpki-client on console-fra.rpki-client.org