Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
File:                     3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (raw, json)
Hash identifier:          pP4yZjmOpNXizyT/Y80dGxj1moGP/LM6FFg0R2XLfcw=
Subject key identifier:   CE:2C:AA:DF:74:07:B0:10:AA:81:15:12:03:76:6E:C9:6A:EC:E0:B5
Certificate issuer:       /CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
Certificate serial:       5C85B5E4D1515E222FA5ADE9B4E6083FAEAC7013
Authority key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa
Signing time:             Mon 02 Oct 2023 16:00:01 +0000
ROA not before:           Mon 02 Oct 2023 15:55:01 +0000
ROA not after:            Mon 30 Sep 2024 16:00:01 +0000
asID:                     147108
IP address blocks:        103.175.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl
                          rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:b5:e4:d1:51:5e:22:2f:a5:ad:e9:b4:e6:08:3f:ae:ac:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1
        Validity
            Not Before: Oct  2 15:55:01 2023 GMT
            Not After : Sep 30 16:00:01 2024 GMT
        Subject: CN=CE2CAADF7407B010AA81151203766EC96AECE0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5c:f7:9e:9d:03:a9:3f:31:88:6e:28:d3:0d:
                    ba:22:7a:da:2b:ef:d5:24:53:46:6a:f0:fc:20:6a:
                    29:1d:d8:68:e5:32:4b:1f:ca:a4:5a:93:56:c0:fd:
                    57:2e:3e:cc:c7:ac:90:ed:b5:c1:ff:31:68:00:52:
                    e8:bc:02:34:93:26:57:63:e1:2f:de:9b:e0:2b:b1:
                    02:6c:63:3e:69:7a:f2:b9:78:eb:8d:79:77:8a:7e:
                    af:7b:19:e8:c5:17:73:27:d2:48:80:59:c2:77:73:
                    d3:7e:b0:c3:63:16:28:37:38:21:a5:c8:3f:e1:23:
                    6b:eb:10:8c:68:d6:f6:be:63:6d:2b:38:5a:8d:37:
                    9d:c7:e5:11:aa:8c:a1:6c:8c:b4:16:7c:95:b6:24:
                    73:47:21:d8:b6:4e:90:65:87:31:a3:fa:23:cd:cc:
                    29:ec:99:39:29:5e:ce:21:a3:81:71:26:03:2a:77:
                    35:4c:c8:e7:0a:7c:a5:4d:61:a9:da:8d:65:d4:a3:
                    95:e3:5c:67:c2:6a:4e:c1:fd:22:24:ee:32:19:41:
                    33:03:ce:90:31:ab:04:21:ca:18:ac:1d:c9:f7:54:
                    a0:2c:fe:2b:a5:47:1b:3d:61:8d:dc:3a:61:2c:43:
                    8d:74:43:19:a0:2c:da:22:74:3c:19:c0:95:c7:2c:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2C:AA:DF:74:07:B0:10:AA:81:15:12:03:76:6E:C9:6A:EC:E0:B5
            X509v3 Authority Key Identifier:
                keyid:E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:b2:bf:49:00:6c:ea:26:15:f5:6a:7a:25:03:14:c6:30:56:
         a7:b7:ca:ae:6f:c1:1e:0d:d7:6f:e2:90:cc:45:51:44:99:cf:
         da:f0:fc:17:8b:c8:73:29:b7:1a:dc:20:d7:76:05:aa:82:a6:
         d4:b6:13:79:99:2d:1e:b1:ee:37:9a:b3:be:3e:ce:ef:32:bf:
         17:f7:14:17:fb:21:9b:b3:f5:4a:f4:17:7a:f4:c8:15:6c:ea:
         95:98:7b:05:40:a8:09:95:bf:c8:c4:83:2b:d3:cc:66:c2:f6:
         38:ff:bc:21:1d:4e:7d:b0:cd:c7:85:c0:79:8d:35:f8:66:9f:
         75:c5:40:ec:70:7f:aa:df:f7:5b:18:6b:9a:d5:20:0c:31:f6:
         b4:06:43:a5:5c:9b:f7:ae:c2:7d:91:31:c7:e7:74:77:f1:cc:
         9e:71:04:71:bb:c9:e6:65:db:22:95:05:06:61:02:b3:7e:ea:
         c8:00:7f:33:c7:13:bc:2d:69:83:4c:86:83:64:82:b6:8c:3c:
         0b:a4:9c:13:bc:7a:02:77:dc:40:df:a1:4c:55:64:b9:00:80:
         63:eb:45:21:38:02:72:68:84:0d:e9:ab:7d:b8:97:e1:bb:12:
         97:65:44:64:a8:fc:d2:0f:c8:f4:63:d0:d8:bb:93:f0:ab:3e:
         5d:f5:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 22:47:39 2024 by rpki-client on console-ams.rpki-client.org