Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa
File:                     3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa (raw, json)
Hash identifier:          8w8gBqe6ecmXkeblgSG9aHIvV5UhKiJ08r3AJRsuQGA=
Subject key identifier:   E2:37:12:BF:CF:75:A7:90:43:DA:65:B7:25:D4:36:D6:9C:0F:31:80
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       15D0EC00A4A5C8BBF9E937D05DC4A060C61E710B
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa
Signing time:             Mon 28 Aug 2023 11:00:00 +0000
ROA not before:           Mon 28 Aug 2023 10:55:00 +0000
ROA not after:            Mon 26 Aug 2024 11:00:00 +0000
asID:                     137330
IP address blocks:        103.112.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 16:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:ec:00:a4:a5:c8:bb:f9:e9:37:d0:5d:c4:a0:60:c6:1e:71:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Aug 28 10:55:00 2023 GMT
            Not After : Aug 26 11:00:00 2024 GMT
        Subject: CN=E23712BFCF75A79043DA65B725D436D69C0F3180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:e5:ff:0e:eb:12:c6:b4:49:76:30:e8:85:
                    58:05:e7:f0:c5:da:aa:76:48:a3:32:7c:47:ca:8e:
                    d8:c3:52:06:b9:4e:b9:33:e5:87:76:1c:52:a5:87:
                    0a:73:5e:62:3f:a8:fb:e8:f0:7b:d0:28:67:4d:ad:
                    93:3d:dd:c5:fa:b1:a7:cc:26:ac:88:6e:f8:2c:b2:
                    14:d3:5a:36:6a:86:40:ea:ab:48:9f:83:f0:a6:81:
                    19:9c:57:e6:c6:51:f3:57:83:be:8c:8b:07:2b:d5:
                    c5:23:d2:64:e8:d7:7f:52:3a:63:04:0a:2f:a9:3f:
                    93:d8:19:7a:f0:d1:eb:2a:29:8a:e6:68:a2:25:57:
                    28:59:6d:ee:13:0b:23:be:fd:f5:2d:e1:c1:4e:65:
                    b4:a5:0b:92:79:5c:10:33:5d:a0:a7:37:4e:c3:c8:
                    ca:ba:90:25:f2:27:6d:48:e5:bc:8b:3f:97:d8:15:
                    b9:35:3d:d1:28:c8:9a:54:da:d8:34:d2:f4:5c:65:
                    ff:dd:08:58:f9:bd:7c:79:fa:d6:f7:cd:fc:de:00:
                    df:d2:3e:49:a1:fb:1c:42:a5:c8:8c:56:20:21:98:
                    21:f8:c7:5f:cd:d9:66:88:98:be:d1:ba:7c:08:8c:
                    78:74:7f:fa:aa:9f:4b:55:6d:3d:a8:52:af:8a:86:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:37:12:BF:CF:75:A7:90:43:DA:65:B7:25:D4:36:D6:9C:0F:31:80
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133362e302f32332d3233203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:09:48:47:1b:ea:61:54:d5:48:d6:c2:57:73:1e:f7:02:c9:
         51:6d:3b:ae:50:86:ea:7d:06:2c:38:84:99:f0:72:01:e8:ea:
         ba:26:cd:92:94:7e:73:9c:a6:eb:91:ec:89:df:08:6f:f2:46:
         52:57:83:59:f7:09:3f:23:5f:57:85:1d:2e:8e:cb:e1:fa:da:
         15:26:3b:0c:75:b6:5d:89:69:a7:58:cd:84:71:e4:5e:07:5f:
         8e:bc:e5:7f:a9:cd:81:8f:a0:e3:c9:6b:34:e4:2c:27:51:73:
         0e:67:19:ee:36:1f:35:02:ca:9c:4d:d5:f0:89:47:19:21:12:
         de:37:d0:51:70:f1:24:57:45:87:d5:70:cb:bd:0e:1c:85:72:
         aa:34:76:09:fe:66:ce:c7:ab:8c:cd:90:bd:f9:9f:c9:e2:6e:
         70:f1:fc:9e:c2:2e:6c:e8:00:54:35:18:6d:94:5e:bd:81:ca:
         b6:67:2d:14:2d:b1:fa:cf:58:9a:47:7e:98:a0:c4:cc:f6:bd:
         6b:52:0c:19:34:43:2e:9f:ad:f3:7a:cc:e7:2f:09:2c:5b:f8:
         37:36:fc:5d:33:31:8c:11:12:f4:19:a2:98:b3:78:af:fe:aa:
         a1:31:4f:8d:f4:b7:05:13:61:f1:d8:04:dc:dc:93:b0:c2:0a:
         09:83:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 10:57:37 2024 by rpki-client on console-ams.rpki-client.org