Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa
File:                     3130332e33302e3232302e302f32322d3233203d3e203338313438.roa (raw, json)
Hash identifier:          d/qApoJ7mr0vuB+K0fvN+XpOWjHSmWf3V1Wp1hQdcro=
Subject key identifier:   35:80:CE:59:62:C3:73:5E:C1:DC:04:68:14:1A:B0:D4:76:9C:4E:B5
Certificate issuer:       /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial:       38FC67948CE870E5B367013452EC47CBE43E3043
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa
Signing time:             Thu 17 Oct 2024 18:00:01 +0000
ROA not before:           Thu 17 Oct 2024 17:55:01 +0000
ROA not after:            Thu 16 Oct 2025 18:00:01 +0000
asID:                     38148
IP address blocks:        103.30.220.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
                          rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fc:67:94:8c:e8:70:e5:b3:67:01:34:52:ec:47:cb:e4:3e:30:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
        Validity
            Not Before: Oct 17 17:55:01 2024 GMT
            Not After : Oct 16 18:00:01 2025 GMT
        Subject: CN=3580CE5962C3735EC1DC0468141AB0D4769C4EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:82:ff:47:03:74:2b:a5:68:85:46:d4:56:
                    27:93:d3:51:54:98:a2:ec:6c:d0:aa:73:a3:29:f4:
                    cb:c4:da:44:ef:29:42:58:c7:86:1d:ea:74:5b:42:
                    df:47:76:03:c0:8e:0f:4c:d5:22:e9:0c:0a:4e:84:
                    c7:90:c7:78:cc:09:5a:af:ec:63:b5:a7:05:06:d5:
                    7b:cf:8a:44:6e:2c:45:3a:a0:f0:d7:dc:e4:3e:a7:
                    74:a2:a1:8c:23:b5:e1:d2:d5:f3:6a:c7:ae:11:1d:
                    ac:50:a8:fd:c0:21:e0:17:0a:35:cd:43:dc:09:07:
                    b8:03:58:29:f1:7d:5e:cf:53:d1:69:5d:6b:49:de:
                    a6:58:e2:3e:1b:0e:94:59:ba:82:41:81:8b:ff:6e:
                    32:db:02:ab:c0:38:b7:e2:99:65:66:13:b3:e9:fc:
                    d9:fc:2a:8c:f3:dc:93:79:79:cb:7b:7f:57:d4:12:
                    35:cb:f5:ed:bc:84:b1:3f:79:a1:a1:59:bf:b8:1d:
                    21:b9:6d:01:7d:a3:a2:78:02:36:06:e8:3b:e4:b5:
                    a0:a9:55:cc:07:9b:45:b4:b7:c4:56:67:6e:19:90:
                    52:99:e7:f6:41:55:45:22:e4:e4:ef:d8:01:df:2a:
                    df:b3:ce:4e:88:2b:d0:fc:f4:fa:f9:49:91:a6:29:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:CE:59:62:C3:73:5E:C1:DC:04:68:14:1A:B0:D4:76:9C:4E:B5
            X509v3 Authority Key Identifier:
                keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32322d3233203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:7b:fc:e2:f2:cb:9e:a2:a1:a3:4a:d8:bf:72:bd:a5:21:
         ae:88:bc:25:50:1d:4b:d2:14:87:94:85:15:e6:5d:7c:0e:00:
         d5:88:f9:96:9b:fd:ff:6c:f3:5a:ef:f6:32:30:db:e8:74:3e:
         c3:22:96:b6:fb:9a:9f:87:a4:ac:3a:a8:42:dc:ae:d8:43:81:
         93:ef:92:2d:bf:2d:a8:a3:98:e7:c0:d6:3e:2a:7e:08:25:0c:
         98:b8:92:74:5a:30:1c:4f:6b:23:5e:58:d4:c7:41:ac:57:69:
         14:46:4a:31:5b:3a:31:ea:b6:f4:82:a8:59:24:7b:45:cc:3a:
         89:26:e4:4e:ba:35:2c:cc:7a:65:82:b7:df:e6:54:7c:d7:0c:
         7b:27:14:4b:6f:b0:ab:f2:53:cd:65:5c:91:71:b5:09:88:17:
         c4:d6:50:3c:9e:18:09:54:c6:58:24:16:84:23:47:3d:3a:a9:
         41:68:35:cd:3a:d0:b7:2b:c5:b1:76:6d:d1:df:1f:bc:e9:a2:
         a1:ea:87:44:62:45:ed:91:59:d7:a9:c6:01:8a:28:71:26:d6:
         fc:e4:28:83:61:18:91:25:c1:7d:1a:cd:ac:3b:97:bb:a4:46:
         69:cf:2d:e8:02:c9:d3:40:66:c3:ab:f3:7e:af:13:ec:9c:0e:
         af:4b:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org