Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
File:                     3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          pf/92ZLdlLVR2EYOkBxTkWdBepUSif/qRX+A9DcUPF8=
Subject key identifier:   43:33:58:5B:A2:99:57:6C:F5:EC:8F:D0:43:74:FB:5A:7F:27:B7:14
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       2C4C459C06B7C9DBEB1CE020D08C1D9E226115C9
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa
Signing time:             Tue 08 Aug 2023 16:00:01 +0000
ROA not before:           Tue 08 Aug 2023 15:55:01 +0000
ROA not after:            Tue 06 Aug 2024 16:00:01 +0000
asID:                     131111
IP address blocks:        103.22.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 18:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:45:9c:06:b7:c9:db:eb:1c:e0:20:d0:8c:1d:9e:22:61:15:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Aug  8 15:55:01 2023 GMT
            Not After : Aug  6 16:00:01 2024 GMT
        Subject: CN=4333585BA299576CF5EC8FD04374FB5A7F27B714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:75:c3:5b:6d:45:58:18:a6:f6:66:ff:00:
                    73:20:c0:af:6c:7a:98:5b:c8:41:50:46:bc:5a:da:
                    f5:44:45:5f:ac:fb:03:e3:40:fb:47:5c:c9:4a:15:
                    4a:b6:37:c7:ca:ca:62:9b:75:14:9f:13:b1:cf:be:
                    6c:b3:20:76:9b:dd:88:51:58:38:14:10:18:21:b3:
                    cb:23:1b:4b:cc:a4:ef:33:00:b3:82:12:ca:e7:ed:
                    0b:79:66:8e:b5:05:10:b7:87:b8:53:56:1f:2a:bd:
                    63:1a:50:b8:af:28:4d:3c:cd:50:96:24:8e:68:14:
                    31:b3:e2:0b:d7:ac:51:f7:af:ce:14:7b:38:f3:20:
                    01:78:96:52:d7:47:b8:9c:e9:d4:c1:95:9b:bc:56:
                    d8:d3:81:fe:be:1a:61:1e:ae:00:21:fd:76:9d:b1:
                    b1:b2:80:18:e5:98:e2:d3:31:ba:91:ed:12:c6:2f:
                    29:fb:3e:77:66:ea:7b:70:5e:c2:ba:27:6d:d2:89:
                    4d:5a:f4:56:6a:79:f6:97:16:85:b2:88:35:a4:d8:
                    0b:37:a8:b8:6a:f6:35:05:7c:eb:d5:2e:1c:4a:0b:
                    ca:61:6f:a5:91:a6:cf:62:98:c9:82:62:2a:02:f2:
                    fc:21:4a:de:93:bc:d7:6c:29:84:7e:3d:ee:1e:6a:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:58:5B:A2:99:57:6C:F5:EC:8F:D0:43:74:FB:5A:7F:27:B7:14
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1a:37:af:64:ef:c4:5a:19:e6:20:b9:e9:73:89:38:e2:8a:
         df:1c:d5:e0:20:56:19:d7:99:df:6b:0f:81:fc:7f:36:cd:0c:
         2a:2b:88:c1:74:13:80:24:fb:e3:e1:13:99:6c:a4:b0:dd:e0:
         21:82:9b:91:94:a6:91:3f:f8:99:2a:3a:54:99:d8:dc:5b:3e:
         fd:a7:77:19:c3:f3:cf:50:3d:2a:c1:8d:ce:4d:fb:e7:cf:ac:
         ec:c9:35:71:63:e9:01:35:83:a7:13:95:ff:6d:fa:8f:84:e8:
         45:34:31:5e:5f:25:35:85:e9:88:76:48:ee:f9:ae:9a:5a:bb:
         52:ad:e3:b4:a2:76:fa:17:65:aa:99:1a:d0:e7:9c:49:78:7c:
         58:23:ff:9a:69:ea:17:64:4d:c6:50:03:8e:96:cf:3c:c2:aa:
         f1:41:ed:d7:57:2c:23:81:47:6b:98:6d:89:f9:c7:7d:24:7a:
         d7:83:09:c1:b2:ff:ac:07:b1:1d:b9:a8:69:6d:92:e6:eb:ce:
         34:c2:a7:54:ca:af:1a:0f:b8:46:d2:ce:92:3d:63:fb:7f:f4:
         57:c1:7f:6b:63:c1:95:cc:f2:a2:d6:50:b3:de:37:b7:7b:1f:
         f1:d6:a8:c9:42:8e:3c:15:9a:6b:f2:ec:c2:dc:ea:2e:a4:f0:
         42:10:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org