Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa
File:                     3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          v0/VYDeqrLs0aVVVmddubkQcVhfGq++PVN0tNLBFA0A=
Subject key identifier:   69:83:0F:35:23:C1:D0:E0:4E:A7:B4:A1:45:E4:42:B6:09:96:23:C4
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       43094FEB70E8220DBC9F15BD8E3F53C1F9102735
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa
Signing time:             Tue 08 Aug 2023 15:00:01 +0000
ROA not before:           Tue 08 Aug 2023 14:55:01 +0000
ROA not after:            Tue 06 Aug 2024 15:00:01 +0000
asID:                     131111
IP address blocks:        103.22.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:09:4f:eb:70:e8:22:0d:bc:9f:15:bd:8e:3f:53:c1:f9:10:27:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Aug  8 14:55:01 2023 GMT
            Not After : Aug  6 15:00:01 2024 GMT
        Subject: CN=69830F3523C1D0E04EA7B4A145E442B6099623C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:78:bd:05:48:4b:2e:24:6e:40:ba:ee:e3:
                    4d:a9:dd:ec:00:0d:ce:2d:54:8e:4e:43:d7:8e:9c:
                    e1:1a:ce:dc:20:83:5e:01:65:4d:cb:60:75:e8:51:
                    05:9c:89:98:25:b7:0c:d7:2f:2d:30:19:2f:3b:ec:
                    23:2c:b5:55:05:ab:c4:f2:4f:b5:a3:70:f7:35:25:
                    18:38:a5:f3:28:10:80:b5:6b:de:3f:db:4d:a0:6f:
                    b7:b1:d6:fa:75:6d:76:c3:cc:d8:00:e3:01:5a:88:
                    21:86:64:69:db:a0:49:b1:a7:39:e9:e8:f0:45:fa:
                    a2:e3:68:75:de:61:d5:c2:e4:3f:c0:25:19:e1:4c:
                    99:31:9b:a2:40:0c:f2:ca:20:21:70:d9:96:19:6a:
                    a0:9d:62:84:65:20:d4:40:22:58:4a:f1:58:c8:69:
                    34:17:d8:f4:b0:89:7e:cf:71:22:21:7d:2b:66:16:
                    1d:15:07:02:17:09:6c:17:59:43:ce:aa:d2:c7:3d:
                    c0:b0:36:b1:cc:aa:8a:a4:4c:f5:4c:55:9b:ba:5e:
                    9c:a4:66:3b:5e:51:1b:ba:d7:23:e0:83:69:4b:36:
                    46:3c:c3:22:ae:14:a5:a2:f5:77:72:d3:e9:3a:8b:
                    cd:56:87:f5:7a:60:22:6a:f7:41:ec:b1:ad:bd:89:
                    71:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:0F:35:23:C1:D0:E0:4E:A7:B4:A1:45:E4:42:B6:09:96:23:C4
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:49:52:52:d6:a7:c5:a1:b9:cc:e4:45:cc:c1:d8:e5:35:18:
         d9:c6:fe:92:5d:8d:07:9f:ea:c5:f0:10:05:5f:78:b7:22:71:
         bb:e3:cf:5a:31:ce:fd:cc:a9:f5:0b:af:a8:ec:29:e5:cc:1a:
         d4:ac:cc:51:67:30:b9:b4:59:c5:e8:46:f6:2e:8a:7b:00:49:
         8d:0c:af:66:3e:81:71:8d:73:a7:73:20:23:48:95:6a:3e:ee:
         6c:98:31:4c:ef:42:a8:5b:79:d8:4c:a5:59:81:89:c3:39:bb:
         0c:bb:97:ac:8b:7d:68:6a:c3:4a:5c:cf:e7:e2:21:5d:43:3e:
         6c:5b:a9:99:48:25:f7:6a:50:c2:b4:ab:af:8c:e9:93:05:2e:
         a2:60:e6:25:5e:f8:b6:b7:64:e3:47:fd:e8:9d:13:1c:b7:65:
         c6:b7:55:0a:3e:9e:8d:9d:19:b0:68:e0:d3:c5:da:a3:c9:12:
         2a:68:9f:6f:3d:5b:bd:a0:5f:06:25:cc:8e:84:e8:f9:98:06:
         49:2d:bb:d7:f1:9d:8a:94:f2:e8:cc:e7:23:9a:3d:ee:a9:d0:
         ed:7b:2a:87:f6:1f:76:3d:6a:5d:b6:66:e6:38:da:90:b8:2c:
         fb:54:ce:fa:a5:b7:f2:fd:b9:a6:18:e9:c4:51:4a:97:57:cf:
         6d:f0:43:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 17:57:18 2024 by rpki-client on console-ams.rpki-client.org