Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138322e302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          ZLRkLGPYq1htFpMAfCpdbC+01ZHWklqVZGY4MZ/dBH8=
Subject key identifier:   E5:DE:90:A0:01:DC:98:7E:01:32:54:0D:F6:03:11:01:4C:00:A1:73
Certificate issuer:       /CN=1C427FBF1A649B90BD89B0EA83871003D9045925
Certificate serial:       4F60FB4FABE1BE24C2D209A41597872DC68616B1
Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa
Signing time:             Wed 10 Jan 2024 19:00:54 +0000
ROA not before:           Wed 10 Jan 2024 18:55:54 +0000
ROA not after:            Wed 08 Jan 2025 19:00:54 +0000
asID:                     9341
IP address blocks:        103.182.0.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl
                          rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:60:fb:4f:ab:e1:be:24:c2:d2:09:a4:15:97:87:2d:c6:86:16:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925
        Validity
            Not Before: Jan 10 18:55:54 2024 GMT
            Not After : Jan  8 19:00:54 2025 GMT
        Subject: CN=E5DE90A001DC987E0132540DF60311014C00A173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:46:89:fb:ac:1a:1d:39:ae:5b:eb:25:e2:
                    a4:59:03:c8:43:98:a5:0f:3d:8c:f9:04:fe:72:67:
                    9f:ea:5f:d8:eb:7e:07:d9:9f:4a:5d:f0:ea:15:5d:
                    c9:69:77:4d:1b:4f:fd:41:8a:34:3f:c6:a8:84:06:
                    4b:12:48:91:56:64:51:9b:eb:2d:27:16:06:0b:71:
                    e7:38:68:3c:b9:3f:67:34:85:94:0b:21:65:bc:b6:
                    52:65:8a:8e:cf:0c:07:9f:1a:1a:f1:48:74:96:07:
                    71:f5:d9:60:49:cd:f0:7b:c7:91:20:ae:22:eb:33:
                    29:75:0c:fa:24:2f:d6:ee:2a:1e:1a:7a:80:68:72:
                    5f:88:01:47:ee:3b:fc:98:22:bf:39:2a:bc:0e:50:
                    e8:13:11:7c:01:20:c4:21:7b:3f:27:82:ac:17:1c:
                    df:c3:de:ab:b8:e9:45:af:1a:78:0d:e9:03:32:0c:
                    55:d2:02:b7:99:46:52:47:10:d6:98:fc:8f:a8:7d:
                    4c:e6:d1:97:6e:3e:be:67:35:b2:f8:eb:58:b7:22:
                    c2:9c:61:c1:db:2c:cf:8c:d5:04:b0:20:3f:d6:6b:
                    5b:b2:7b:61:3e:c2:2a:b2:df:14:a0:ef:57:c5:19:
                    82:82:da:81:eb:91:1b:83:01:12:53:e9:d1:93:aa:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:90:A0:01:DC:98:7E:01:32:54:0D:F6:03:11:01:4C:00:A1:73
            X509v3 Authority Key Identifier:
                keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/3130332e3138322e302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:81:2d:6f:7f:1d:a8:03:d4:97:da:28:8d:57:f0:17:b5:58:
         11:36:c7:88:a7:6f:7f:db:aa:41:06:03:b2:a3:b0:f9:c6:5b:
         7d:79:db:5d:13:69:de:01:cc:22:0b:07:fb:6e:cd:84:af:ba:
         d8:40:1f:f6:f0:49:98:26:80:2c:a5:9e:8a:c0:39:e2:7c:11:
         3f:f8:d8:71:1c:45:bd:38:c8:6a:c8:4b:74:82:ac:13:6d:71:
         29:c7:7a:a3:8d:cf:35:9d:6a:05:de:25:79:d1:e9:f7:ba:3d:
         fb:14:97:cb:70:92:59:4a:86:c5:58:4f:95:08:63:12:c1:61:
         ea:91:04:47:11:c8:de:fb:6f:07:50:cf:89:a6:21:90:a8:96:
         ef:b4:22:a1:67:7f:39:aa:41:f9:57:99:6a:cd:fc:24:9f:85:
         03:88:23:e1:f7:f9:8c:2a:bf:1f:62:1c:e9:bd:92:13:13:53:
         1e:e8:82:1c:be:b9:ed:1b:93:07:c2:b5:0a:9e:48:77:21:90:
         a8:8d:96:d0:d9:89:43:9d:40:1b:0f:7d:56:41:05:a4:3e:9b:
         31:80:ab:2d:e6:70:47:10:f8:6d:78:93:8d:38:0b:ec:3d:ff:
         46:13:2e:57:74:47:63:d9:ea:55:63:9f:47:60:86:f7:5c:ac:
         13:ef:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org