Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
File:                     3130332e382e35362e302f32322d3234203d3e203435373037.roa (raw, json)
Hash identifier:          akZYm1KnKQ36qGVQO6wpmdXFvL0aHIM3xhnBVgZchJ4=
Subject key identifier:   42:A0:11:C6:87:4F:A8:A8:41:A7:51:CD:41:62:E9:7E:D5:A1:3A:46
Certificate issuer:       /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial:       316732F25596D2E9D27BBE27F64937A4A1E884FB
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
Signing time:             Fri 26 Jan 2024 08:00:01 +0000
ROA not before:           Fri 26 Jan 2024 07:55:01 +0000
ROA not after:            Fri 24 Jan 2025 08:00:01 +0000
asID:                     45707
IP address blocks:        103.8.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
                          rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:67:32:f2:55:96:d2:e9:d2:7b:be:27:f6:49:37:a4:a1:e8:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
        Validity
            Not Before: Jan 26 07:55:01 2024 GMT
            Not After : Jan 24 08:00:01 2025 GMT
        Subject: CN=42A011C6874FA8A841A751CD4162E97ED5A13A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:ff:5e:c2:a5:48:d8:54:37:c0:ad:4e:45:
                    c3:97:e1:35:de:51:43:6c:ff:d3:3c:0f:e7:2d:79:
                    d1:1a:96:56:02:32:2c:01:c4:9d:0f:0c:53:c9:6b:
                    36:56:0e:37:c2:5c:6c:e9:f2:90:12:ad:2c:da:89:
                    04:92:56:8e:69:ee:d5:a0:24:d8:7b:a9:e2:ca:35:
                    7b:ed:34:01:cb:84:b5:cd:19:fb:09:8c:77:b0:48:
                    23:94:23:7b:5a:73:1a:f4:af:44:e0:ac:1e:f7:de:
                    83:46:7a:c9:d2:11:fc:5b:10:0e:63:2a:78:39:6d:
                    24:14:98:0c:ba:59:10:0e:d9:e5:40:0c:94:03:56:
                    af:e9:5f:8c:8f:5a:dc:65:f9:d6:8e:11:90:5c:f2:
                    0f:de:93:9b:03:d2:0f:d5:4d:79:ef:74:6c:d6:0a:
                    3f:4b:9e:c4:59:7e:1b:56:53:dd:66:dc:b0:d8:4b:
                    30:7b:48:ba:71:d5:96:20:88:31:de:5d:80:81:4d:
                    55:1f:17:1a:f9:a9:b8:69:48:3c:cd:36:03:d1:9f:
                    25:d5:07:77:db:c7:80:a7:4d:46:2d:40:ba:3b:24:
                    e4:7a:68:f8:3a:1b:a3:fa:28:99:4e:36:1f:12:52:
                    61:b4:65:7f:8d:ee:00:d8:6b:50:63:78:48:9c:82:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:11:C6:87:4F:A8:A8:41:A7:51:CD:41:62:E9:7E:D5:A1:3A:46
            X509v3 Authority Key Identifier:
                keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:40:c6:54:96:27:94:bb:ef:09:e4:b5:49:34:9f:dd:db:4e:
         64:2b:89:92:0b:91:8f:3b:e3:92:fa:d5:80:96:7a:59:f1:11:
         ec:d6:b6:90:fa:69:ac:ce:b3:a2:69:e9:c9:53:60:ac:76:17:
         8b:1c:fd:25:ca:7a:50:a8:b9:a0:4a:95:bf:d6:5d:d2:0f:46:
         26:e9:a3:bf:e2:e9:5f:c7:ee:74:0b:20:8c:72:18:17:ab:93:
         80:19:25:ff:15:58:61:fc:67:92:f1:79:1c:99:3c:e3:43:83:
         0a:19:cf:37:58:52:4b:d1:79:a9:69:5d:6d:e9:a8:de:56:8a:
         4b:8b:48:c2:42:95:1e:db:8f:c7:89:78:0f:3e:43:5e:a5:b8:
         dd:8b:1a:4c:b5:ff:1c:3a:ca:3c:af:38:4b:3c:19:4a:8e:b0:
         2e:e8:98:ca:56:43:4f:ac:c4:fd:f7:c5:b7:bd:46:68:03:eb:
         df:cd:5b:6c:bb:c7:17:2e:4e:37:a7:38:a6:84:65:f8:43:66:
         f0:3a:46:70:ac:a4:b4:89:69:f8:d8:4f:89:1f:e4:7e:bb:ca:
         d7:d2:76:f1:16:37:ff:fa:73:73:ec:93:69:bb:4f:ed:9d:c0:
         91:15:df:52:4e:04:03:fb:eb:f7:1e:ff:b7:cc:40:02:aa:9b:
         99:3e:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 17:05:10 2024 by rpki-client on console-fra.rpki-client.org