Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa
File:                     3130332e32352e3130382e302f32342d3234203d3e203338353237.roa (raw, json)
Hash identifier:          Bv8+N1YZfCOW9Mp7ZexXKugvyjYari83w80CY0qHyeM=
Subject key identifier:   9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       7D27C2FAD12DCCABA452AF1A9367369CA234CC3B
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa
Signing time:             Fri 16 Feb 2024 05:00:02 +0000
ROA not before:           Fri 16 Feb 2024 04:55:02 +0000
ROA not after:            Fri 14 Feb 2025 05:00:02 +0000
asID:                     38527
IP address blocks:        103.25.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 08:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:27:c2:fa:d1:2d:cc:ab:a4:52:af:1a:93:67:36:9c:a2:34:cc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Feb 16 04:55:02 2024 GMT
            Not After : Feb 14 05:00:02 2025 GMT
        Subject: CN=9AEA2AE3930CECC4B2FE1F2D8DABE7FD5ABA88B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:47:b7:1a:61:59:0a:ec:e9:ac:80:17:b8:09:
                    9d:18:f0:d2:d3:ee:e4:47:74:62:33:b7:d9:88:3d:
                    29:80:68:85:a2:13:05:f4:8a:b7:44:e4:44:de:fa:
                    95:10:37:8b:a0:4a:d2:6f:b8:a6:1c:03:5e:58:d1:
                    df:c7:3c:e0:00:6f:fe:ff:3f:1d:c3:40:cc:c2:98:
                    95:d4:dd:cc:96:e0:27:ae:90:79:0b:66:12:31:f6:
                    14:66:17:a3:32:e8:d7:cc:95:0f:d1:59:9c:05:83:
                    c8:e7:62:f7:dd:93:d3:7f:1a:56:01:0a:06:c9:4b:
                    28:b7:d6:d2:5a:ab:25:1a:3a:3f:82:7d:13:c5:cb:
                    b1:0d:e1:66:93:c2:51:db:34:45:f3:c2:70:8a:35:
                    3f:db:45:2a:eb:2f:72:28:7c:89:79:06:d1:70:7d:
                    94:ea:7c:44:8c:c2:b0:ee:3a:51:08:41:9e:9a:02:
                    fb:de:ca:32:fd:9d:f9:15:3e:8e:24:37:48:60:12:
                    98:e9:7d:6e:c7:15:98:64:d7:a4:ee:a0:4b:4f:13:
                    cb:4a:28:10:1e:5e:f1:76:1c:8c:aa:36:02:e6:9e:
                    3a:1f:0f:1f:40:64:8d:ea:1f:c0:01:01:4f:67:94:
                    a7:d5:09:f0:50:d7:af:f3:9e:b7:aa:20:18:8d:20:
                    12:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:2A:E3:93:0C:EC:C4:B2:FE:1F:2D:8D:AB:E7:FD:5A:BA:88:B6
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/3130332e32352e3130382e302f32342d3234203d3e203338353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:ba:02:11:ca:dc:5c:f8:ef:cd:1f:d2:64:45:5d:24:6b:
         18:ef:a1:1c:54:9f:66:f0:29:e3:7d:36:31:a1:6c:57:4a:0b:
         c6:0e:61:c9:e9:c5:33:4a:c2:f5:74:1b:8f:34:f2:09:e1:ab:
         ee:73:20:4f:d4:27:50:2e:44:91:3c:eb:4e:28:8c:7e:3c:d4:
         d8:e0:27:aa:fe:1c:7d:5b:5f:4b:d9:14:32:e8:c0:04:05:82:
         e1:30:25:62:ac:ff:6d:e9:3c:01:6f:3a:49:e4:50:99:50:e2:
         e0:ff:b5:ea:57:45:cf:b8:10:20:94:74:60:f7:25:f1:eb:c5:
         7d:31:e2:76:1b:41:6f:5a:46:86:26:9e:2e:20:52:4d:94:26:
         8f:48:19:6d:69:29:10:18:5a:96:4b:73:7e:da:44:c7:ed:35:
         b5:1c:c5:4d:56:92:9f:60:67:7b:6a:e6:0f:6b:5c:cc:8e:09:
         53:98:9b:3e:6c:44:cc:92:a6:63:7d:53:9e:25:1a:58:9b:67:
         f6:c4:ea:63:e8:3a:78:7b:d3:97:84:8b:bb:29:2a:59:62:64:
         11:d2:5b:30:0a:47:7d:14:25:c6:71:06:6c:43:fd:44:10:ec:
         68:68:61:e6:9c:81:fa:b9:30:37:c4:84:f8:22:1b:64:fe:cf:
         85:1f:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:42:24 2024 by rpki-client on console-ams.rpki-client.org