Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa
File:                     3130332e36322e3230322e302f32332d3233203d3e203633383833.roa (raw, json)
Hash identifier:          yxxXXRwK7yFLR89I5uMrJEdDWAqzJPaOalUN3EScIQ0=
Subject key identifier:   42:68:F4:AE:35:34:38:13:B0:44:93:A3:F1:C7:CC:71:8E:3E:C3:62
Certificate issuer:       /CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5
Certificate serial:       72CE8A1BCD4226E140395366F3EA65675CB4D27F
Authority key identifier: 80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa
Signing time:             Fri 23 Aug 2024 15:07:53 +0000
ROA not before:           Fri 23 Aug 2024 15:02:53 +0000
ROA not after:            Fri 22 Aug 2025 15:07:53 +0000
asID:                     63883
IP address blocks:        103.62.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl
                          rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:8a:1b:cd:42:26:e1:40:39:53:66:f3:ea:65:67:5c:b4:d2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809991747501A3CD58A438A8ADFFCD9EF3A272E5
        Validity
            Not Before: Aug 23 15:02:53 2024 GMT
            Not After : Aug 22 15:07:53 2025 GMT
        Subject: CN=4268F4AE35343813B04493A3F1C7CC718E3EC362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:7c:2f:1c:63:b0:2c:f4:02:c2:d7:85:2c:
                    03:75:02:15:06:08:f5:1f:51:aa:97:b3:33:02:91:
                    ec:70:e5:c4:5d:68:14:2b:d0:0c:c1:4e:7e:a0:99:
                    71:84:1b:e5:f9:98:99:56:34:3e:5f:ca:38:23:23:
                    00:7d:3b:fa:6f:65:cd:ee:a5:ef:39:9a:a0:6b:3a:
                    47:e6:47:71:5b:9b:11:61:75:80:2e:cc:e0:3f:70:
                    95:29:d8:7b:fc:4a:ad:18:9b:d4:f5:89:28:03:6b:
                    64:4c:99:1d:89:e2:98:94:c0:a7:ac:51:11:1a:f1:
                    b6:2e:35:50:ef:78:8a:6d:89:d1:f4:ff:e8:bd:31:
                    63:f6:9d:c2:32:0d:7b:71:7b:91:5b:a9:5a:e2:f5:
                    2e:8e:27:cb:72:c8:63:38:33:14:61:95:db:e3:a6:
                    43:4f:8e:8c:af:c3:eb:39:b7:21:cf:16:9c:c5:fb:
                    9f:86:a0:89:3a:37:4d:a7:77:2b:d5:fc:d9:fe:f9:
                    e7:1c:d3:e4:28:81:ec:3e:53:5c:61:5d:89:cf:06:
                    be:eb:0e:73:7e:2f:22:c0:31:93:ce:06:b2:93:53:
                    59:df:e4:ae:bd:50:0a:ca:6f:44:b5:1c:b2:2e:70:
                    f9:8b:cc:5e:84:e1:db:bc:32:fb:f2:af:a4:11:ca:
                    94:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:68:F4:AE:35:34:38:13:B0:44:93:A3:F1:C7:CC:71:8E:3E:C3:62
            X509v3 Authority Key Identifier:
                keyid:80:99:91:74:75:01:A3:CD:58:A4:38:A8:AD:FF:CD:9E:F3:A2:72:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/809991747501A3CD58A438A8ADFFCD9EF3A272E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/809991747501A3CD58A438A8ADFFCD9EF3A272E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/381f44aa-89a3-4bc3-bb29-db6c982a136b/0/3130332e36322e3230322e302f32332d3233203d3e203633383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:71:26:7c:ed:32:6d:20:16:88:39:5a:d7:10:93:8b:ab:31:
         15:c7:0c:51:fa:cd:d7:94:1c:c9:b2:ca:8c:b0:7e:d9:ba:62:
         e9:ff:d8:ae:c3:47:2a:21:4c:6d:71:8c:e6:d1:2b:34:b4:01:
         de:82:1c:e9:2d:b2:91:0c:2e:19:21:3d:d9:a5:8a:d1:61:6a:
         3d:a2:2b:21:88:c5:9f:00:9d:5c:2c:1d:82:63:5a:45:e6:ae:
         69:3f:c9:fe:d9:d3:91:8f:e6:b4:58:1b:fe:98:32:a1:49:2d:
         ec:ba:e5:27:aa:21:9a:5e:80:4c:fe:ad:24:d2:61:22:53:2c:
         6f:37:05:a1:2e:fa:3a:e7:1f:37:5f:e2:f6:6c:eb:9b:37:b7:
         1d:2d:30:fc:ec:da:2b:9d:29:34:2a:f2:ff:fd:e8:ea:6e:cc:
         6f:1c:f3:d8:63:fc:85:ab:ea:62:32:7c:c0:91:48:1c:a9:09:
         2e:d8:9f:f8:c7:8a:74:f2:af:03:9a:e7:95:68:75:28:79:99:
         4e:80:7f:2e:59:6b:9a:be:46:c7:d5:dc:d3:6b:d5:6a:c5:fd:
         bf:5e:85:97:7d:ee:3d:33:f6:17:68:45:43:b5:1d:d6:af:d8:
         e4:73:26:38:f1:81:dd:c4:85:fd:bd:fb:40:73:c6:53:c5:79:
         8e:82:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org