Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
File:                     3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          K/5Dzu4jNae+Slea0CiA7fq+A02KSzQ2CreNdMd0XbI=
Subject key identifier:   F5:2B:FF:0D:B1:8A:7C:7F:18:BB:F1:D9:91:5F:1D:71:6C:21:48:3F
Certificate issuer:       /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial:       7A8EA64F3608256131393D199C1FAE69386277CD
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
Signing time:             Mon 01 Jul 2024 01:04:52 +0000
ROA not before:           Mon 01 Jul 2024 00:59:52 +0000
ROA not after:            Mon 30 Jun 2025 01:04:52 +0000
asID:                     38758
IP address blocks:        103.231.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
                          rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8e:a6:4f:36:08:25:61:31:39:3d:19:9c:1f:ae:69:38:62:77:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
        Validity
            Not Before: Jul  1 00:59:52 2024 GMT
            Not After : Jun 30 01:04:52 2025 GMT
        Subject: CN=F52BFF0DB18A7C7F18BBF1D9915F1D716C21483F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:17:41:b4:95:e0:8e:de:ae:4a:05:91:f9:
                    a6:72:05:79:5c:6b:bb:52:fd:6d:d2:ca:f1:0b:28:
                    ac:f8:02:3d:01:ea:d7:33:c7:1f:5e:92:4b:15:6d:
                    d8:35:af:d5:2b:51:f8:33:b6:11:2d:e9:7a:2a:3f:
                    b3:cc:f5:a2:ac:b3:70:7b:13:b5:d2:a1:08:0f:2e:
                    b7:4b:c0:f6:8a:a8:9f:c7:eb:7c:bf:8d:bc:e7:5f:
                    f6:44:75:27:8e:b1:d8:e0:29:b9:82:c9:c0:b3:c3:
                    71:68:ce:80:76:da:f5:ec:ea:cf:2d:74:80:65:2e:
                    2e:3b:74:92:6c:c3:65:dc:fb:c3:52:d0:49:87:1d:
                    83:56:c0:18:0a:19:27:b4:94:31:ea:8b:86:ea:2e:
                    06:53:17:09:ec:d3:bf:6b:70:93:5d:0b:35:6d:cd:
                    0a:28:15:8f:09:e1:41:cb:c4:a8:b8:0f:b9:a6:40:
                    ce:b9:c5:98:36:54:23:62:78:35:4f:63:7f:60:6b:
                    ac:11:5a:7c:1d:cf:62:2f:a9:eb:78:a0:2b:70:6b:
                    b7:d2:69:b1:e7:9b:3b:4c:0d:39:bf:78:e6:aa:27:
                    a7:8f:7b:5e:79:d5:6b:30:3b:11:1a:68:49:c3:24:
                    c1:c0:79:7e:7f:0f:64:1d:ce:71:8d:8e:6f:41:cb:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:FF:0D:B1:8A:7C:7F:18:BB:F1:D9:91:5F:1D:71:6C:21:48:3F
            X509v3 Authority Key Identifier:
                keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:56:90:83:4c:d8:54:1e:ab:c8:1c:ce:8d:fe:0d:70:75:af:
         b8:4c:3c:e7:93:ce:76:09:52:f9:ea:ac:ea:9b:46:d4:17:32:
         49:1e:21:7c:62:c0:04:93:55:3d:58:a1:3a:89:b7:47:06:4a:
         36:1c:c3:c2:16:7b:62:cc:89:13:11:e2:c7:c3:67:78:2a:ba:
         3f:37:74:dd:6c:9e:36:d9:ab:7d:b5:dc:a7:cd:be:45:ed:33:
         aa:a2:4e:33:d6:3e:57:d2:6a:8e:2b:e4:a7:11:d6:f4:a3:6a:
         d0:b4:79:5d:84:f5:98:fe:bc:11:7c:6a:ea:3f:33:d1:89:89:
         30:91:53:d7:ec:79:49:f6:27:80:3d:be:42:b6:61:26:c8:3b:
         c9:dd:82:df:4b:4d:f9:ff:00:33:52:71:fd:5d:06:a8:77:ea:
         06:bc:6f:1a:97:eb:84:9d:d0:1c:1a:1e:6e:96:30:86:8e:09:
         10:94:77:f3:51:62:5b:2e:7c:5c:3b:41:5c:5a:b6:13:ed:6c:
         7d:dd:75:5c:11:3c:7d:ed:6a:67:93:1a:6f:38:2d:d7:b5:48:
         c7:f7:86:2d:fb:d8:f1:c1:a7:d3:d9:e2:33:7e:1f:4e:02:ce:
         5a:89:f1:9e:80:fa:28:2d:46:a6:c2:93:fd:3c:f9:d5:ff:8a:
         27:18:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:20:47 2024 by rpki-client on console-fra.rpki-client.org