Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
File:                     3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          VxDJRyHf4quz1NG42aRPhCKiwsHNdLZ5RbJ8wFW7Nhg=
Subject key identifier:   8E:0E:E0:2A:CF:91:BA:7D:9E:A3:19:18:59:66:9F:69:A9:75:DA:18
Certificate issuer:       /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
Certificate serial:       23C8DE7042CE9E7344EC6D9D908D5E2A1137B15A
Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa
Signing time:             Mon 26 Aug 2024 15:00:00 +0000
ROA not before:           Mon 26 Aug 2024 14:55:00 +0000
ROA not after:            Mon 25 Aug 2025 15:00:00 +0000
asID:                     9341
IP address blocks:        103.17.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl
                          rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Sep 2024 12:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:de:70:42:ce:9e:73:44:ec:6d:9d:90:8d:5e:2a:11:37:b1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
        Validity
            Not Before: Aug 26 14:55:00 2024 GMT
            Not After : Aug 25 15:00:00 2025 GMT
        Subject: CN=8E0EE02ACF91BA7D9EA3191859669F69A975DA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:8c:75:50:70:4a:6b:c0:58:39:ee:3f:f8:
                    d7:58:65:86:3a:6f:79:98:b0:bb:7c:7b:22:b5:fb:
                    cb:16:81:c3:ed:b1:07:7a:c9:93:c3:89:0a:ec:ed:
                    6d:f3:91:4f:96:0f:3a:a9:bb:bb:e0:04:7e:ce:72:
                    e5:e5:c2:db:4d:4d:c8:d5:65:e5:5d:e6:7c:11:14:
                    cd:a7:6c:bb:46:c3:ee:1e:a7:ca:40:f5:16:d9:9d:
                    84:9a:b5:ec:e5:75:07:f1:14:b0:68:c5:e1:33:de:
                    88:ac:32:37:b6:e7:ed:cc:8b:1a:44:41:61:2a:14:
                    b5:7e:91:ef:d6:95:f7:5a:2b:1f:06:cc:f5:20:84:
                    40:38:c5:92:c0:01:af:54:83:ea:be:ea:68:4c:90:
                    cb:e3:58:76:36:62:3f:8b:3d:03:cc:86:c3:93:4e:
                    62:61:30:88:1b:14:b5:0e:ee:34:79:56:e3:c8:56:
                    95:f0:ba:2d:e2:73:7b:9c:aa:3c:bd:3d:f4:9a:b2:
                    8a:1a:43:b5:72:9c:4f:a2:99:82:54:17:68:96:f1:
                    e6:c3:4f:31:1a:da:d0:27:9a:e2:4b:16:5d:69:64:
                    cf:fe:7f:24:af:8b:83:17:fd:e3:7a:00:ad:28:b2:
                    49:91:12:cd:fd:82:bc:f3:4a:18:c8:12:9f:30:d1:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:E0:2A:CF:91:BA:7D:9E:A3:19:18:59:66:9F:69:A9:75:DA:18
            X509v3 Authority Key Identifier:
                keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:7d:cf:26:3e:cd:df:fb:48:74:91:64:11:fe:67:25:83:94:
         f8:44:ac:74:11:7a:79:cf:04:af:4c:bd:b2:ae:e1:69:9e:bf:
         8f:62:2f:a1:d7:f2:53:f6:12:cb:53:cd:55:c7:12:38:a8:29:
         79:ce:12:78:11:51:0b:75:99:61:19:86:0a:70:78:fa:3a:65:
         ae:22:f7:b2:60:ac:2b:f6:22:98:13:55:17:14:71:ce:be:80:
         d0:47:70:48:47:91:d7:4f:4c:f0:0d:39:71:b8:c6:42:f8:36:
         41:f8:de:99:1c:39:70:be:b6:7f:a7:83:14:47:53:01:4c:94:
         5b:cf:9b:6d:5e:90:85:83:54:10:f8:7e:71:10:ec:45:4c:44:
         b4:2c:91:b5:94:2d:74:47:08:e5:d4:63:6f:49:a1:78:96:8d:
         d1:6d:e2:55:09:c1:a6:e4:c5:71:05:51:0b:78:89:f4:c6:a9:
         ce:40:a8:d3:e0:1d:85:7c:1b:4b:2b:7b:b4:66:07:dd:b4:db:
         66:89:8b:a2:c1:3a:20:c2:8d:b4:b0:45:9c:e4:85:a5:0c:62:
         fa:1a:e7:55:58:aa:09:28:d3:dd:51:d4:be:44:f7:8a:75:44:
         2b:19:fa:07:aa:30:04:27:ff:27:2d:bf:5c:c8:0e:3f:b5:ff:
         e3:cc:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:23:58 2024 by rpki-client on console-ams.rpki-client.org