Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa
File:                     3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (raw, json)
Hash identifier:          3pSMjtcXKgLBYrGIaTP2y0pqEGff4x2Dp+/5bQgehE8=
Subject key identifier:   F1:BA:33:8A:0F:A3:C9:3F:C1:A3:94:1F:88:CD:D3:7C:B7:EB:43:8A
Certificate issuer:       /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Certificate serial:       3CCB084DC33AA77F893E3FFB9A273BC41EB5A169
Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa
Signing time:             Mon 03 Jul 2023 03:48:26 +0000
ROA not before:           Mon 03 Jul 2023 03:43:26 +0000
ROA not after:            Mon 01 Jul 2024 03:48:26 +0000
asID:                     150266
IP address blocks:        103.91.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
                          rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cb:08:4d:c3:3a:a7:7f:89:3e:3f:fb:9a:27:3b:c4:1e:b5:a1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
        Validity
            Not Before: Jul  3 03:43:26 2023 GMT
            Not After : Jul  1 03:48:26 2024 GMT
        Subject: CN=F1BA338A0FA3C93FC1A3941F88CDD37CB7EB438A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:77:fa:71:f1:ae:c5:76:1d:7e:8d:fa:b7:
                    21:5c:90:4b:77:f5:ad:51:2e:9a:b6:1f:d5:31:64:
                    8b:75:f0:90:a7:28:5a:29:c6:c9:35:5a:39:39:05:
                    37:14:5e:78:79:2d:b2:a8:dd:25:48:c5:39:15:0b:
                    7a:91:30:49:a6:49:54:8d:a0:5a:e3:21:e5:35:f3:
                    95:1e:ed:72:67:8a:f2:4a:6d:7a:05:bf:f4:8d:19:
                    f9:13:ab:f3:9f:44:77:ba:bf:dd:d6:25:8f:ad:04:
                    e5:f7:48:b6:87:b6:bf:26:34:65:8e:67:70:d0:66:
                    95:11:2f:a8:66:0a:49:d4:f9:51:7a:95:79:b3:3e:
                    ff:90:46:9b:a0:5d:15:51:6f:f1:a4:df:9e:ea:60:
                    bd:6f:2e:86:2a:f4:f3:da:04:bd:ed:0e:78:cd:91:
                    a1:b0:38:1f:4a:54:d8:64:45:76:81:ad:cc:67:5d:
                    56:d6:ef:c9:ed:92:17:8b:ae:d9:de:fe:53:3d:3e:
                    f0:7a:b3:58:65:ce:f7:22:7f:c7:b4:50:6e:ab:a6:
                    19:f2:0a:8a:82:dd:9a:21:64:45:12:1d:70:40:7e:
                    50:5d:22:69:d5:1d:ec:ed:b9:da:2f:38:eb:dc:12:
                    4c:11:f2:17:ae:84:e5:d6:e1:bf:97:13:7c:e0:45:
                    e3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BA:33:8A:0F:A3:C9:3F:C1:A3:94:1F:88:CD:D3:7C:B7:EB:43:8A
            X509v3 Authority Key Identifier:
                keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d5:7f:65:e4:b9:bd:f8:3b:db:a3:76:95:da:54:e8:bd:62:
         95:bf:65:ab:98:5b:af:11:4d:40:d8:2c:36:8a:ea:8e:ec:86:
         2b:34:55:ce:d0:7c:9c:cc:4a:a3:32:26:b7:8a:d8:18:2c:a6:
         47:38:9a:e1:5d:69:49:c3:36:71:bd:d5:55:78:28:fa:a3:8f:
         4d:fe:79:8e:b5:41:ff:7f:09:33:73:60:73:2c:0a:78:b7:af:
         46:83:96:63:16:64:d8:24:2e:75:42:65:6a:94:b2:80:1c:1d:
         92:14:9a:60:3f:63:e7:a0:9a:d9:0f:6e:d3:6e:6c:53:cc:dd:
         1b:79:20:7e:8a:66:5b:0f:76:7e:e8:1d:90:8d:10:51:c6:92:
         1b:91:e1:c7:56:f6:b8:24:00:39:a8:5c:a2:a6:e3:3f:48:0d:
         64:26:48:78:79:8e:0f:52:e7:cb:ca:04:9c:df:a7:b4:cc:ed:
         29:e3:9f:4f:3a:05:d2:af:60:77:07:3d:24:e4:a2:ca:2f:1c:
         8f:6d:8e:b0:7c:42:c9:af:67:e4:a9:93:5e:71:a4:48:74:4f:
         ca:88:54:54:bb:21:f7:53:d2:85:b2:d6:7c:2d:15:46:65:46:
         49:6a:ee:3b:85:7e:2d:d4:67:28:cd:e3:6d:b8:89:23:57:b2:
         07:5d:b3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:43:04 2024 by rpki-client on console-fra.rpki-client.org