Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
File:                     3130332e38302e38302e302f32332d3233203d3e203634333030.roa (raw, json)
Hash identifier:          jC0+G4xeOcPd0TrKGJ/PhjPMB67VoNLolJB1jocV+Fk=
Subject key identifier:   9A:2F:07:C1:09:95:FA:BB:A9:FB:46:90:18:74:47:47:5A:34:37:E5
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       3ACD8BB96036190B15E35830369D842286208E24
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
Signing time:             Mon 18 Sep 2023 03:00:46 +0000
ROA not before:           Mon 18 Sep 2023 02:55:46 +0000
ROA not after:            Mon 16 Sep 2024 03:00:46 +0000
asID:                     64300
IP address blocks:        103.80.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 16:26:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cd:8b:b9:60:36:19:0b:15:e3:58:30:36:9d:84:22:86:20:8e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Sep 18 02:55:46 2023 GMT
            Not After : Sep 16 03:00:46 2024 GMT
        Subject: CN=9A2F07C10995FABBA9FB4690187447475A3437E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:6e:cd:5e:c8:76:ed:d9:74:ec:14:f7:10:
                    c5:94:d0:73:19:f6:1f:19:c8:66:ae:0f:2b:2c:af:
                    e5:fc:a7:37:cb:0c:2e:08:fa:b0:b3:5b:6e:72:df:
                    97:12:c2:00:08:ec:b8:5c:ee:73:36:20:22:35:74:
                    de:83:1f:0a:b4:86:9e:6e:96:e6:bd:28:0e:c5:99:
                    b9:97:0e:7b:75:85:ab:bd:68:91:0a:5f:58:84:9f:
                    42:b4:06:99:b1:ba:0f:1e:5c:46:90:29:ac:cf:4d:
                    0a:b0:ae:74:ac:98:9e:f2:6c:01:bd:b7:8a:7e:14:
                    d1:cf:c4:e9:a9:96:b2:6d:73:5d:69:76:29:b1:ce:
                    e3:ee:cd:9a:1c:32:63:d7:23:b1:15:0d:91:78:c5:
                    5c:17:6e:73:ca:d4:c2:65:58:48:46:2b:fb:23:f0:
                    cb:08:bb:80:0a:c4:1e:9d:bb:fe:fb:6a:7a:0c:d7:
                    de:e6:e2:06:00:cc:e4:e7:2e:1c:64:9c:a0:a4:65:
                    45:7b:d3:60:91:7a:7a:5e:60:18:bb:c9:57:f7:0a:
                    d9:a8:b8:12:53:92:0b:08:af:b1:65:5c:1a:d5:5e:
                    6a:23:a2:97:00:5f:cc:63:5c:9b:f4:aa:6a:a4:c4:
                    b4:eb:75:cf:2d:36:d7:38:de:07:f8:bd:18:64:4a:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:07:C1:09:95:FA:BB:A9:FB:46:90:18:74:47:47:5A:34:37:E5
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:0c:05:62:06:6b:86:16:bb:be:bf:d5:2f:92:eb:84:34:
         34:d6:71:15:10:61:54:1e:cb:65:09:f5:e6:6f:cf:1d:46:53:
         a9:5e:e2:d3:e6:71:70:35:4d:bf:9c:e7:b3:f0:ae:ba:c5:f2:
         25:5a:c9:90:18:40:e7:3b:c1:78:38:3c:87:f8:97:f0:11:18:
         8b:65:20:9f:30:67:8f:c3:3a:85:18:ae:02:64:65:14:65:17:
         4f:ce:25:db:16:c4:f2:c8:c6:17:49:2e:69:04:e5:6c:e0:31:
         7b:b7:e5:8e:47:8b:2f:00:a3:73:46:b4:53:83:01:70:b2:25:
         a3:24:6a:d3:2a:97:6f:c6:8e:6e:d7:93:ad:53:2f:48:bd:d8:
         b2:eb:3a:f2:b4:84:91:0f:d7:b2:de:d7:3c:70:9e:ab:20:a6:
         29:31:12:32:a8:17:da:3f:3a:34:91:23:4e:d2:cf:91:e2:f2:
         85:b7:2a:15:38:0a:8f:24:68:f3:83:bb:bd:e8:c2:1e:31:a8:
         3d:cd:f9:50:d2:6e:c3:25:0d:59:6e:a6:ec:42:17:bb:03:5a:
         04:f6:82:ba:f1:88:4d:5d:dc:50:cf:c6:72:2e:3b:36:53:28:
         3d:ad:59:66:76:74:d4:be:7a:a2:fb:5e:5e:6d:d4:10:40:f5:
         d1:27:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:32:32 2024 by rpki-client on console-fra.rpki-client.org