Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
File:                     3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa (raw, json)
Hash identifier:          Ef2I/BVw9m9iN2jghOI92lMYwANK0lGVB45TTxJYEBY=
Subject key identifier:   10:8D:0B:38:F6:90:52:35:6E:51:FA:0C:EE:8C:12:47:05:AC:4F:FC
Certificate issuer:       /CN=755B61748263D4DD472C69CA7F1847254B03EBBC
Certificate serial:       13F48FD5CAFB0C705F860353D47AAD520D0EB4F4
Authority key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa
Signing time:             Fri 08 Dec 2023 03:01:31 +0000
ROA not before:           Fri 08 Dec 2023 02:56:31 +0000
ROA not after:            Fri 06 Dec 2024 03:01:31 +0000
asID:                     150261
IP address blocks:        103.22.216.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl
                          rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:8f:d5:ca:fb:0c:70:5f:86:03:53:d4:7a:ad:52:0d:0e:b4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=755B61748263D4DD472C69CA7F1847254B03EBBC
        Validity
            Not Before: Dec  8 02:56:31 2023 GMT
            Not After : Dec  6 03:01:31 2024 GMT
        Subject: CN=108D0B38F69052356E51FA0CEE8C124705AC4FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:1e:39:7e:3e:4a:f8:ac:7d:e5:c6:c7:90:
                    8f:a9:c8:aa:94:d3:17:7e:60:22:72:8c:1a:00:9f:
                    e7:2f:87:78:41:ea:2a:0b:e4:4a:9d:fb:3f:80:fc:
                    8f:73:ab:3e:7d:3a:09:1b:f4:aa:08:21:08:ba:90:
                    43:6c:23:d7:4b:68:2f:26:44:07:14:15:f7:dc:87:
                    6c:93:54:dd:1a:c1:e1:25:bc:5b:c9:4d:46:cc:87:
                    bf:ef:a4:f5:e3:a6:a7:38:90:8f:30:64:00:95:64:
                    97:9e:cd:fc:70:cb:4b:70:0f:d1:9b:50:0b:c4:ff:
                    da:17:81:c9:6b:44:04:84:10:b8:54:8d:db:a7:f0:
                    ae:a7:21:0a:a2:c3:81:00:de:c7:7c:56:04:09:b9:
                    c0:8d:41:b3:96:e9:d3:9f:e8:99:33:7d:6f:b7:04:
                    0f:b1:69:63:c6:ae:d5:84:59:50:5c:d6:bb:13:1b:
                    6c:24:53:59:b4:6a:a8:18:bc:bd:e6:03:f1:c0:07:
                    82:c5:fa:df:59:9d:07:24:f2:17:f5:0a:d5:96:d2:
                    34:f5:30:10:ef:3d:74:c5:d8:24:16:76:1a:16:ff:
                    f1:44:7e:57:5a:30:2f:16:66:39:bd:02:b8:49:6e:
                    88:38:21:77:dd:c5:80:c2:da:2f:a1:8c:81:ee:f6:
                    d3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8D:0B:38:F6:90:52:35:6E:51:FA:0C:EE:8C:12:47:05:AC:4F:FC
            X509v3 Authority Key Identifier:
                keyid:75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/3130332e32322e3231362e302f32332d3233203d3e20313530323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.22.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:49:59:d2:2a:35:c8:9d:aa:bf:58:0b:7d:9d:d1:02:42:
         e1:91:a2:ac:fd:e9:8f:df:44:32:f8:fd:63:b4:04:09:58:4e:
         bf:f1:97:8e:d7:8f:cd:a4:1a:7e:eb:14:1d:86:6a:19:74:82:
         fe:b4:63:b5:22:f5:a4:68:8b:4d:10:d5:1c:3a:87:a5:2e:fc:
         9d:dd:3c:1b:f4:92:52:da:b2:44:03:ea:81:6d:2d:0e:3b:0b:
         73:83:a3:e7:1a:25:dc:74:4c:e2:e8:95:61:14:00:92:2a:68:
         49:bb:5f:0f:32:e7:3e:73:b7:ba:e9:ac:88:3a:2c:b8:c8:5c:
         b7:36:29:5b:1f:41:7d:b4:d7:e6:37:82:b0:c1:0b:d9:46:82:
         09:2a:54:d8:76:fa:27:f6:72:29:d2:02:3a:8d:22:a3:8a:bf:
         a2:55:4d:6d:0f:ea:5c:8e:b5:16:9b:cd:b8:21:76:83:23:6b:
         f9:66:1c:0c:e7:a8:24:2d:8b:aa:74:51:3a:92:13:f1:ad:72:
         b9:8d:ce:59:f6:ca:fb:7d:4b:fb:f4:25:1c:12:40:aa:5b:84:
         d3:d3:c1:75:fe:0f:66:e5:47:0e:9f:94:48:b1:5d:39:0b:82:
         66:5e:6d:7c:4d:33:07:c2:48:4c:1f:f0:7b:20:c3:fa:9e:29:
         40:0f:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:11 2024 by rpki-client on console-ams.rpki-client.org