Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
File:                     3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (raw, json)
Hash identifier:          oOuBvS4P1Otd1qDPBJRPzJ5DE46G7Prtt2rqLb3HVc8=
Subject key identifier:   A9:E2:61:02:A2:6C:32:EE:16:71:81:CC:8A:4E:2F:80:63:B4:13:05
Certificate issuer:       /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
Certificate serial:       39A1575EFCF40786778882D0F61B76A1F41372FC
Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
Signing time:             Tue 22 Aug 2023 07:45:17 +0000
ROA not before:           Tue 22 Aug 2023 07:40:17 +0000
ROA not after:            Tue 20 Aug 2024 07:45:17 +0000
asID:                     151012
IP address blocks:        103.227.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl
                          rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 22:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:57:5e:fc:f4:07:86:77:88:82:d0:f6:1b:76:a1:f4:13:72:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
        Validity
            Not Before: Aug 22 07:40:17 2023 GMT
            Not After : Aug 20 07:45:17 2024 GMT
        Subject: CN=A9E26102A26C32EE167181CC8A4E2F8063B41305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:83:b5:57:14:33:a8:ad:21:3f:0a:9b:07:
                    09:57:6a:ba:dd:ee:d9:f9:9c:19:31:24:62:3e:05:
                    09:9e:57:0c:f2:5f:b6:06:3b:f7:ad:bc:45:75:cd:
                    5d:89:4b:3a:b2:4a:e5:e1:b2:8a:00:b2:f5:ed:7b:
                    c6:c3:bf:e5:6f:2f:19:4c:55:4d:68:89:b3:1a:8d:
                    bc:ae:d7:d6:fe:13:59:0d:86:5c:e2:bb:b0:a6:a9:
                    37:0f:73:03:d6:fd:4b:76:b9:4f:90:b9:a2:33:89:
                    73:be:3b:79:17:19:b1:46:a9:75:bb:fc:c9:ca:2b:
                    e9:84:e8:5b:53:5e:7f:1c:63:be:44:21:af:65:83:
                    8d:3a:51:7d:ea:00:cc:8e:8c:45:1b:75:0d:5f:32:
                    a9:23:96:5d:8f:9e:7a:86:ff:a4:90:14:3e:ed:bb:
                    21:1e:0e:c9:f2:a8:2d:f3:fb:fd:51:25:a0:c0:e2:
                    f0:50:82:e9:d2:96:1e:fe:41:cf:61:93:e3:9f:5c:
                    07:e7:d3:33:5c:0b:d6:d8:17:3c:47:a7:eb:cf:a1:
                    37:db:1b:99:d9:dd:aa:65:8e:7c:16:d9:a3:d9:f3:
                    ab:f7:72:ef:53:72:fe:0e:41:33:85:03:31:35:b7:
                    8a:d8:94:8c:a0:79:4f:14:53:74:97:0e:3d:2b:3b:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E2:61:02:A2:6C:32:EE:16:71:81:CC:8A:4E:2F:80:63:B4:13:05
            X509v3 Authority Key Identifier:
                keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:10:89:34:eb:c2:30:87:9b:c1:9b:2e:45:a8:80:2f:7d:87:
         2a:45:0f:17:0a:68:91:58:d3:eb:44:bc:b7:7f:52:67:1b:73:
         30:2f:f9:f7:fe:26:f0:5a:07:e1:20:46:48:88:11:8c:7a:29:
         41:15:11:30:0f:e6:56:7c:77:1a:52:0e:68:dd:ff:6e:bb:bc:
         39:59:be:48:bd:12:20:d8:db:65:c9:40:27:ee:2b:86:d3:7b:
         57:eb:22:88:75:02:85:a3:67:96:75:0b:c7:47:bf:b0:a4:9a:
         31:71:4a:aa:20:ca:c4:af:16:11:19:35:96:69:eb:f6:20:20:
         1f:c4:3e:98:43:b2:82:c4:54:d8:3e:8a:f9:5c:f4:76:7a:b4:
         3a:f3:ea:bf:e2:73:c3:91:5b:8f:34:48:67:03:50:47:f5:2d:
         73:7c:1b:21:cd:0d:11:57:35:7d:d7:d7:a1:4c:08:a3:45:87:
         6f:7b:e6:0c:bc:97:1a:20:48:8b:7b:7a:84:43:69:95:ac:15:
         69:0e:51:94:52:44:28:74:6d:a0:d8:22:f4:f9:34:a5:7b:9f:
         52:f4:21:e2:6b:0c:3c:20:dc:06:ad:5e:23:f6:61:a0:f0:4e:
         ac:3e:40:15:4c:e3:03:67:c7:5e:be:af:95:ee:f1:dc:02:d4:
         5b:c7:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org