Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa
File:                     3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa (raw, json)
Hash identifier:          vQ+MHUzBROpBCf/v7PhfMHVYUPpkByA+kK8s17w7JJw=
Subject key identifier:   96:46:C6:D0:57:57:33:D8:2F:97:8E:54:58:75:39:AA:10:6F:29:6F
Certificate issuer:       /CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
Certificate serial:       5F56B97EB6EA93DA743172915877CEAD8AF4548F
Authority key identifier: B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa
Signing time:             Tue 22 Aug 2023 07:46:49 +0000
ROA not before:           Tue 22 Aug 2023 07:41:49 +0000
ROA not after:            Tue 20 Aug 2024 07:46:49 +0000
asID:                     151012
IP address blocks:        103.227.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl
                          rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 22:37:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:b9:7e:b6:ea:93:da:74:31:72:91:58:77:ce:ad:8a:f4:54:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B30FDBDE70FBE70CC44F3C710B467069B1194DD8
        Validity
            Not Before: Aug 22 07:41:49 2023 GMT
            Not After : Aug 20 07:46:49 2024 GMT
        Subject: CN=9646C6D0575733D82F978E54587539AA106F296F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:c1:77:bf:dd:7b:45:36:d5:8d:0c:5a:70:
                    a2:55:95:c2:4a:1e:e9:13:f6:55:28:a0:c1:73:a6:
                    4f:57:42:a2:5d:a7:88:2a:02:78:69:16:6b:13:bd:
                    66:82:7a:1c:37:3f:b5:b0:a7:67:a0:fb:a7:e8:32:
                    67:9c:1c:9f:a4:bc:48:6a:a9:b8:da:9f:bb:97:7a:
                    6c:d4:ba:e5:23:1b:a4:a6:17:e3:fa:36:1f:ff:03:
                    d9:e2:19:34:9f:41:d1:91:aa:b3:3f:a1:ad:16:16:
                    22:10:03:aa:85:b7:d6:a5:64:d3:83:5f:d4:20:00:
                    7c:f4:2f:bc:49:6f:75:17:22:9f:9f:65:e9:a1:ac:
                    0f:9a:05:4d:35:6a:aa:16:a2:2e:7f:92:40:58:30:
                    41:90:90:ad:c7:79:45:9f:2c:fe:6b:ab:07:98:99:
                    74:58:03:5d:b0:3b:97:06:4a:da:48:7e:66:91:ac:
                    9d:fd:9b:de:67:f7:9a:50:0f:cb:25:fc:f0:26:97:
                    6d:cd:41:60:b4:79:90:7d:b1:56:b2:fa:ba:9c:4f:
                    00:f5:c5:16:c0:68:97:97:36:17:23:c0:5a:86:78:
                    ec:b7:9e:30:4c:81:63:62:c1:e2:ef:39:03:e0:aa:
                    5c:4b:cc:f9:b7:d8:2a:14:ed:29:a7:d7:07:6f:2a:
                    57:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:C6:D0:57:57:33:D8:2F:97:8E:54:58:75:39:AA:10:6F:29:6F
            X509v3 Authority Key Identifier:
                keyid:B3:0F:DB:DE:70:FB:E7:0C:C4:4F:3C:71:0B:46:70:69:B1:19:4D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B30FDBDE70FBE70CC44F3C710B467069B1194DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138352e302f32342d3234203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:49:f8:ef:93:be:99:d9:70:33:f3:52:7b:05:c7:0d:67:26:
         9d:3c:f1:d3:cf:6c:ca:1f:8f:c2:33:18:cb:07:86:67:23:b8:
         8e:e9:f1:cb:0f:c0:09:be:50:6c:e2:39:2a:c8:13:2d:6f:70:
         ce:4a:24:7a:b0:37:ce:e4:bd:82:c7:00:a0:83:c3:1b:a7:0f:
         38:8d:52:a8:23:d8:aa:71:0f:c6:d0:31:ab:a7:f6:26:10:a1:
         75:94:3c:8e:a4:f1:67:d7:8a:a0:0f:b9:b1:13:47:5e:fb:9e:
         c3:84:41:a1:8a:d7:b1:84:21:1d:d6:e2:ac:34:91:3a:13:d0:
         60:f9:49:b6:0d:fc:a6:57:89:9c:ed:4f:a2:d5:c1:e5:d0:70:
         54:05:7a:b8:07:95:07:a3:0c:da:01:d8:14:8c:17:a2:00:89:
         d1:fb:eb:7f:fd:a0:10:dc:eb:71:12:a6:c7:39:d1:a7:b5:7f:
         f8:7d:3a:d3:c5:5e:9c:71:ea:ca:09:f4:c1:9e:2f:0e:df:d7:
         e1:d3:02:a7:da:a7:1a:01:33:e4:c0:42:9c:b4:10:22:d4:1e:
         41:38:50:3a:7a:7d:9c:cb:42:a0:03:bc:d0:e4:ca:66:a9:42:
         99:2f:5f:c1:f0:6c:4b:42:83:bb:71:f2:0e:77:a8:e0:5d:a8:
         4d:5c:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org