Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (raw, json)
Hash identifier:          MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=
Subject key identifier:   4E:EA:2F:8F:32:67:B3:C9:74:C8:CA:55:7D:06:29:63:AB:ED:82:43
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       4327FED6B4113984E5D0BEDEE23BC426234D4AD9
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
Signing time:             Sat 15 Jun 2024 15:00:01 +0000
ROA not before:           Sat 15 Jun 2024 14:55:01 +0000
ROA not after:            Sat 14 Jun 2025 15:00:01 +0000
asID:                     55002
IP address blocks:        103.82.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 00:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:fe:d6:b4:11:39:84:e5:d0:be:de:e2:3b:c4:26:23:4d:4a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Jun 15 14:55:01 2024 GMT
            Not After : Jun 14 15:00:01 2025 GMT
        Subject: CN=4EEA2F8F3267B3C974C8CA557D062963ABED8243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:38:78:15:4c:d5:17:bf:44:d8:51:3a:2e:
                    e1:e6:90:6f:8d:64:27:df:c1:ab:92:df:fc:90:e2:
                    c1:31:3d:3c:3b:eb:3f:f5:46:6f:02:8f:d7:20:8c:
                    db:a6:1f:c1:13:24:89:9d:74:b5:10:e3:64:f3:9a:
                    5b:d9:82:e8:bd:5d:75:19:56:fa:70:95:74:ab:24:
                    e9:6a:0c:41:40:86:16:dd:36:ff:e2:24:8b:92:34:
                    15:5a:e9:7c:50:dc:ba:53:ef:db:8f:5b:5c:f3:35:
                    97:31:76:0d:98:d2:27:89:b0:fa:2a:1e:3d:5b:10:
                    e7:d0:99:9e:d2:e9:61:43:6b:d3:e6:ca:67:4d:49:
                    41:ec:53:d6:4c:4a:ab:ae:ab:da:14:6d:97:aa:50:
                    e7:2a:5a:92:bd:f7:0c:b8:3f:dd:e2:cf:bb:3f:12:
                    f6:fe:41:d1:63:2b:fe:f1:e9:a9:f5:83:a6:f0:bf:
                    08:d4:ba:2a:8b:50:bc:61:17:f0:60:1c:3f:3d:d1:
                    c6:e9:5b:20:d3:c3:26:93:02:ad:0b:4f:a6:ea:dc:
                    2f:7c:29:3e:95:37:25:4b:e9:a1:46:9d:e1:04:2c:
                    9f:ad:a2:e7:b4:f1:fd:3d:6a:1e:84:76:2e:32:dd:
                    e8:3c:9d:60:0e:23:2a:5f:da:e1:b0:6f:6b:71:38:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EA:2F:8F:32:67:B3:C9:74:C8:CA:55:7D:06:29:63:AB:ED:82:43
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:fc:67:bf:21:2b:cd:27:69:70:f9:16:33:44:f0:42:b2:76:
         d1:39:07:e6:b6:bf:1d:a7:71:6b:e2:a5:9c:d8:1e:0a:18:97:
         7f:60:1d:8b:43:6b:ae:cf:1f:1c:ce:fa:09:e0:51:59:5b:b2:
         1d:2f:15:00:32:a9:2b:60:c5:ec:17:57:82:53:24:1a:25:af:
         50:7e:69:ca:29:60:d1:98:82:53:41:17:ee:85:13:f4:ca:0d:
         f7:d3:24:fc:89:51:79:52:f1:d8:5e:04:07:ce:b4:67:51:39:
         3f:c4:6f:fd:b7:9a:fb:e1:08:eb:11:ab:93:6a:73:b3:63:b4:
         23:e8:04:69:06:95:95:bf:03:04:99:02:e0:a8:c0:bb:f0:b3:
         25:ce:c6:4d:10:97:46:e1:ab:0f:2b:de:41:f9:48:f8:0b:8b:
         96:b5:1e:70:cd:65:b7:a4:fe:99:e5:65:03:60:d2:bf:be:a6:
         bc:5e:98:d4:2c:5a:f7:36:23:dd:2f:5e:d3:25:49:4c:c4:2f:
         f9:a7:cc:fa:eb:ec:7b:8d:b7:b8:0f:10:11:af:46:a1:c6:7a:
         b2:6f:e2:c9:ae:4b:8d:28:b0:db:51:09:1c:9c:51:dd:10:78:
         86:7a:1c:ad:9c:31:6c:b1:ba:0e:06:61:89:cc:f9:c3:39:6b:
         99:94:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:20 2024 by rpki-client on console-fra.rpki-client.org