Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (raw, json)
Hash identifier:          BVxLNaMr4nMl3AjpDUd9ng+gxpcXV78HWbygJoURUYA=
Subject key identifier:   DF:B7:B0:EB:32:10:91:6B:55:29:45:46:72:09:06:4D:5C:73:E2:10
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       3EC95A3EE691007DD106B4543EB511155DC50ED9
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
Signing time:             Sat 15 Jul 2023 15:00:01 +0000
ROA not before:           Sat 15 Jul 2023 14:55:01 +0000
ROA not after:            Sat 13 Jul 2024 15:00:01 +0000
asID:                     55002
IP address blocks:        103.82.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:5a:3e:e6:91:00:7d:d1:06:b4:54:3e:b5:11:15:5d:c5:0e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Jul 15 14:55:01 2023 GMT
            Not After : Jul 13 15:00:01 2024 GMT
        Subject: CN=DFB7B0EB3210916B552945467209064D5C73E210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:58:76:c5:9e:9f:38:d8:68:49:ac:ff:2d:
                    a0:54:65:cc:4c:34:31:29:f0:cf:8a:5c:bb:6b:fd:
                    7c:94:99:8a:38:db:2c:5c:cd:8c:38:bb:b7:1b:f3:
                    37:46:f5:20:6f:11:5d:f7:df:6a:ca:92:6d:d5:a5:
                    b1:63:92:e3:a0:2b:20:30:3b:eb:8e:85:b9:b2:67:
                    ec:1c:6a:5d:7a:8d:6d:03:c0:8b:e8:3e:cf:72:8b:
                    a5:92:40:ea:c5:36:8b:6b:70:fb:b0:f6:e1:b1:46:
                    a5:59:58:f5:eb:3e:c5:0e:5a:8f:63:fb:66:44:e6:
                    63:d3:b5:9d:13:a2:a3:b0:02:48:44:50:a9:e2:81:
                    4c:c5:92:87:6a:8a:0b:e0:5c:8a:a8:c3:8d:96:d8:
                    6c:f3:91:2d:61:ea:f0:1d:2f:c0:51:14:e5:bc:a9:
                    86:1c:fd:84:44:c7:ef:27:4e:bb:a5:d5:e2:63:ff:
                    5c:b4:ed:ca:0e:02:0c:3d:fb:db:fe:9a:40:ab:f9:
                    62:d0:2d:71:06:42:b7:92:0e:b4:01:2c:49:33:07:
                    43:7b:88:87:7a:b3:63:4c:d7:0c:32:35:c5:21:55:
                    cb:af:f0:bc:5a:75:26:5c:7e:57:f3:de:ec:c8:9c:
                    90:00:e1:fa:ae:87:ba:b4:7c:f6:b0:35:2b:46:7e:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B7:B0:EB:32:10:91:6B:55:29:45:46:72:09:06:4D:5C:73:E2:10
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:03:ec:81:88:e8:89:b2:c5:b6:cf:25:57:bf:9b:20:98:ab:
         2c:12:30:f1:47:7e:e6:27:7b:1b:ea:1e:0c:0e:ba:49:11:c9:
         95:eb:f5:32:31:94:37:49:2c:77:20:45:53:93:13:33:7f:38:
         49:45:82:de:9f:2f:e9:db:12:06:c4:e7:65:15:ac:60:07:2e:
         fc:ff:04:89:64:fe:30:06:07:73:7d:4d:39:98:f2:8e:d8:c9:
         0f:f8:d0:fe:ef:27:4f:b7:3b:39:a1:4b:19:3f:8b:92:c3:7b:
         a5:11:89:60:b0:92:d7:91:d7:7c:c9:71:c5:9b:5d:e4:e1:59:
         3b:05:b8:7e:e8:df:5e:b2:c8:87:f3:72:4b:0e:d5:d1:88:bf:
         f9:64:95:11:75:c1:15:b0:9d:4c:ee:22:bb:21:d4:15:bc:e5:
         f7:45:e8:e1:6a:4e:b6:e4:b2:4e:ea:75:ab:2b:e1:bd:e8:02:
         cc:7b:fd:f0:4b:ab:e4:66:b9:54:6a:c1:0f:34:61:8e:7f:92:
         7a:5e:5d:46:ac:b2:ff:a8:50:1e:df:6d:84:d1:8d:ae:80:ca:
         7b:2b:79:32:7d:63:f8:f8:42:b7:09:46:60:13:cc:79:4d:af:
         08:8b:1f:73:eb:2b:be:56:2b:7f:99:a9:ac:64:1f:cb:93:4d:
         3a:41:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 00:28:24 2024 by rpki-client on console-fra.rpki-client.org