Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          DHwhB9BzP0jjwAzjgBlAAmWzhX/FFCvXHXO2UG3urP4=
Subject key identifier:   AF:BC:A3:46:33:FF:3E:24:E3:9F:EE:BE:00:37:15:74:EA:9D:98:18
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       0269A871B8C0FEC2344924A612FF82AF4FADF02F
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 12 Oct 2023 06:47:38 +0000
ROA not before:           Thu 12 Oct 2023 06:42:38 +0000
ROA not after:            Thu 10 Oct 2024 06:47:38 +0000
asID:                     56255
IP address blocks:        103.224.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:69:a8:71:b8:c0:fe:c2:34:49:24:a6:12:ff:82:af:4f:ad:f0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Oct 12 06:42:38 2023 GMT
            Not After : Oct 10 06:47:38 2024 GMT
        Subject: CN=AFBCA34633FF3E24E39FEEBE00371574EA9D9818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:17:96:25:3e:44:63:56:23:dc:c2:ef:c9:01:
                    4f:b3:0e:e4:5b:c3:ba:b2:87:e6:87:42:14:62:6f:
                    05:b0:54:58:a5:5f:3a:11:98:77:25:93:e9:16:b0:
                    c2:53:6f:cc:ae:57:f1:ec:40:95:15:2f:9a:99:c7:
                    d2:56:4c:4b:03:d6:6a:5d:dc:23:ac:92:cd:78:97:
                    eb:8a:b0:d5:a2:69:6f:76:91:ac:1f:f2:e4:d1:1d:
                    73:86:e1:05:fe:83:13:7f:e1:d6:d0:51:68:0a:1a:
                    b2:0a:41:da:9f:3c:8a:44:ee:bb:bc:a4:f4:47:71:
                    ff:28:7d:02:f3:a2:c8:bf:2a:63:05:bf:28:52:72:
                    fb:6b:47:22:53:dd:d7:b2:54:96:49:c3:66:02:a5:
                    d4:d2:13:e4:24:da:6d:4c:ff:a8:18:4c:cd:6b:46:
                    1f:fb:6d:f7:40:22:a6:f0:44:fa:4d:8c:f7:66:b8:
                    07:29:ca:69:90:fd:44:8a:ca:6c:99:a3:4e:12:46:
                    0b:2c:18:d5:bf:e0:b1:0b:78:c8:1f:ad:d0:8b:a1:
                    df:f6:04:1a:e8:30:7e:05:2c:2d:8c:c9:f7:8b:eb:
                    a0:7a:b3:e7:bf:6b:1d:39:18:14:e5:5b:33:33:b9:
                    a5:6f:aa:61:a1:e9:12:1d:1b:6c:58:a6:85:ee:ef:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:A3:46:33:FF:3E:24:E3:9F:EE:BE:00:37:15:74:EA:9D:98:18
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:14:56:64:b5:9d:94:70:0e:78:aa:cc:d5:c4:02:bd:42:76:
         e5:ff:2d:2a:f9:7a:ed:10:51:3a:8b:62:66:bc:50:8a:95:e4:
         22:70:3a:36:1e:ed:dd:bd:ec:9b:72:c6:5d:c5:b0:11:15:3c:
         1a:d9:81:fa:ed:f5:a0:38:a5:85:a1:57:5c:ec:9f:3a:e6:d6:
         d7:ca:0c:17:30:e9:88:0f:a9:de:0f:d4:b5:ad:95:88:57:45:
         70:91:ed:ca:ac:dd:11:83:00:d7:2f:cf:66:cf:81:a3:78:e3:
         3d:64:67:f3:f0:6d:08:d3:6a:ef:28:a6:e9:f3:2d:21:42:df:
         60:61:be:48:e8:29:cb:cb:4d:3e:68:c7:a9:b4:5d:a4:6b:68:
         94:12:11:e0:d1:35:8d:b4:90:16:15:cf:f6:b9:73:6c:dd:cc:
         72:fa:1d:92:54:f3:a1:b1:4b:f9:34:6d:3a:b0:d4:36:6c:8f:
         f1:af:fe:e2:1a:d3:e7:b1:77:92:cf:09:5e:fe:da:dd:2e:de:
         6f:09:d7:6d:32:52:10:9b:6b:f3:4f:c6:80:c5:5d:4d:7a:13:
         1b:b6:91:c0:2f:29:4d:85:9f:29:94:9b:4b:a6:be:97:39:f5:
         d4:46:4a:1c:ae:64:a9:5b:7c:ba:be:47:e6:71:31:43:11:10:
         ce:e3:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:17 2024 by rpki-client on console-ams.rpki-client.org