Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37372e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          PQqp0FJBU6xylD+255dmmPtTfu9t12GC84srT6hbTts=
Subject key identifier:   80:B3:BE:6E:6A:F4:86:33:95:F9:D2:C4:91:CF:C3:A6:60:49:95:C4
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       26DB45DA4581453FA4F243674D3908600BFC8AA0
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 12 Oct 2023 06:47:49 +0000
ROA not before:           Thu 12 Oct 2023 06:42:49 +0000
ROA not after:            Thu 10 Oct 2024 06:47:49 +0000
asID:                     56255
IP address blocks:        103.224.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:db:45:da:45:81:45:3f:a4:f2:43:67:4d:39:08:60:0b:fc:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Oct 12 06:42:49 2023 GMT
            Not After : Oct 10 06:47:49 2024 GMT
        Subject: CN=80B3BE6E6AF4863395F9D2C491CFC3A6604995C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:7b:f8:32:f8:e8:c3:17:4a:28:bc:23:04:
                    ce:5a:13:b6:99:6a:cb:c4:50:a2:c7:9d:62:67:b8:
                    38:c1:3e:a7:75:98:d7:1a:48:17:35:49:7b:d0:a0:
                    4a:93:aa:c5:5f:ce:6d:3f:aa:61:48:8d:30:74:18:
                    81:35:ac:78:3a:42:b2:81:8b:5a:fa:99:9d:7f:32:
                    da:13:7e:01:0e:01:fd:d7:17:84:57:8f:89:b1:cf:
                    c0:9c:b7:47:da:64:2e:dc:ea:e5:ec:18:a1:67:fa:
                    64:2b:eb:9d:7e:99:01:e8:29:aa:1d:de:a4:91:c4:
                    83:71:17:66:8d:54:f8:1d:bb:c0:8c:73:0d:e9:92:
                    01:d0:6f:32:c3:2a:7b:05:0f:f3:dd:c7:d8:b4:bb:
                    11:c2:90:8b:e8:d4:17:72:67:6b:f6:9f:95:25:9a:
                    75:52:d0:2b:a6:a6:e1:cd:4c:2a:c2:dc:b5:34:99:
                    1b:9e:45:4f:17:38:11:ae:b3:66:8a:20:6c:4b:67:
                    da:b1:d8:18:4a:e3:22:86:3a:3a:c1:fe:88:10:c9:
                    4e:6a:94:d0:ab:66:1e:3d:1b:d0:f9:88:ea:6c:70:
                    f2:f1:65:cc:25:77:11:a5:4f:8a:ed:6a:ff:3e:89:
                    7d:15:94:dd:f2:e7:23:b7:14:20:ec:23:aa:13:e0:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B3:BE:6E:6A:F4:86:33:95:F9:D2:C4:91:CF:C3:A6:60:49:95:C4
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37372e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:c6:ca:59:8e:28:51:8c:cb:30:38:cc:7e:5a:0b:32:0d:
         12:ea:5c:fd:5d:27:95:60:65:6b:50:3b:c9:81:36:4a:6f:3f:
         eb:94:7b:41:bf:cd:c1:77:1f:23:1e:ac:d6:8a:6e:2a:98:d6:
         d1:1d:b2:49:f4:12:de:dd:e1:63:92:8a:d4:e5:7f:30:2d:b6:
         31:31:ee:8f:72:90:f5:ef:be:13:1d:bb:3e:55:b8:5c:b0:70:
         6f:be:be:18:49:29:3e:4b:8d:91:fb:6a:4a:53:a6:86:21:3b:
         84:e7:a0:ae:55:f3:2a:c8:57:5c:f7:ac:fd:c0:31:9d:73:27:
         f8:5a:b8:59:24:11:f9:08:2f:40:c5:3d:7c:8f:88:86:2c:28:
         4f:20:04:02:d7:d9:d7:70:ff:6d:a7:d2:2d:7f:6b:fa:45:30:
         53:4f:8e:ac:ad:01:6f:e6:ea:f3:36:84:f8:99:0a:45:c7:49:
         c6:dd:a4:11:9d:29:75:a8:0e:9a:09:81:08:cf:13:e9:6a:bb:
         34:22:04:4d:75:95:57:4d:2e:3b:20:00:7f:f5:b1:77:2d:9e:
         b1:66:4c:fb:3f:06:de:27:47:e2:0a:8d:b3:32:8a:0a:f7:b6:
         ee:c7:ef:47:1f:5d:79:ab:8d:10:c0:e4:a9:32:3f:be:33:5d:
         38:5c:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:17 2024 by rpki-client on console-ams.rpki-client.org