Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
File:                     3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          hDClbQDSswgVDEu/DPM7msozDc/R6vqroB52plI4h4s=
Subject key identifier:   E5:9A:92:4A:6F:BF:CC:69:F6:C4:AA:BB:69:D5:5B:76:1A:BF:13:4D
Certificate issuer:       /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial:       7BCE8EEFAA977E8C735DBE0BF5B84D5E6550720C
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa
Signing time:             Wed 22 May 2024 10:02:22 +0000
ROA not before:           Wed 22 May 2024 09:57:22 +0000
ROA not after:            Wed 21 May 2025 10:02:22 +0000
asID:                     58369
IP address blocks:        103.188.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
                          rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ce:8e:ef:aa:97:7e:8c:73:5d:be:0b:f5:b8:4d:5e:65:50:72:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
        Validity
            Not Before: May 22 09:57:22 2024 GMT
            Not After : May 21 10:02:22 2025 GMT
        Subject: CN=E59A924A6FBFCC69F6C4AABB69D55B761ABF134D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:8f:04:e2:c0:8a:0a:08:c3:90:90:2f:1d:
                    72:90:ef:c2:3a:ea:70:42:33:31:c6:80:21:7e:35:
                    03:e1:65:80:9d:17:7a:8e:6f:da:49:f0:fc:a5:ec:
                    bb:03:3b:2b:d0:6c:54:55:4b:42:f9:90:06:c9:35:
                    47:dc:83:9b:5a:2f:ed:78:02:43:68:0f:69:e1:76:
                    0b:e5:31:21:38:e5:d8:50:ae:f6:04:14:b6:fb:19:
                    61:a3:0f:fe:4a:db:f4:7b:5f:b6:d8:ba:05:e3:15:
                    d2:28:64:c5:67:96:f8:60:d4:76:ba:87:8f:bf:7a:
                    dc:58:c2:d4:5f:7d:4c:4d:d8:39:79:fc:4c:f6:00:
                    1e:55:8e:24:c5:45:03:23:dd:5f:b8:b2:b7:59:8b:
                    de:9c:38:37:63:20:7b:e8:97:c2:1d:9e:bc:f8:d7:
                    0b:18:a1:54:04:1e:19:6c:30:b9:e5:21:89:67:5c:
                    ef:59:b4:38:f6:20:82:d6:56:60:6e:8c:b4:09:7c:
                    a8:ab:30:4b:10:4a:9b:7d:e5:35:ab:ab:a1:6c:16:
                    6f:64:cc:da:b1:72:e6:8a:cf:63:b8:d7:d9:a5:fa:
                    e0:d1:e8:cc:7b:8d:19:71:5b:01:32:51:e8:e6:c7:
                    11:c8:18:f8:86:91:c6:9c:58:e2:ec:ef:02:61:6c:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9A:92:4A:6F:BF:CC:69:F6:C4:AA:BB:69:D5:5B:76:1A:BF:13:4D
            X509v3 Authority Key Identifier:
                keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:25:3b:45:db:a8:af:ed:f8:12:fb:09:92:90:7c:22:68:
         6f:ad:3f:f5:18:c7:15:88:a1:1f:93:f0:1e:a4:bd:56:84:4a:
         da:fc:74:d0:82:66:8a:25:9f:18:3c:09:99:ed:58:53:41:8a:
         66:9e:3a:fd:7e:ca:a7:07:42:e9:2e:2c:03:bd:20:a6:3c:b3:
         cc:07:9a:b8:1d:32:16:0e:f5:98:eb:e7:e4:5f:85:99:81:8e:
         f8:33:67:6c:a0:56:77:61:ae:27:9e:e6:e8:26:5f:c4:42:b8:
         ae:fd:d8:1a:1f:ed:78:f2:f8:ab:2c:fe:6c:3a:9c:26:13:2f:
         e2:78:c6:b8:e1:82:1b:42:5b:2f:dc:b0:b0:6a:e7:0a:de:30:
         bc:e4:ab:23:a2:c7:25:86:53:52:c5:8d:bd:35:b3:be:f8:da:
         c9:be:f5:ae:d1:81:55:ce:7e:59:03:d8:19:60:3e:22:6e:06:
         8f:60:15:35:19:6c:4d:78:3c:70:f1:c4:b8:ab:0f:a9:08:ce:
         fc:c7:38:b2:06:10:23:0f:17:87:57:93:06:e6:34:ef:e5:02:
         a7:e5:35:2e:8b:04:db:b5:f6:8d:05:f5:b4:f8:4d:e0:ad:45:
         ac:f5:6a:15:1e:e8:e7:55:d8:3f:64:32:f5:9f:43:e0:80:d2:
         b5:7f:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org