Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          eGHescIF8V6PsSzvK6My5G8+PIgGbhX48jpyJcE2624=
Subject key identifier:   72:D0:3F:DA:C2:99:35:BF:C1:89:33:F6:CA:FF:BE:3C:7E:C9:55:17
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       105BB8EEA29AAC33F0C3645351CE3742D57C970E
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa
Signing time:             Fri 02 Feb 2024 08:00:01 +0000
ROA not before:           Fri 02 Feb 2024 07:55:01 +0000
ROA not after:            Fri 31 Jan 2025 08:00:01 +0000
asID:                     131735
IP address blocks:        103.231.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
                          rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5b:b8:ee:a2:9a:ac:33:f0:c3:64:53:51:ce:37:42:d5:7c:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Feb  2 07:55:01 2024 GMT
            Not After : Jan 31 08:00:01 2025 GMT
        Subject: CN=72D03FDAC29935BFC18933F6CAFFBE3C7EC95517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:50:d8:f7:ff:82:39:73:a8:62:12:01:ac:
                    74:3f:6e:81:37:61:3d:f0:42:fe:6c:ff:cd:bc:ed:
                    ba:9c:9e:3a:0b:33:25:a4:55:08:01:c4:e4:a8:23:
                    cd:ae:9f:63:09:27:2f:05:5b:2c:7e:75:f3:45:d3:
                    5d:f1:6c:38:8b:fd:cc:6b:92:97:c0:38:f1:d1:77:
                    c0:82:a5:91:52:1f:1a:05:0c:d1:6e:fa:dd:56:4a:
                    fe:36:b3:21:19:53:87:c8:01:f0:3b:20:3b:2b:5c:
                    8b:08:30:38:5c:eb:55:b7:d0:da:b9:c5:d2:a9:e1:
                    9b:a2:e3:a9:ce:3c:70:0b:a2:43:c5:1a:01:46:67:
                    5d:98:e6:b1:e6:17:c1:cb:bc:b5:13:70:a4:35:d6:
                    b8:22:20:50:2f:d5:28:b3:54:89:de:79:08:ab:0c:
                    1e:f0:f7:30:3b:a4:2a:e2:84:d2:9f:f0:a4:c0:c3:
                    47:c2:64:51:35:b5:81:f2:10:dc:1b:ab:ab:7f:77:
                    11:ba:d8:b1:3a:2a:b2:22:cf:b4:e6:59:bf:69:fe:
                    09:bb:67:70:1e:1a:6d:40:72:c7:e6:55:66:9a:7a:
                    df:b0:4d:66:b6:fa:ce:e4:00:9f:9d:44:11:c8:40:
                    92:a1:db:e2:09:65:06:09:d9:d4:84:25:7f:e1:85:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:3F:DA:C2:99:35:BF:C1:89:33:F6:CA:FF:BE:3C:7E:C9:55:17
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:55:b7:21:f6:6f:34:17:8f:b6:04:12:5a:54:dd:a3:1e:9c:
         78:bd:bd:aa:fc:ca:ae:06:7a:22:9a:2b:f3:98:f8:3b:ab:62:
         63:e3:7c:0c:9a:56:f7:01:28:d0:4e:d4:14:9f:35:ec:5b:0e:
         7d:b3:fc:a3:d2:a4:26:28:87:9f:1a:fb:6e:04:7a:8a:53:d1:
         76:39:63:a3:67:71:2e:74:a6:69:72:7e:cc:8f:cd:7c:a8:0f:
         0e:4b:43:59:62:d2:c4:0c:fb:82:2a:8d:d5:6a:46:22:97:6f:
         27:2c:c6:c2:75:99:0b:65:9c:b4:4c:f2:79:8f:a9:de:8a:a4:
         ed:b7:5a:31:22:c1:99:68:33:63:94:20:23:35:db:6c:2a:5f:
         24:f7:59:f9:8d:dd:f0:c6:fe:41:20:cd:53:2c:0b:1c:7c:08:
         9c:4d:3a:e7:de:ff:7b:93:bb:85:91:84:e0:61:83:c1:bd:ab:
         87:85:59:8f:43:a8:69:2d:3b:cc:34:24:61:8b:5a:75:bb:08:
         6a:e1:96:06:b4:de:1e:be:63:b1:8c:fc:5f:31:db:31:b4:1a:
         c9:5c:c6:d1:ca:6c:93:9d:41:75:0a:30:14:8c:c3:d2:ac:9f:
         69:1f:f8:d4:0c:0b:ce:c2:c6:89:5b:7c:aa:3b:82:64:09:be:
         d7:f0:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org