Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          +ZL/jR4jkHL38m4yhCnPzcMy2A6pqHCMxHZrb0m8ttA=
Subject key identifier:   0D:B3:0C:07:74:AB:77:35:BC:96:CD:60:33:CD:71:A3:95:A5:BB:B1
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       6FACDF2B5A2826AEDC3F7D7CAC76914C04FB033C
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
Signing time:             Sat 06 Jul 2024 08:00:01 +0000
ROA not before:           Sat 06 Jul 2024 07:55:01 +0000
ROA not after:            Sat 05 Jul 2025 08:00:01 +0000
asID:                     131735
IP address blocks:        103.231.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
                          rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:df:2b:5a:28:26:ae:dc:3f:7d:7c:ac:76:91:4c:04:fb:03:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Jul  6 07:55:01 2024 GMT
            Not After : Jul  5 08:00:01 2025 GMT
        Subject: CN=0DB30C0774AB7735BC96CD6033CD71A395A5BBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f3:e8:50:e7:a1:29:04:23:22:1d:81:36:38:
                    d4:41:04:52:04:ed:89:ad:c9:5c:9b:af:8b:09:97:
                    9b:f3:4b:17:f1:42:58:36:50:3b:08:72:ff:15:49:
                    d2:59:6a:62:24:3c:88:6e:ec:5d:bb:f3:de:a8:f2:
                    aa:f8:eb:a7:50:26:22:62:a2:52:b4:9d:be:50:1b:
                    d2:bb:84:43:48:ac:99:f1:a9:82:22:a9:d8:1d:5d:
                    7b:1a:48:00:5c:e2:29:38:0d:28:6e:31:bd:c5:72:
                    fb:5c:d7:eb:2a:32:74:b4:6d:3c:38:80:62:01:aa:
                    2e:de:14:61:d7:d6:84:4e:b6:d0:9f:34:ea:2a:c8:
                    f9:94:79:b7:fe:44:b0:40:2b:a1:45:75:f9:d9:cf:
                    79:0c:c9:db:4c:f0:43:39:04:c0:e0:c3:82:bf:6d:
                    bb:ee:f8:47:06:bc:9a:5d:68:23:7b:bc:b4:d0:4e:
                    c7:40:8d:1f:d0:d5:9e:58:89:61:ba:6d:39:7e:d2:
                    aa:40:af:a0:66:56:8a:d8:27:b4:29:e1:fe:bb:7c:
                    f8:b5:ad:1b:ff:90:21:ee:ec:25:ab:f3:56:4f:eb:
                    ee:af:39:0c:24:65:83:15:4e:77:08:57:d3:8b:a1:
                    a6:3e:74:52:29:d7:f0:30:76:2c:9a:4b:b6:a4:50:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B3:0C:07:74:AB:77:35:BC:96:CD:60:33:CD:71:A3:95:A5:BB:B1
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:74:11:22:fd:e3:b0:96:0d:3b:8e:c0:14:d4:70:2f:dc:b6:
         c5:38:98:ba:76:19:75:8d:7e:63:27:41:27:6f:2f:46:73:f8:
         ce:74:5a:ca:a4:e9:b3:3e:a9:9c:36:4c:6e:56:63:0a:13:97:
         08:91:3d:cc:57:c6:d4:6b:f1:84:a4:e0:9f:a9:4a:41:be:e7:
         80:f7:47:28:4f:e1:20:1b:28:bf:71:8b:ec:6e:07:cd:28:bc:
         42:d8:7e:8e:a9:e8:c6:71:80:95:ff:e0:bb:b7:da:d3:35:38:
         dc:22:db:e9:21:db:68:ca:43:66:4b:1b:2f:5c:24:86:55:e1:
         20:14:4a:05:01:ff:13:86:fa:34:d1:c1:4b:1a:80:9e:41:36:
         e8:3a:1e:d1:66:37:fb:af:4f:53:02:cf:a9:6f:10:10:ae:b8:
         34:e0:fd:a6:1a:bb:fd:2b:8d:22:7f:d7:a5:77:b0:4a:91:4b:
         69:61:e8:ea:0f:cc:be:4f:f0:66:4d:25:65:3c:60:ce:b3:86:
         25:65:05:28:f4:15:2f:6e:5c:89:f7:fb:74:fa:18:7c:ff:c6:
         69:df:6d:8d:5e:c3:4b:04:e5:c3:6e:03:b8:a7:06:b7:12:b7:
         60:82:72:b1:1c:ec:05:c0:34:30:98:74:75:87:07:4c:ed:a6:
         ac:89:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org