Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          vc6NJ6eKnaL2DW/SE6KVRGxYcYVAuosJ2pjmiFSMMUI=
Subject key identifier:   93:56:00:5D:F5:37:1D:F8:7A:D2:BD:F5:C0:10:0C:29:02:09:DF:F3
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       5E6F7E2D5E48F14074FC70368E9FBF810AEE39D8
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa
Signing time:             Sat 05 Aug 2023 07:00:01 +0000
ROA not before:           Sat 05 Aug 2023 06:55:01 +0000
ROA not after:            Sat 03 Aug 2024 07:00:01 +0000
asID:                     131735
IP address blocks:        103.231.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
                          rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6f:7e:2d:5e:48:f1:40:74:fc:70:36:8e:9f:bf:81:0a:ee:39:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Aug  5 06:55:01 2023 GMT
            Not After : Aug  3 07:00:01 2024 GMT
        Subject: CN=9356005DF5371DF87AD2BDF5C0100C290209DFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:6f:6b:62:42:c5:ef:48:40:ae:3c:5d:67:
                    c5:b5:7c:88:d0:dd:bf:c1:45:5b:57:4a:32:b5:cf:
                    78:ed:80:1a:e2:3f:a1:15:81:d8:a9:d8:e3:d5:df:
                    d0:23:bb:f2:13:f4:7c:b0:c7:c6:b6:ed:25:a5:4f:
                    c8:f2:9e:73:a7:89:e9:e2:be:ad:4f:b4:79:4e:23:
                    34:e9:71:3d:e6:96:0c:be:ce:48:91:02:35:d7:ab:
                    78:83:ae:f5:d1:33:99:b0:bd:a4:78:a0:01:4b:c7:
                    21:9c:02:e6:d2:bd:d5:2c:cd:e1:2e:3e:69:55:fd:
                    ce:d7:39:2a:fe:1a:ed:52:14:08:27:b1:41:18:cf:
                    62:8e:a1:50:84:a6:8c:7b:cc:5b:fc:7c:b7:9e:92:
                    ea:a2:29:50:48:fd:a5:e2:24:a4:41:7d:35:55:5d:
                    6f:64:2d:4f:21:ec:ee:68:c9:d4:f1:4e:75:e0:23:
                    da:34:69:30:fd:7b:b0:d6:3e:72:c1:37:5a:2b:b5:
                    47:21:fc:96:46:5d:98:0d:18:a4:5b:2a:2d:1a:50:
                    08:1a:9e:49:e5:37:d1:3b:cc:be:f8:aa:be:b5:86:
                    01:80:c2:d5:ee:d8:71:dd:af:0e:e9:4b:a1:f5:50:
                    0b:e3:94:ee:a1:3f:d2:8e:43:7b:82:e7:02:9d:04:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:56:00:5D:F5:37:1D:F8:7A:D2:BD:F5:C0:10:0C:29:02:09:DF:F3
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:2f:9d:c2:39:d6:e4:de:5d:29:fe:1e:1d:06:26:ed:94:85:
         be:75:b3:db:bb:89:be:7b:92:b7:e1:6a:18:fa:a9:94:96:27:
         db:c8:c7:a5:75:6a:f7:0d:c4:69:e5:74:28:aa:c8:87:4a:92:
         0c:c3:61:a2:78:e3:f8:2d:63:45:2e:37:8d:0a:4e:0b:3b:80:
         65:d1:45:b7:0b:e5:f2:a8:22:07:1d:11:5a:ea:9f:2b:90:d8:
         8c:4d:cd:dd:8f:c8:4f:d5:42:2e:20:59:f7:fc:f7:b2:ff:d7:
         a7:c6:63:e4:97:a6:0a:73:09:40:cd:af:66:2e:aa:d9:59:c6:
         9e:a7:54:57:4c:e6:2c:79:05:d0:a1:bc:75:ff:52:c8:f6:75:
         15:9d:b4:d2:46:20:de:1d:a7:e3:da:58:96:ae:05:90:03:b6:
         4d:fa:71:1c:ae:ea:ba:eb:ed:4d:09:dc:80:36:f2:79:9f:f3:
         91:51:02:5a:c9:91:fa:3b:09:9d:fe:99:fb:89:10:04:25:a0:
         a5:3c:77:5e:22:18:bd:40:c9:26:e9:a4:6b:96:7b:67:85:60:
         3e:ad:07:92:97:90:b3:0c:2c:f9:54:a5:14:b8:79:3a:26:a6:
         cc:6d:80:af:2b:c2:50:8f:fa:03:f9:db:55:23:66:ec:c2:a3:
         c4:ab:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:53:52 2024 by rpki-client on console-ams.rpki-client.org