Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32332d3233203d3e20313530343834.roa
File:                     3130332e35352e33302e302f32332d3233203d3e20313530343834.roa (raw, json)
Hash identifier:          9eoWn7iSaH/945ms35h4POYME33wd4RCMIMG5XtrnSQ=
Subject key identifier:   03:F6:A8:56:49:3E:F5:E1:80:83:CC:F0:B4:38:D1:41:F9:5D:5C:A7
Certificate issuer:       /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial:       1BA352F21AF6EF00A42E9C7D38D2F58F71D5D6B5
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32332d3233203d3e20313530343834.roa
Signing time:             Thu 12 Oct 2023 15:49:24 +0000
ROA not before:           Thu 12 Oct 2023 15:44:24 +0000
ROA not after:            Thu 10 Oct 2024 15:49:24 +0000
asID:                     150484
IP address blocks:        103.55.30.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
                          rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a3:52:f2:1a:f6:ef:00:a4:2e:9c:7d:38:d2:f5:8f:71:d5:d6:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
        Validity
            Not Before: Oct 12 15:44:24 2023 GMT
            Not After : Oct 10 15:49:24 2024 GMT
        Subject: CN=03F6A856493EF5E18083CCF0B438D141F95D5CA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6e:3c:de:df:21:1e:12:25:79:c7:a3:ea:7b:
                    97:2c:dc:33:0e:d9:22:a2:f0:22:ee:47:61:aa:bd:
                    ee:eb:ae:db:d1:a7:32:2a:db:25:d6:b2:13:b6:75:
                    ba:a7:9a:0a:3f:b5:97:e8:c7:f5:79:0a:59:c7:9b:
                    60:67:1f:89:50:54:b4:85:6e:9a:2f:c1:2d:4d:cb:
                    ec:06:31:4a:cf:62:d6:c8:c1:9f:f5:90:4a:d4:91:
                    87:c1:07:47:0e:f7:25:af:f5:52:bb:c7:50:12:6e:
                    a6:23:d2:ad:81:be:3f:41:96:ac:c8:4c:3a:52:80:
                    4c:3e:de:b2:d6:f0:f7:36:73:8c:d9:cd:70:f5:7c:
                    de:99:bd:8a:11:d3:03:f9:4a:3d:4d:2d:d9:e4:5f:
                    a9:fc:6f:a7:8c:fd:6d:9d:1e:6a:a8:80:a4:84:25:
                    23:8a:04:8d:88:9e:34:d1:c5:d1:13:72:df:1a:eb:
                    b4:77:8f:d2:ce:99:fe:02:4c:18:46:67:2b:72:71:
                    d3:ab:da:c6:54:22:a4:1f:39:80:b8:86:15:bc:4b:
                    05:ef:e2:9d:d5:6e:66:63:80:1d:a7:eb:d7:ba:78:
                    f7:54:4e:12:ce:25:eb:5c:0f:4c:6f:c4:73:21:4e:
                    ff:47:4f:8e:80:5f:72:3a:a4:ad:df:ad:d4:5a:79:
                    ed:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F6:A8:56:49:3E:F5:E1:80:83:CC:F0:B4:38:D1:41:F9:5D:5C:A7
            X509v3 Authority Key Identifier:
                keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33302e302f32332d3233203d3e20313530343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:19:4d:f8:91:c9:78:4a:12:d9:51:50:c8:d8:2d:2b:88:1b:
         52:41:57:f0:9c:69:18:61:cb:70:58:20:2b:85:6f:f1:2d:a5:
         89:47:2a:86:5f:7f:bd:01:87:7d:03:82:10:b0:d6:5e:be:08:
         a8:32:33:b5:ca:ec:64:b7:54:ab:fc:06:9e:c4:07:ea:75:b0:
         fd:5c:0d:94:63:18:f0:16:f7:c7:19:5a:eb:8d:02:a4:9a:1b:
         a2:54:70:57:37:94:7e:1f:83:e1:30:e7:4c:29:b6:46:e7:43:
         94:f5:84:7f:33:52:04:37:65:dc:62:d8:dc:45:45:b7:e2:1a:
         1a:91:98:22:65:77:6c:f9:e1:ba:67:29:06:9d:82:12:57:09:
         dc:2f:e8:cd:21:4b:da:92:71:9c:3a:c0:0b:7a:66:92:d1:6d:
         ff:a1:40:5e:7c:fb:ad:16:6c:8b:50:d8:75:be:28:49:cd:f7:
         47:9f:82:ed:8c:6c:e1:46:98:bc:ba:eb:06:01:21:65:af:e2:
         ae:48:f9:fd:7d:37:36:bd:c6:c4:60:2f:f3:a9:99:de:f1:73:
         75:95:fa:b6:2c:9b:d4:db:22:cb:69:7c:32:61:60:5e:bb:6d:
         a3:c8:d7:ab:56:90:7c:7c:cc:b9:69:12:3d:9f:74:a3:f5:f2:
         b6:36:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:53:01 2024 by rpki-client on console-fra.rpki-client.org