Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
File:                     3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (raw, json)
Hash identifier:          kLaSOm8zIVNkAlboGre29DhDyrRm+Y64gBD+bP47EX0=
Subject key identifier:   7A:A4:CE:20:CB:F2:B2:9D:C0:83:98:C7:B1:84:D9:4C:2B:68:06:DA
Certificate issuer:       /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
Certificate serial:       7041AE4DA886184D3FDA3335B22C7DEAFBCD2440
Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa
Signing time:             Thu 04 Jan 2024 06:24:49 +0000
ROA not before:           Thu 04 Jan 2024 06:19:49 +0000
ROA not after:            Thu 02 Jan 2025 06:24:49 +0000
asID:                     152000
IP address blocks:        103.56.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl
                          rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:41:ae:4d:a8:86:18:4d:3f:da:33:35:b2:2c:7d:ea:fb:cd:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596
        Validity
            Not Before: Jan  4 06:19:49 2024 GMT
            Not After : Jan  2 06:24:49 2025 GMT
        Subject: CN=7AA4CE20CBF2B29DC08398C7B184D94C2B6806DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:d9:eb:fb:b0:a6:7c:4f:5f:8f:e5:e5:8e:
                    d6:4d:e1:f8:97:59:4b:c4:08:34:99:72:44:20:53:
                    eb:74:0c:77:14:e6:a3:c4:4d:1b:6c:32:b5:3a:bf:
                    8a:b0:ef:7b:54:3b:8e:a5:31:f4:94:ac:85:37:47:
                    42:a7:65:eb:df:02:7b:b0:57:9f:6e:9e:aa:0c:e0:
                    32:f3:b3:2f:d0:76:05:74:6a:68:ad:69:f7:fc:3a:
                    ea:7c:e0:3b:0b:c8:a5:6a:6e:c4:03:2e:26:93:ad:
                    d5:48:6e:fe:b4:ef:5c:31:6e:fd:03:9e:b1:4b:d3:
                    51:c0:8c:93:0c:0f:3d:e9:9b:ff:02:a2:fc:67:01:
                    00:d7:6c:d8:3c:f6:47:9c:7f:ba:c3:f3:3d:b2:ea:
                    b6:7a:40:69:d1:24:40:80:d5:34:df:d0:d5:b1:12:
                    94:23:50:4f:3e:61:07:b9:28:c9:c9:99:8a:6e:8c:
                    42:27:59:9c:7b:31:77:56:5b:6b:8e:da:06:cd:00:
                    0c:f7:a3:b1:ca:ab:6e:df:75:ea:21:24:34:de:09:
                    bd:e6:f0:f3:36:42:93:18:8d:d3:0f:e1:79:e9:04:
                    64:72:a8:dc:fa:eb:97:cb:31:38:6b:37:12:f1:f3:
                    3c:2d:6b:2f:02:df:7a:f5:9e:6d:28:63:57:18:19:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A4:CE:20:CB:F2:B2:9D:C0:83:98:C7:B1:84:D9:4C:2B:68:06:DA
            X509v3 Authority Key Identifier:
                keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/3130332e35362e38302e302f32332d3234203d3e20313532303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:f6:58:8b:b2:66:98:7d:7a:3d:e9:eb:45:a3:89:b1:7f:37:
         e4:b3:ac:3d:53:76:58:5b:d4:b5:17:f1:ad:85:fc:cd:78:50:
         78:7a:48:71:87:6c:4e:12:98:ed:b8:6e:dd:11:7f:48:7c:d1:
         48:0e:0f:d8:60:5a:61:e3:2a:07:07:0e:ec:7e:d5:1b:98:c5:
         2a:89:12:5b:5c:4d:25:15:77:70:93:66:9b:c9:1f:80:dc:25:
         a9:75:d3:7a:5a:71:8f:10:07:9a:c7:83:f7:b7:e2:56:16:b9:
         e6:21:b9:0c:01:3c:3e:f8:7b:e5:27:36:36:a5:db:6f:65:b2:
         08:a9:25:6b:0c:aa:4c:52:6f:e0:ac:a9:73:da:85:14:9c:a9:
         48:34:a6:d8:8e:35:30:4a:34:06:10:0a:38:c0:3f:03:9c:8c:
         ee:d6:0e:d1:15:dd:39:b3:bb:9b:d8:9f:11:7f:a1:c8:a7:90:
         ee:b7:c1:8e:cf:54:ad:21:1c:ca:97:69:1d:90:da:2d:6e:ea:
         41:79:50:6c:31:23:1a:2c:02:d4:ee:96:b2:6c:c9:28:a2:17:
         0c:86:13:7d:57:d2:c2:e5:7c:d0:6d:6b:57:dd:0e:98:30:c9:
         5f:74:fa:d7:79:ae:c7:18:3a:c2:ea:01:fe:38:a1:01:29:fd:
         21:9c:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:10 2024 by rpki-client on console-ams.rpki-client.org