Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa
File:                     3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa (raw, json)
Hash identifier:          oVFJnSsJTdoROE61HAUZU3xb50KNn3E8QtVm803c05w=
Subject key identifier:   92:D5:DB:48:D6:7B:BE:12:D4:F6:2B:19:EC:B5:5A:BD:D1:B8:8A:41
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       7391D9174B48FEDD2F9ADFC7DBBBB41F9D3539CA
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa
Signing time:             Tue 11 Jun 2024 04:00:01 +0000
ROA not before:           Tue 11 Jun 2024 03:55:01 +0000
ROA not after:            Tue 10 Jun 2025 04:00:01 +0000
asID:                     23679
IP address blocks:        103.103.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Jun 2024 07:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:91:d9:17:4b:48:fe:dd:2f:9a:df:c7:db:bb:b4:1f:9d:35:39:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jun 11 03:55:01 2024 GMT
            Not After : Jun 10 04:00:01 2025 GMT
        Subject: CN=92D5DB48D67BBE12D4F62B19ECB55ABDD1B88A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:b2:97:a3:cd:99:9d:c3:3a:1b:f0:de:4e:
                    f3:74:19:4b:7d:b8:34:06:e0:69:b1:d6:83:10:d2:
                    8e:1e:bf:31:27:f4:74:50:94:40:0b:cc:41:25:56:
                    b7:35:cf:34:b1:ba:63:e1:45:2a:5f:ed:e6:fc:39:
                    fc:6b:4e:a2:d4:4a:bb:0f:c7:00:fe:af:a3:da:67:
                    54:32:5e:ae:19:74:4a:da:2d:42:90:ce:62:73:4a:
                    b1:2d:bc:72:be:f4:b9:d9:8e:29:e5:f4:dc:3b:ee:
                    df:f2:5a:33:e8:4e:c8:8d:9d:62:79:74:69:02:20:
                    0e:ed:59:18:43:e3:8f:78:a5:0a:27:7d:29:4f:22:
                    d5:81:29:dc:b3:bd:06:92:56:53:78:e1:5c:9f:b0:
                    6b:d8:3a:f3:37:d8:ad:67:13:75:e8:77:fe:e5:3f:
                    24:7e:21:99:a3:fe:9e:ff:ad:2e:7a:e9:27:73:37:
                    4d:bc:88:54:6c:83:67:d5:47:1b:ad:d7:64:b0:3b:
                    28:cf:d2:57:a2:17:51:9d:84:56:78:09:d8:9c:ef:
                    d2:89:7d:ed:34:03:4f:28:80:8a:b4:4b:21:dc:48:
                    a0:bd:d7:f3:04:de:ed:87:94:62:be:eb:9b:81:a4:
                    bc:f0:20:8b:7e:32:d7:f2:a5:1f:ae:a3:a4:dd:49:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D5:DB:48:D6:7B:BE:12:D4:F6:2B:19:EC:B5:5A:BD:D1:B8:8A:41
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3130332e3133362e302f32322d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:b1:94:44:68:40:59:be:6a:78:68:ab:cb:df:35:3f:db:85:
         d1:00:ef:aa:e6:25:b2:39:6f:84:33:09:25:76:fe:54:fa:5a:
         f1:85:d5:2f:1e:fd:86:61:5c:7a:e8:7e:75:15:5e:fb:4a:33:
         62:0b:52:c7:8c:46:58:45:66:5f:1c:1c:71:34:21:e0:b6:66:
         39:c4:63:ee:1b:80:75:9a:f9:9f:72:14:a2:9e:95:28:08:a0:
         3e:78:7a:65:4b:b3:01:65:e8:eb:54:9f:8f:c4:5d:90:25:f2:
         5c:3f:e8:ff:c9:a2:b1:49:00:91:c9:d0:83:5b:ab:96:2d:b6:
         93:95:77:37:55:1f:c3:3d:3e:69:45:ef:37:0a:cf:68:5a:24:
         84:71:58:dd:a6:22:41:be:95:2b:db:1f:84:e3:52:27:60:36:
         01:7a:a5:8b:ec:a6:bd:ad:ab:32:c7:0c:6a:0e:71:66:65:3e:
         20:12:78:ba:c1:69:61:57:e7:88:e7:a2:a1:82:0d:09:e0:d2:
         1a:04:3a:31:fe:24:ea:5c:bd:91:e3:7f:74:20:3f:ac:95:f5:
         c1:01:03:e2:b8:35:3c:e6:9b:ac:17:87:d9:32:a5:32:8d:de:
         93:81:90:3a:86:dc:fb:20:ed:19:f5:12:71:16:af:05:f2:99:
         85:4f:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 11:45:40 2024 by rpki-client on console-ams.rpki-client.org