Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
File:                     3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          u5JVGQmxvj3SJ9WytNZrx/nb4K6p/OHUxMnvwFFfbV0=
Subject key identifier:   16:DC:D6:F8:14:10:B4:A1:FE:84:BF:16:F2:12:46:BB:B5:8B:14:5F
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       3F9271D3949BBF32B042C88222D7B5EB002D4714
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa
Signing time:             Tue 09 Jul 2024 18:00:01 +0000
ROA not before:           Tue 09 Jul 2024 17:55:01 +0000
ROA not after:            Tue 08 Jul 2025 18:00:01 +0000
asID:                     23679
IP address blocks:        103.238.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:71:d3:94:9b:bf:32:b0:42:c8:82:22:d7:b5:eb:00:2d:47:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul  9 17:55:01 2024 GMT
            Not After : Jul  8 18:00:01 2025 GMT
        Subject: CN=16DCD6F81410B4A1FE84BF16F21246BBB58B145F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:c5:3c:5d:7f:5f:5b:04:e8:ef:c0:27:97:
                    e1:08:b5:b4:30:85:27:cb:49:aa:24:db:1f:c2:e9:
                    b3:82:12:e4:e7:3f:6e:37:0f:7d:16:47:5f:02:f6:
                    f1:95:ad:02:3c:93:0f:cc:7c:e3:11:31:c2:11:e3:
                    a5:23:b6:76:6b:7d:a7:55:7e:6e:34:cb:b5:81:f4:
                    00:c4:a6:7d:76:98:bd:8b:00:a6:72:82:8f:3f:c8:
                    82:f2:e1:19:40:31:35:dd:49:4d:10:e5:85:6c:58:
                    1a:4e:27:2f:a0:0e:ab:93:db:89:c5:63:2e:6f:7f:
                    b9:83:30:f9:cb:4c:c2:49:45:4c:77:a8:66:36:14:
                    ba:b8:e7:74:cd:0f:ce:c5:7c:71:c9:ce:a2:ef:0f:
                    e7:c5:1e:00:2e:63:8a:da:97:a6:9f:4d:c2:49:36:
                    ee:e8:8d:6a:55:18:40:13:1a:51:7d:fa:73:50:73:
                    a9:fd:93:1c:fd:92:6c:cc:2a:2b:30:2f:08:a2:dc:
                    d3:8b:04:de:ff:30:5f:05:84:e5:f1:c3:70:39:ad:
                    09:ab:ce:f3:c9:47:72:a4:3a:71:c1:f1:03:73:39:
                    ed:bf:ce:e4:ca:21:f9:6b:c7:44:fd:72:ac:89:9e:
                    9c:e0:f3:ca:51:76:86:5a:4b:16:74:b9:48:63:ae:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DC:D6:F8:14:10:B4:A1:FE:84:BF:16:F2:12:46:BB:B5:8B:14:5F
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/3130332e3233382e3230332e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:4f:cd:0f:e7:a4:24:66:44:02:11:85:bd:19:f5:b9:e9:
         55:7f:11:7d:78:88:8a:73:6b:3e:ba:3f:15:78:d7:95:fb:da:
         7f:03:47:eb:9e:e4:4f:01:45:a0:29:63:a7:ad:11:f0:05:b2:
         88:62:59:eb:df:09:4a:7b:e1:5c:f5:d2:8c:2a:da:7d:53:fa:
         ac:45:c7:40:01:a1:04:78:58:d2:1a:d7:78:f6:04:35:80:74:
         e8:c0:f1:1f:20:06:5d:93:25:70:65:07:41:74:78:77:a4:9f:
         c5:e4:24:7d:19:62:d2:c4:1d:9f:ef:72:a9:5b:57:45:7f:f6:
         23:c2:bc:89:19:b7:85:21:a1:49:07:df:ff:56:35:5d:04:bf:
         d6:3c:4e:67:5a:ce:e1:07:ae:8f:35:20:d6:a3:39:e6:92:5a:
         b3:c9:13:57:ae:e1:1d:51:b2:d9:5b:3b:b7:8f:7d:68:63:ad:
         48:1b:29:36:e8:51:27:8b:ec:f1:df:61:55:9d:83:0b:a4:7c:
         ce:54:cf:31:b7:7d:f0:ef:f7:8f:d9:86:66:b0:0a:5e:c2:d1:
         dc:e6:72:a6:fc:7a:55:14:d2:a5:cf:3d:d4:da:27:9e:15:1d:
         4d:6f:28:5f:62:41:ac:1c:36:be:f8:6f:39:a6:4e:95:58:cc:
         05:79:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org