Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          sgpODAa5Ppgr21WLNdhgw7NpWxIxjmG3hzxqjlIJ+80=
Subject key identifier:   E3:90:53:DC:14:16:87:81:3B:E2:81:CB:23:F9:D9:17:75:9F:81:34
Certificate issuer:       /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial:       3EE67B1EA4DDDBD65D615A46EB5BE7F4A3D6C981
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa
Signing time:             Wed 28 Jun 2023 10:00:00 +0000
ROA not before:           Wed 28 Jun 2023 09:55:00 +0000
ROA not after:            Wed 26 Jun 2024 10:00:00 +0000
asID:                     45305
IP address blocks:        103.189.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl
                          rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 11:34:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e6:7b:1e:a4:dd:db:d6:5d:61:5a:46:eb:5b:e7:f4:a3:d6:c9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
        Validity
            Not Before: Jun 28 09:55:00 2023 GMT
            Not After : Jun 26 10:00:00 2024 GMT
        Subject: CN=E39053DC141687813BE281CB23F9D917759F8134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:86:fa:0d:09:30:33:47:30:17:e2:9f:ac:
                    a1:21:44:d0:49:77:e4:47:8b:6b:a7:8a:03:bc:7c:
                    cd:21:37:3a:77:11:b7:5a:2c:62:b3:1f:12:0e:93:
                    99:4e:f8:dd:7a:12:ed:f7:2b:0d:4b:0d:93:a9:08:
                    e9:20:65:6e:2d:d9:5a:64:07:cb:7c:a4:3a:81:34:
                    ee:2b:a2:08:28:7d:5b:2b:44:c4:c6:12:01:e2:e0:
                    1c:46:e3:dd:2d:7f:95:32:02:0f:3e:87:9c:bd:0a:
                    b3:bc:bc:dc:9b:c4:47:a6:d5:23:4d:a3:dd:7c:00:
                    bb:35:55:40:e2:bf:d8:80:30:d6:ed:87:c5:51:6b:
                    dd:e0:82:62:5f:a3:6a:06:73:96:4f:e3:03:e8:1f:
                    80:d5:3f:35:cb:fe:99:cb:e7:ed:75:93:b0:7d:77:
                    c9:8e:d5:38:75:1c:55:e4:b3:77:0d:3b:a9:1e:3a:
                    71:ff:1a:a0:27:e4:60:f4:26:24:c9:da:38:17:d4:
                    86:4c:0d:59:50:cc:a5:34:da:17:7a:fc:4e:d5:b5:
                    bf:c8:bd:cf:78:d0:b0:c4:e3:87:f3:d9:e7:98:b5:
                    0b:2c:39:98:3b:f8:76:b3:f0:ae:e8:c9:c7:68:9a:
                    26:62:e0:3d:bc:9a:e9:4b:52:6e:e8:10:09:60:be:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:90:53:DC:14:16:87:81:3B:E2:81:CB:23:F9:D9:17:75:9F:81:34
            X509v3 Authority Key Identifier:
                keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39372e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:e4:71:71:a1:ed:4e:a2:e1:a9:d2:5e:ea:0c:3b:5c:d2:
         7d:84:8f:dc:5c:72:d0:50:d3:2f:0e:4e:c5:27:b3:25:a0:4a:
         ed:ac:3a:b0:68:0f:31:fe:70:fa:2b:a4:2e:fe:32:ec:c8:60:
         5e:80:5e:2a:c9:21:fd:09:74:dc:cf:26:08:81:4a:17:3c:aa:
         b3:83:9b:fd:98:25:d3:16:2a:f3:26:16:ca:88:1b:97:a0:5a:
         2e:09:49:e1:dc:1b:9d:6a:08:00:57:50:90:9f:a9:fa:07:d5:
         76:e1:53:88:bf:f1:d8:a7:ac:6a:99:cb:04:66:03:ef:e4:13:
         0c:b5:ef:62:e5:dd:8e:5f:4c:b2:c0:e7:fe:5c:af:4d:20:29:
         5d:ec:c5:b8:f2:65:20:2f:92:85:e7:28:10:10:a3:7e:5f:e7:
         8c:3c:43:2a:b0:97:be:7e:32:56:ae:70:3b:be:7a:28:fe:e0:
         48:69:99:ee:52:1e:1a:12:fa:a0:9b:95:91:4d:cd:08:08:cd:
         54:a3:0a:a1:fa:ef:d6:6a:a8:0c:04:27:d7:d3:04:73:54:23:
         ab:af:06:7f:07:f4:1b:52:0f:09:66:2d:5d:17:68:a1:de:f6:
         33:b5:4c:10:1d:6b:c1:7f:a6:ce:41:8c:c1:3f:2a:a6:9c:07:
         8b:cd:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:04:39 2024 by rpki-client on console-fra.rpki-client.org