Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
File:                     3130332e33392e34382e302f32322d3232203d3e203633353031.roa (raw, json)
Hash identifier:          tkkwyHLbEfugYZZsowJGP4N9NBP0R5Vxk15+c7V82xQ=
Subject key identifier:   15:DE:DD:CE:A9:EF:0E:DA:F6:EB:9C:E5:28:FC:DA:10:9E:A3:C6:CD
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       37A65A42F9E19DE7E671138DFFB5854BDF2C1A62
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa
Signing time:             Sun 23 Jul 2023 17:00:01 +0000
ROA not before:           Sun 23 Jul 2023 16:55:01 +0000
ROA not after:            Sun 21 Jul 2024 17:00:01 +0000
asID:                     63501
IP address blocks:        103.39.48.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a6:5a:42:f9:e1:9d:e7:e6:71:13:8d:ff:b5:85:4b:df:2c:1a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul 23 16:55:01 2023 GMT
            Not After : Jul 21 17:00:01 2024 GMT
        Subject: CN=15DEDDCEA9EF0EDAF6EB9CE528FCDA109EA3C6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:0d:9c:d2:ce:05:e1:13:2a:ba:3f:f7:49:
                    d5:93:18:55:5a:6d:4d:0b:6c:34:10:2b:08:d4:e2:
                    0d:70:f8:f6:99:00:18:46:26:da:6b:f3:85:b2:46:
                    20:04:41:fd:99:24:e3:1d:26:7d:98:9d:6b:0f:08:
                    62:4e:10:40:c8:8d:5c:cf:86:c0:cd:52:67:f0:83:
                    75:9b:1b:a7:9f:4b:17:79:e8:16:9a:68:98:28:16:
                    12:ff:72:10:f5:8f:d5:e7:39:b2:89:ed:b3:91:8a:
                    69:73:77:28:96:2f:5e:eb:01:65:75:ac:9a:bd:e0:
                    c0:fd:0e:50:8d:49:90:5f:eb:ad:5a:71:71:f0:47:
                    dc:15:cc:cc:59:ba:1b:ca:9c:79:77:c1:9a:32:a9:
                    6e:86:cb:2d:34:71:61:8c:f7:99:40:0e:cf:89:67:
                    8a:1a:b9:7a:7f:f6:8a:39:b3:1f:cb:ad:11:14:e7:
                    d0:3f:84:e5:ad:94:e4:71:b7:98:b7:7a:c0:78:2a:
                    44:ed:69:0f:1a:a1:23:d0:0a:e8:a9:77:bf:49:5a:
                    2a:da:08:9f:b9:6f:04:af:01:65:3c:24:0f:a5:62:
                    8c:c6:a4:75:61:79:ec:b9:8a:2f:6c:77:dc:5c:17:
                    12:08:08:84:ed:4f:48:e2:6a:1c:90:fe:93:c4:53:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:DD:CE:A9:EF:0E:DA:F6:EB:9C:E5:28:FC:DA:10:9E:A3:C6:CD
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32322d3232203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:36:00:05:b7:f5:4b:dc:d6:fa:ac:29:b2:1d:0c:75:99:c7:
         78:f3:31:45:28:0b:10:47:d2:d0:18:b8:0d:8c:cb:b8:03:14:
         2b:02:3c:bd:40:08:8a:39:36:69:f0:09:01:10:17:11:82:6c:
         a1:55:d6:d8:8e:63:28:36:db:48:dd:76:01:d5:31:c1:a7:59:
         e2:fd:15:e1:75:00:e3:3f:25:34:68:bd:0c:79:d3:7d:48:c4:
         ae:99:a4:cb:36:da:59:87:6b:aa:57:4c:f1:42:51:c1:5b:c2:
         34:2c:5d:05:30:2e:47:03:24:ca:4a:f5:17:76:a1:62:63:46:
         1c:b5:d6:4d:09:5d:6e:da:9f:40:3c:9b:47:c9:35:44:97:1a:
         d1:63:ae:68:ea:57:ca:2a:73:86:e8:00:13:18:09:2c:98:d7:
         f7:ff:b8:ee:50:fc:dc:4b:98:08:12:5d:71:9d:1e:6f:73:9b:
         1e:ca:a2:2b:98:c8:8e:9e:f3:97:ac:8b:2e:8c:f4:77:c9:85:
         07:01:af:67:63:20:da:25:0d:74:b8:8a:90:0d:92:d6:49:8c:
         32:19:75:17:55:86:ca:13:95:fa:31:b3:86:37:22:6e:a4:0b:
         dc:5a:ad:10:33:38:42:08:9f:f5:5e:01:9e:d6:10:d5:90:87:
         49:7d:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:33 2024 by rpki-client on console-fra.rpki-client.org