Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
File:                     3130332e31372e3234342e302f32322d3234203d3e203535363636.roa (raw, json)
Hash identifier:          +JhwsyDOC+L7W2czwjrna1+8/UsW1PiQjbT1DnYdXrU=
Subject key identifier:   54:E0:B1:39:36:7A:B9:9D:2B:D3:F6:25:CA:22:45:B4:B8:6A:6F:92
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       0BE857408750AF58AB1A9436A659D9C0CD479A95
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa
Signing time:             Mon 31 Jul 2023 00:14:34 +0000
ROA not before:           Mon 31 Jul 2023 00:09:34 +0000
ROA not after:            Mon 29 Jul 2024 00:14:34 +0000
asID:                     55666
IP address blocks:        103.17.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e8:57:40:87:50:af:58:ab:1a:94:36:a6:59:d9:c0:cd:47:9a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jul 31 00:09:34 2023 GMT
            Not After : Jul 29 00:14:34 2024 GMT
        Subject: CN=54E0B139367AB99D2BD3F625CA2245B4B86A6F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:15:53:63:76:1c:79:30:75:00:74:9c:c4:18:
                    4f:e5:b5:b5:92:2f:09:ca:44:87:0d:58:16:99:51:
                    ae:3c:6c:48:1e:93:f8:b1:c8:6f:fc:97:50:39:bb:
                    a6:3e:6c:23:23:7b:dc:6e:a3:1e:52:45:ec:4e:88:
                    7c:b4:54:5c:72:d7:f4:76:de:9a:bf:62:e2:2f:83:
                    e4:93:30:29:d8:20:f8:0a:f5:23:b9:33:c8:9e:81:
                    40:6a:5d:e8:17:1f:98:39:0d:fd:bf:f7:87:a4:97:
                    bf:99:4d:d4:99:69:4d:2a:e5:50:36:c0:60:e6:c2:
                    1e:21:33:ea:3e:2b:8d:de:8a:18:bf:46:b0:0f:d4:
                    2f:fb:a7:3c:ec:b3:33:9c:c0:94:e2:85:85:f2:06:
                    0f:4c:8a:d4:e9:80:06:ac:22:bb:f7:ec:ca:63:b1:
                    6f:e0:3f:03:e3:b4:14:00:2a:8b:72:5b:cf:cc:b8:
                    32:e4:0f:b8:9d:37:07:c8:22:cd:68:78:52:6a:11:
                    79:29:9d:e0:b8:9b:f6:eb:e1:4a:da:c2:ff:11:19:
                    6b:9f:a2:40:5d:66:95:4c:42:05:fd:8c:74:49:b0:
                    d5:aa:bc:4d:11:24:2d:1f:cb:e8:da:a5:57:df:b7:
                    c2:2c:61:9c:d8:8f:43:8e:8f:79:43:10:99:ea:53:
                    61:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:B1:39:36:7A:B9:9D:2B:D3:F6:25:CA:22:45:B4:B8:6A:6F:92
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3130332e31372e3234342e302f32322d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:ba:ce:70:ea:7e:ef:e7:02:27:88:17:77:bd:cf:49:dd:50:
         ab:87:e0:00:46:cd:9e:87:ef:c7:df:b7:40:05:ce:43:0f:61:
         42:1a:8a:fa:a2:b7:04:1b:40:e1:76:95:8e:ba:24:8a:4d:60:
         b8:38:f6:4b:6f:d6:43:19:f2:29:34:34:68:22:13:9d:8c:5f:
         af:71:4b:e1:2f:51:e9:d3:f8:01:ca:a5:a5:e6:61:4f:7a:b9:
         9a:56:59:a6:64:9e:e6:97:75:a9:db:a5:32:f8:f6:6d:cb:a7:
         6a:0c:ab:52:1f:3b:d4:9a:c7:cb:64:a7:96:fe:00:31:b8:3f:
         95:a1:e0:b8:94:fc:49:87:e7:13:c9:ed:94:0b:6f:69:cd:ef:
         0c:60:13:d9:ec:61:76:f9:76:a2:62:2b:88:08:93:5c:c5:db:
         c8:06:e0:ec:39:36:40:b7:29:10:25:1d:dc:ee:3a:6d:d9:74:
         36:70:6a:78:6c:df:45:5d:db:f6:a4:92:fd:03:c8:25:07:d0:
         49:62:38:e6:47:1b:4b:1f:68:5b:1c:57:b5:d7:d9:49:43:3d:
         17:2d:60:96:27:41:2d:e7:3b:b8:03:ba:d2:e4:d6:a6:cb:4b:
         5c:4d:15:19:bf:79:ee:72:6d:97:c5:70:4a:75:d1:4c:5c:d5:
         af:6f:33:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:33 2024 by rpki-client on console-fra.rpki-client.org