Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa
File:                     3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (raw, json)
Hash identifier:          vdbozKXDJ7KCc/ISCcjZnu9PfTuVIET7Hn2LoXc57Dw=
Subject key identifier:   CC:7C:59:FC:80:41:D1:0A:0E:4B:F2:78:66:88:12:AB:73:2C:18:BE
Certificate issuer:       /CN=A794160F8781ADF0A63CEECE52275B19F08F18D8
Certificate serial:       082DAA0C4C6FC0D3BA629726BCC808C7C01C8F9F
Authority key identifier: A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa
Signing time:             Thu 12 Oct 2023 10:59:29 +0000
ROA not before:           Thu 12 Oct 2023 10:54:29 +0000
ROA not after:            Thu 10 Oct 2024 10:59:29 +0000
asID:                     151536
IP address blocks:        103.244.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl
                          rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2d:aa:0c:4c:6f:c0:d3:ba:62:97:26:bc:c8:08:c7:c0:1c:8f:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A794160F8781ADF0A63CEECE52275B19F08F18D8
        Validity
            Not Before: Oct 12 10:54:29 2023 GMT
            Not After : Oct 10 10:59:29 2024 GMT
        Subject: CN=CC7C59FC8041D10A0E4BF278668812AB732C18BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:a2:cd:bf:55:5a:7a:5f:c2:4f:c2:dd:20:
                    5c:98:dc:73:8b:ee:77:d9:2e:0b:d0:6c:e9:c6:7f:
                    47:b9:57:5c:28:bf:97:ec:94:95:4c:c4:b5:30:f7:
                    fe:d6:b3:7a:40:7b:13:ab:28:f8:87:f9:93:00:1c:
                    ea:2d:bd:05:a6:83:e5:af:df:a7:0a:a6:6a:05:9b:
                    bc:dd:6b:8f:55:36:d7:d2:7e:64:d8:9d:1e:4b:92:
                    c0:9d:84:cc:f2:0a:cf:c3:3a:7e:4b:0c:f2:f1:8d:
                    b4:9f:6f:fd:ea:1a:57:9f:e3:6b:e2:16:a0:64:8d:
                    29:3f:a1:22:74:d9:d9:4c:ad:b9:96:73:71:45:22:
                    4e:fd:9f:27:ec:67:65:65:99:45:55:77:0b:ee:68:
                    82:1f:2b:c3:b9:f6:f3:c7:c2:43:bb:b5:28:27:36:
                    97:2c:c8:b8:7c:dc:a7:5a:8b:18:fd:58:f8:92:32:
                    e7:1b:52:18:37:e8:f2:2a:19:80:cb:3c:7d:71:72:
                    06:79:64:21:de:9a:a9:19:74:5f:e9:68:f9:ef:e3:
                    00:c4:db:10:90:1f:00:19:96:d2:79:e7:fb:59:fc:
                    1b:dc:fe:8a:e1:f3:6e:bf:dd:e6:2d:62:36:ab:83:
                    d1:75:c0:f6:b2:4f:6c:c7:23:f5:96:67:1c:77:51:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:59:FC:80:41:D1:0A:0E:4B:F2:78:66:88:12:AB:73:2C:18:BE
            X509v3 Authority Key Identifier:
                keyid:A7:94:16:0F:87:81:AD:F0:A6:3C:EE:CE:52:27:5B:19:F0:8F:18:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/A794160F8781ADF0A63CEECE52275B19F08F18D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A794160F8781ADF0A63CEECE52275B19F08F18D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:d6:c3:25:3b:83:45:0b:05:11:4e:b1:d7:42:fc:45:64:
         7b:a7:40:b2:7b:5d:41:d5:af:c2:5b:ec:72:ba:4f:fd:ba:d8:
         21:4c:9d:b7:58:4b:d6:ea:9a:fe:27:b4:52:2c:ac:b5:1e:3d:
         a3:76:eb:a8:6a:49:cf:f1:7f:dd:b8:14:e5:a3:5c:81:e7:6f:
         b6:ee:3b:b6:04:db:2a:3d:04:91:0b:75:f2:e4:4e:5c:05:72:
         68:9d:ac:a6:4b:ab:ba:4c:f1:ef:1d:68:97:22:b7:5c:2c:96:
         a8:a0:ab:1d:a4:3c:ff:b8:97:f8:1b:45:e8:51:27:00:d7:87:
         96:2a:8c:56:5c:b3:10:cc:de:64:a3:3d:04:5c:fd:9e:b8:0c:
         39:0b:bf:61:ec:b9:9e:d5:70:be:b3:52:bf:ec:8b:3c:53:e8:
         e2:a0:4c:35:a9:7c:eb:78:b9:62:76:df:73:af:ca:07:c6:bb:
         18:9e:93:da:96:96:10:76:51:62:73:22:d5:6a:bd:bd:7d:a7:
         2e:6c:6e:26:92:c1:5c:a0:37:8c:33:82:2c:89:ab:37:f1:38:
         5a:bd:36:ad:e3:32:de:9f:5c:05:59:3a:ff:55:32:fd:68:d8:
         fd:36:25:41:3b:c0:a1:1c:64:d6:b5:c9:50:49:fe:21:e9:73:
         c2:86:fc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:18 2024 by rpki-client on console-ams.rpki-client.org