Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
File:                     3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (raw, json)
Hash identifier:          2tef45is22qJgNqR8wAFBPhra0VI6eX9qdT57gMlUjE=
Subject key identifier:   CF:50:7C:06:EE:09:D3:CD:5E:C5:83:66:66:B0:EC:24:C7:DB:C4:41
Certificate issuer:       /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
Certificate serial:       15877E85C0683423885E14840F08D165F1D3C090
Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa
Signing time:             Fri 30 Jun 2023 01:00:01 +0000
ROA not before:           Fri 30 Jun 2023 00:55:01 +0000
ROA not after:            Fri 28 Jun 2024 01:00:01 +0000
asID:                     45305
IP address blocks:        103.190.114.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl
                          rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 09:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:87:7e:85:c0:68:34:23:88:5e:14:84:0f:08:d1:65:f1:d3:c0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D
        Validity
            Not Before: Jun 30 00:55:01 2023 GMT
            Not After : Jun 28 01:00:01 2024 GMT
        Subject: CN=CF507C06EE09D3CD5EC5836666B0EC24C7DBC441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:86:f9:df:80:c0:77:ed:57:15:c5:cc:69:
                    ba:e2:6e:f4:9b:18:bc:9d:78:50:af:71:16:8c:85:
                    9d:f3:43:9a:d8:cd:e0:24:45:1d:ae:a1:8f:05:24:
                    2b:a5:57:b1:b3:f0:c1:a5:1e:57:b4:ec:f5:b0:0d:
                    b5:b6:1d:f6:e7:be:a4:45:ce:e9:ae:fa:b0:90:61:
                    ba:98:15:31:0f:53:84:62:a2:27:33:24:8d:81:9a:
                    dd:97:fb:7f:43:8d:69:5b:3d:b4:69:dd:7c:c7:e3:
                    f5:4e:26:38:6b:42:51:a9:e5:b8:5e:0e:4f:67:4f:
                    7a:ab:89:eb:b7:77:87:df:d2:41:24:39:85:ac:0f:
                    bb:7f:b7:66:7a:52:6c:d6:90:1c:30:1d:b2:df:b7:
                    41:a7:7c:16:9f:bd:cc:42:5e:7c:1f:7e:14:8f:f3:
                    a4:9d:57:ed:9e:c8:d7:49:f3:43:37:ec:0f:13:50:
                    da:73:69:12:14:b8:8e:d6:ac:04:1d:d2:21:30:7e:
                    e2:74:50:96:cb:e2:84:df:79:71:b2:1c:eb:e8:29:
                    43:98:26:c6:13:d4:40:3c:c9:6a:53:0f:a7:10:80:
                    26:6e:08:f8:69:7a:43:1f:db:7c:fa:9a:3f:8b:18:
                    93:c0:76:76:e6:aa:da:96:25:be:86:9a:b2:d8:23:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:50:7C:06:EE:09:D3:CD:5E:C5:83:66:66:B0:EC:24:C7:DB:C4:41
            X509v3 Authority Key Identifier:
                keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:cc:c4:95:f7:d2:9b:75:99:ce:90:b5:9a:d6:f0:81:23:ee:
         de:8b:db:97:af:e7:21:f2:b4:55:aa:38:25:1d:bf:b8:15:02:
         45:bb:fc:33:77:c7:50:8f:1a:c5:7b:3e:d3:c8:3e:7a:6c:0f:
         be:28:72:aa:05:0d:3e:ef:9e:be:6f:0e:d9:c5:93:3e:84:3a:
         a4:c2:88:f1:9c:77:f2:37:fd:93:76:59:30:23:fe:1d:de:ce:
         cb:b3:76:74:c0:af:56:ad:67:bb:8c:62:25:df:e1:4a:82:d2:
         23:e2:85:38:7f:cd:fb:ba:04:99:dd:97:e7:ea:f2:f6:6b:d4:
         4c:e7:4d:0f:56:a0:d3:83:d4:4f:04:0d:45:ec:a8:ee:0a:57:
         16:ed:f1:bb:cb:ef:c7:08:6d:e2:ee:5e:ee:ea:d0:85:6d:71:
         0e:2a:92:56:e4:93:66:95:f9:3a:55:ad:9e:2e:46:d8:1c:8f:
         c3:18:1f:26:97:5a:9d:27:2c:69:ba:a8:5b:27:08:f0:b5:9f:
         81:7f:39:40:f2:42:d8:98:d7:cd:b4:68:63:80:fb:0f:50:80:
         15:a1:1e:bb:94:1a:96:ca:6a:64:85:5d:82:e1:3c:fe:db:20:
         0b:3c:1b:80:61:c4:99:ef:68:c7:4d:9c:71:94:4b:83:82:fd:
         91:b6:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 21:22:35 2024 by rpki-client on console-fra.rpki-client.org