Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa
File:                     3130332e32362e3230382e302f32322d3234203d3e203138313033.roa (raw, json)
Hash identifier:          cH3GaFQ+tUz+m3ajT6Kf1UMmVbnKrHzTX4Rv76uDN8s=
Subject key identifier:   D2:35:31:35:81:F8:CE:0D:00:A8:9D:38:BF:F4:81:45:37:39:5C:D6
Certificate issuer:       /CN=690E7BC726C787991D438BDDB48990A7A17D8D15
Certificate serial:       33D982A0D1C2F49C85D29BA12ADAC400343150B6
Authority key identifier: 69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa
Signing time:             Wed 08 Nov 2023 10:04:20 +0000
ROA not before:           Wed 08 Nov 2023 09:59:20 +0000
ROA not after:            Wed 06 Nov 2024 10:04:20 +0000
asID:                     18103
IP address blocks:        103.26.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl
                          rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:82:a0:d1:c2:f4:9c:85:d2:9b:a1:2a:da:c4:00:34:31:50:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690E7BC726C787991D438BDDB48990A7A17D8D15
        Validity
            Not Before: Nov  8 09:59:20 2023 GMT
            Not After : Nov  6 10:04:20 2024 GMT
        Subject: CN=D235313581F8CE0D00A89D38BFF4814537395CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:53:ab:a6:ce:f5:9b:52:25:06:8b:4d:cb:
                    79:b8:07:91:6b:f9:36:a8:39:6e:e8:c3:c8:1b:3e:
                    96:5e:9d:91:6a:a5:2a:0a:b3:f9:98:eb:e5:57:5b:
                    6b:da:47:b6:7b:3a:27:00:bd:c6:c3:b8:2a:80:d5:
                    17:82:55:6e:60:c5:ba:69:e9:b6:77:cc:78:9c:5f:
                    58:ff:d8:17:0e:d2:82:f0:f9:ee:54:a0:94:c2:ee:
                    30:50:56:34:47:d8:f8:90:de:9f:ff:02:84:88:df:
                    be:a3:2b:50:cf:1f:ab:fe:48:54:e7:9f:a9:c2:04:
                    71:6b:79:45:29:47:1f:07:df:e4:ae:28:2f:15:ba:
                    13:d7:da:40:9f:7f:b3:a3:44:59:90:ed:11:0c:be:
                    a0:5c:72:38:81:a7:ed:02:e8:b6:9f:48:f4:90:f8:
                    ec:33:8a:17:57:c1:89:60:da:88:79:84:bf:ba:e0:
                    f7:f9:0d:58:85:78:90:c7:af:ee:71:64:eb:4e:ec:
                    35:9c:46:a3:c5:c7:de:75:b9:5f:76:a4:6e:32:07:
                    3d:43:72:b1:c0:42:d1:28:39:ec:5d:02:c4:fb:a3:
                    df:29:53:0b:88:c5:f9:5c:34:0f:c0:7f:8e:8f:e8:
                    05:e8:bd:e8:b0:07:50:0c:6b:2e:e4:0e:79:e5:dc:
                    8d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:35:31:35:81:F8:CE:0D:00:A8:9D:38:BF:F4:81:45:37:39:5C:D6
            X509v3 Authority Key Identifier:
                keyid:69:0E:7B:C7:26:C7:87:99:1D:43:8B:DD:B4:89:90:A7:A1:7D:8D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/690E7BC726C787991D438BDDB48990A7A17D8D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/690E7BC726C787991D438BDDB48990A7A17D8D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4431751-664b-47a0-a520-d97f5c12618c/0/3130332e32362e3230382e302f32322d3234203d3e203138313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:b4:b2:36:0f:6e:f5:b5:e7:09:e5:b8:ef:fa:ae:ce:78:
         3d:32:cc:29:a3:06:cd:0c:9a:a8:bc:ab:e9:f3:a6:69:01:b9:
         2a:e7:f9:b1:61:ce:40:4b:b4:92:ff:20:6c:4a:25:f9:6e:c5:
         61:32:be:ce:26:6c:13:eb:29:69:67:27:e6:e8:9b:eb:02:8e:
         2c:6b:e0:73:8b:05:3b:67:2d:d3:20:24:b9:95:df:37:03:da:
         3b:9d:6d:82:f6:0b:3d:9c:e7:36:b1:11:1e:cf:ec:0f:20:ed:
         7e:eb:35:5c:41:e6:fb:92:98:e2:f6:cc:59:7c:bb:bc:f1:88:
         6d:b5:1a:53:05:26:a3:b7:61:f4:d6:38:4f:bd:1f:a7:dc:3a:
         a6:6a:48:b7:a8:14:bb:b5:45:b2:e0:55:1b:f7:95:74:3f:7f:
         a8:9d:e5:ce:22:f1:0c:8c:99:57:5f:27:47:4d:87:23:9d:b7:
         96:a4:fb:e2:59:4d:95:11:da:22:4c:af:6f:23:fe:e3:67:d3:
         c8:28:c7:3b:7c:18:b8:91:66:a0:a1:5b:50:a2:f9:59:7c:5a:
         2a:08:3c:79:5f:4e:18:46:05:77:fc:05:c6:fb:80:00:4a:fe:
         ca:0a:09:9a:ca:40:a3:f7:f6:49:5a:80:79:ae:be:bf:6d:8d:
         68:8a:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:59:20 2024 by rpki-client on console-fra.rpki-client.org