Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32332d3233203d3e203435333132.roa
File:                     3130332e31382e33322e302f32332d3233203d3e203435333132.roa (raw, json)
Hash identifier:          Krrioe1+SNFnRJ1jZ1DqUPVr/5RWpguH7KW/V20oLCI=
Subject key identifier:   2A:9A:2A:7B:17:59:DB:70:36:84:B6:72:B3:F2:9E:B8:D6:9E:04:2C
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       5722EAB3E00089732AEBB0DA97AD665873A3D054
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32332d3233203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:12 +0000
ROA not before:           Mon 01 Jul 2024 00:59:12 +0000
ROA not after:            Mon 30 Jun 2025 01:04:12 +0000
asID:                     45312
IP address blocks:        103.18.32.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:22:ea:b3:e0:00:89:73:2a:eb:b0:da:97:ad:66:58:73:a3:d0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:12 2024 GMT
            Not After : Jun 30 01:04:12 2025 GMT
        Subject: CN=2A9A2A7B1759DB703684B672B3F29EB8D69E042C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:77:0a:f1:80:f1:cd:2f:a2:99:ac:69:c1:
                    9e:4e:25:24:04:98:ac:f3:e2:8a:71:63:65:fb:39:
                    f2:72:21:8c:2f:a2:cf:93:7a:9c:32:73:fc:f6:0e:
                    32:ce:36:4c:d2:38:f9:e1:dc:41:9f:72:41:31:8e:
                    a5:64:b4:c1:ba:36:82:48:e1:23:5c:3f:96:29:23:
                    f0:9c:9e:93:e8:62:f4:c0:7f:d5:b1:a1:b5:d8:9a:
                    f7:76:73:6d:66:55:02:2e:25:ae:47:89:25:71:b4:
                    47:bd:c6:2e:ac:d1:d9:04:62:24:fc:83:55:66:51:
                    f0:69:bf:c0:2b:d2:33:dd:ad:fd:7c:48:d3:85:04:
                    31:24:b1:10:66:82:71:72:11:e7:a2:e0:83:08:88:
                    f8:22:85:57:ba:b2:d5:06:5e:d4:0c:a1:5a:e5:14:
                    44:e0:4f:34:41:bf:54:03:1e:5e:ae:cf:67:f1:fc:
                    b7:cc:c3:73:31:14:26:0d:e8:87:ed:ec:1a:d0:9e:
                    f9:81:e7:82:94:5d:95:20:c7:50:54:79:16:cc:b3:
                    e1:42:98:7a:a1:6a:c2:b8:d9:9c:af:ff:bd:d1:bf:
                    08:18:c8:0c:15:12:19:00:5e:a5:31:90:95:d7:b5:
                    54:07:f0:5c:a8:b1:91:68:38:b4:a5:6b:ad:1c:14:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9A:2A:7B:17:59:DB:70:36:84:B6:72:B3:F2:9E:B8:D6:9E:04:2C
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32332d3233203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:a3:ee:44:ba:9a:44:7d:78:7c:64:15:f4:a8:44:e5:28:d2:
         5b:70:ad:26:4d:42:64:83:b6:f6:1d:32:34:f9:21:d7:cf:ef:
         bc:84:dd:0a:68:04:4c:ea:1b:05:c8:1f:d8:2e:e2:c3:d4:71:
         70:51:ab:51:54:71:88:92:3f:a8:96:c2:cd:6b:57:76:54:30:
         02:eb:5d:ba:c4:17:ab:43:4e:01:c9:63:5a:94:3c:f9:1c:6a:
         79:d3:1b:5f:1f:8f:ea:f4:c3:66:e2:7a:a8:b4:ef:6b:17:84:
         aa:ec:54:52:51:51:a8:db:fb:71:e0:32:e6:43:89:20:94:41:
         7f:f1:f5:37:5f:53:de:1b:05:ff:d8:88:69:ff:3a:2a:fb:19:
         fe:88:2a:83:11:2f:0e:51:d8:64:97:46:6f:86:0e:3d:e5:3b:
         9d:56:fd:45:64:f9:ed:5e:c1:1c:32:08:80:99:d2:9a:24:4a:
         9b:c0:07:50:d9:c7:c5:20:7a:ed:8a:60:82:57:7f:4a:37:a4:
         eb:ac:df:db:5b:87:e3:93:8b:9a:96:3f:f0:dd:15:ec:61:86:
         3a:a7:78:b7:d4:e0:8d:e9:6b:85:32:5c:7f:20:9b:8a:b1:a5:
         af:da:3a:c6:56:e3:1e:7f:b0:c9:9d:7b:4c:eb:03:36:d1:5e:
         31:f7:bf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org