Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa
File:                     3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          GMHkkrfZXyxs6zY6/uxgT3OjPglMvww4OuNB87sHpF4=
Subject key identifier:   4A:EB:60:55:55:D4:8F:6F:BE:0A:3B:6B:CF:AD:EE:66:11:CE:C0:03
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       3C178D1678A308D635C29435152CBBB1D211E020
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa
Signing time:             Thu 31 Aug 2023 16:00:34 +0000
ROA not before:           Thu 31 Aug 2023 15:55:34 +0000
ROA not after:            Thu 29 Aug 2024 16:00:34 +0000
asID:                     9341
IP address blocks:        103.229.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:17:8d:16:78:a3:08:d6:35:c2:94:35:15:2c:bb:b1:d2:11:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Aug 31 15:55:34 2023 GMT
            Not After : Aug 29 16:00:34 2024 GMT
        Subject: CN=4AEB605555D48F6FBE0A3B6BCFADEE6611CEC003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:17:49:84:06:ee:8d:13:33:eb:b2:e3:30:
                    bd:2e:ba:b6:bb:ad:87:dc:32:60:70:f6:60:82:d8:
                    f4:8d:1b:05:cf:08:c2:6b:26:29:1b:a8:1b:45:7a:
                    4c:37:a3:3e:65:d7:86:cb:1d:7b:c1:17:06:9e:f0:
                    02:33:a5:83:2d:bd:4f:c8:2b:7d:6c:a2:c6:01:4d:
                    dd:43:01:e7:2f:d0:1e:8f:62:57:80:85:10:1d:ec:
                    3e:d6:04:a2:f1:e3:bd:68:05:19:d9:36:3b:9b:26:
                    6e:c3:e6:fc:91:00:84:63:2e:1d:19:7a:2c:87:31:
                    b7:a1:df:05:c0:53:35:84:4f:81:ea:44:7a:18:a5:
                    5c:29:0b:0f:ad:4c:66:20:3d:17:20:d1:f2:bb:d1:
                    51:01:1b:fc:43:3f:38:38:86:ed:a2:e1:74:3c:f9:
                    e0:d0:eb:07:0d:38:66:6e:8a:d7:6c:e1:b3:5c:8e:
                    cf:50:b8:3d:f2:8a:31:1b:0a:b1:7d:51:56:97:15:
                    0c:4d:8b:b7:da:58:9f:c7:09:0b:1e:13:23:0d:c9:
                    40:02:0d:c2:f2:ef:a7:eb:c7:45:29:db:76:4b:25:
                    47:1b:fb:82:d1:e9:6a:90:e9:a3:91:b7:10:45:ee:
                    8d:9f:cb:ba:66:35:3b:52:c5:84:75:77:a3:31:8b:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EB:60:55:55:D4:8F:6F:BE:0A:3B:6B:CF:AD:EE:66:11:CE:C0:03
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:23:9c:aa:d1:08:db:f8:34:fc:c3:a4:ac:7e:4e:7b:d5:d6:
         ad:b2:2f:7c:60:fb:f3:17:78:f2:28:15:3c:6f:65:77:0b:9d:
         0f:b1:b0:76:af:0a:6f:20:d9:c7:ac:e8:5d:a5:1b:6c:5a:47:
         d0:47:b1:c1:aa:83:64:ee:60:22:5b:68:2c:b0:ad:f8:0d:ed:
         07:41:24:96:5d:d3:89:64:7b:96:50:c1:eb:26:5f:1c:6c:6c:
         94:41:fe:e9:c0:0f:c9:f6:7d:45:cf:f2:4c:88:62:7a:6b:03:
         72:e8:ff:84:a6:75:f0:fe:ee:08:01:56:ca:02:65:97:cc:27:
         6c:ea:39:dc:5a:3f:f4:c4:8c:69:c0:fa:78:22:df:37:48:28:
         0f:13:8a:30:1b:42:77:6c:68:3d:89:90:e0:77:8a:1b:f8:27:
         85:17:39:18:88:49:af:d6:e4:4e:8a:3c:6d:ab:37:09:df:87:
         7c:16:9d:66:ee:60:2b:1e:99:d7:c4:c9:6f:e3:a6:97:3d:b6:
         67:89:64:17:f7:67:10:de:41:51:44:dd:6a:96:aa:c1:d8:3d:
         d5:87:32:6b:9b:4d:da:df:82:17:a0:94:89:ac:08:bd:3c:c7:
         5c:4e:7a:a0:3e:59:45:13:e5:d6:13:1c:e1:7d:ff:bc:6a:88:
         78:10:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 03:58:32 2024 by rpki-client on console-fra.rpki-client.org