Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa
File:                     3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          zmfwOq9tRL6y6itfiedhGYjkM224b5RPCWjPsZw7viw=
Subject key identifier:   D1:52:CA:BE:9F:82:F4:E7:AD:F8:99:60:AF:C1:51:F5:A2:D1:D2:EA
Certificate issuer:       /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
Certificate serial:       5D05D5B07FB0C1A8DED888D90D5695171BCB4471
Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa
Signing time:             Thu 01 Aug 2024 16:02:12 +0000
ROA not before:           Thu 01 Aug 2024 15:57:12 +0000
ROA not after:            Thu 31 Jul 2025 16:02:12 +0000
asID:                     9341
IP address blocks:        103.229.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl
                          rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:05:d5:b0:7f:b0:c1:a8:de:d8:88:d9:0d:56:95:17:1b:cb:44:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB
        Validity
            Not Before: Aug  1 15:57:12 2024 GMT
            Not After : Jul 31 16:02:12 2025 GMT
        Subject: CN=D152CABE9F82F4E7ADF89960AFC151F5A2D1D2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:0c:fc:4f:e7:8f:33:9f:18:c0:cc:b9:1c:
                    f9:4b:06:5d:04:0b:b1:0f:af:63:86:0a:38:05:1d:
                    80:ed:2b:66:49:d1:ba:53:65:f4:49:0f:1d:ba:a4:
                    50:05:03:a0:6b:3e:b6:b6:ff:1a:e7:ef:08:99:6a:
                    1d:fa:34:bd:8e:34:ac:54:1f:25:68:1d:f9:61:3d:
                    72:8a:bb:a3:b2:37:92:6a:29:66:12:1a:4d:89:13:
                    f3:27:c3:4d:1e:c7:8d:4f:94:81:ed:d3:01:04:87:
                    5e:e9:19:45:90:c7:e4:52:a2:5f:e6:45:c3:a0:1b:
                    6a:fb:64:2f:32:b8:c7:68:67:9f:68:4a:51:af:3c:
                    d0:60:23:95:e3:b1:df:8c:da:5a:04:03:04:6c:ab:
                    c8:b5:5a:59:ac:59:74:51:72:f9:c2:d2:43:e0:ce:
                    67:a7:64:4a:12:c5:54:64:98:33:e4:ff:4c:73:c0:
                    62:a8:10:70:6a:79:d2:41:f1:65:ad:73:43:70:9d:
                    0a:40:6c:18:3b:b0:02:fc:b6:f3:03:97:6c:11:56:
                    3f:d9:07:0b:c0:0c:8e:65:08:0e:b3:6d:dd:91:c3:
                    7c:1b:a9:c6:52:87:31:3b:a7:4a:4a:b1:2e:4d:dd:
                    c9:5d:4a:ab:7b:69:53:c4:b9:f8:c1:4d:7c:37:4e:
                    27:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:CA:BE:9F:82:F4:E7:AD:F8:99:60:AF:C1:51:F5:A2:D1:D2:EA
            X509v3 Authority Key Identifier:
                keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:39:9a:06:b4:9e:ec:38:d7:cd:61:ae:dd:63:a8:62:1a:49:
         1a:2e:a1:26:d4:9c:27:12:8a:60:d4:a4:58:1e:6c:22:91:1a:
         e9:5c:21:10:44:59:c6:da:23:a3:34:52:83:a1:9c:a1:61:c5:
         6b:f0:10:fd:62:05:77:80:5f:27:74:94:fd:43:57:09:58:12:
         f1:e3:db:19:66:4b:b4:1f:5b:a7:80:67:63:c1:5c:1a:44:82:
         38:90:95:9b:2f:35:1a:31:ad:34:8e:5b:c4:b6:23:5b:67:a2:
         84:13:27:9a:f7:cc:e9:17:54:9a:74:65:b2:59:bb:ee:91:f4:
         2e:7e:95:4f:71:bb:52:46:bd:f6:02:af:d0:f7:df:9a:67:24:
         a3:3f:60:72:3e:72:79:9b:b9:c1:7e:d3:db:33:ec:68:f5:4e:
         45:ee:1a:72:cd:cf:a6:86:91:d0:2e:0e:be:11:27:d1:48:88:
         20:4b:7b:23:32:c8:c6:19:43:c2:f0:17:80:98:04:ff:83:51:
         9b:ed:e8:01:6d:2c:d9:f7:5e:40:62:03:87:fd:dc:a4:11:58:
         73:b4:d3:f2:fd:54:53:7e:e9:00:3e:a1:65:f4:ec:77:99:ed:
         68:dd:ca:f1:31:0f:0b:15:e6:78:74:6d:3b:9c:02:23:78:53:
         e8:46:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org