Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
File:                     3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa (raw, json)
Hash identifier:          3DGHcfF5QTFixhBWGXLv6BiY/5AoNpRQGQYvL6EOYcs=
Subject key identifier:   D8:BD:E1:D8:16:F7:24:75:1A:BB:09:F9:85:94:F4:11:15:90:20:55
Certificate issuer:       /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial:       06EE7E3602557BC9EEA3ADB0FAC73A280BF99841
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa
Signing time:             Wed 13 Dec 2023 11:00:01 +0000
ROA not before:           Wed 13 Dec 2023 10:55:01 +0000
ROA not after:            Wed 11 Dec 2024 11:00:01 +0000
asID:                     140012
IP address blocks:        103.148.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
                          rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ee:7e:36:02:55:7b:c9:ee:a3:ad:b0:fa:c7:3a:28:0b:f9:98:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
        Validity
            Not Before: Dec 13 10:55:01 2023 GMT
            Not After : Dec 11 11:00:01 2024 GMT
        Subject: CN=D8BDE1D816F724751ABB09F98594F41115902055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:6d:cf:86:63:4f:aa:fe:46:f6:9a:02:ac:
                    b9:dc:a6:6d:7f:f7:6c:e9:b5:88:ce:01:36:ac:f5:
                    e0:c2:3b:a2:fa:f6:a8:f2:9f:38:4a:51:04:d1:1c:
                    db:ae:a1:19:78:12:ae:84:f8:bf:5c:3b:2f:a4:7f:
                    59:d0:b8:1c:1d:2e:76:13:c3:6e:77:8a:bb:d6:b2:
                    79:16:a6:54:5b:42:7c:ae:87:03:29:bd:59:f6:a1:
                    61:3a:61:bc:93:7f:28:8e:38:48:1d:48:21:9e:5c:
                    a6:d5:db:26:de:11:6d:77:ee:2d:2d:ce:e5:17:a5:
                    3a:87:37:88:f0:cb:cc:33:39:24:90:13:3e:5f:a8:
                    bd:1c:3f:4c:51:20:9e:02:13:b6:9f:8a:45:b6:53:
                    3d:5d:91:ac:c6:96:62:77:e9:5c:f9:e3:f5:54:6b:
                    01:69:b2:a0:db:10:a9:63:ff:70:15:42:bf:0f:0c:
                    ad:08:51:06:f5:1c:e0:9c:27:7e:cc:76:04:0f:d0:
                    9c:b7:2c:59:04:ed:91:51:d1:6e:d5:3e:55:3c:b6:
                    1a:5c:9f:40:a1:42:67:ad:84:cc:9f:f8:de:a1:8e:
                    35:c4:bc:08:09:81:67:e1:bf:81:fb:8e:d6:85:d6:
                    a7:4b:18:c9:da:80:d7:09:bc:f0:9e:d0:9a:7b:4d:
                    6e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BD:E1:D8:16:F7:24:75:1A:BB:09:F9:85:94:F4:11:15:90:20:55
            X509v3 Authority Key Identifier:
                keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32382e302f32342d3234203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:c4:8d:56:71:13:62:5f:06:e3:ee:d1:d8:e7:db:9f:e3:b3:
         5a:2c:84:0d:4f:6c:eb:dd:fd:16:18:b8:d9:90:ec:e3:cb:59:
         e2:81:e6:78:30:6f:69:e0:84:de:ec:df:26:c9:02:d8:37:72:
         99:14:fd:e4:8a:be:19:b2:af:57:b2:92:5e:5f:27:f2:f1:6d:
         e8:0c:c7:50:18:78:b3:5b:46:67:e3:76:dd:79:19:ab:f0:27:
         e9:be:67:b3:0f:e4:a6:63:80:05:f6:6f:cf:a6:b7:bd:5c:ef:
         54:79:6f:11:ac:c4:0b:d8:b4:9b:de:89:72:69:1d:90:f6:18:
         41:58:30:96:63:68:7b:e3:06:ba:4b:04:40:97:87:50:c9:4e:
         46:64:50:d5:b2:9e:1e:1d:13:6a:41:5d:4a:86:f8:c4:77:38:
         d6:c5:b6:f2:4a:2c:27:42:d1:72:f3:67:20:88:6d:e1:1c:90:
         b3:99:55:e1:eb:3f:97:23:69:b8:0b:fb:ef:3d:14:36:c1:ff:
         41:ff:35:cd:49:14:4f:b8:0b:60:6e:6b:f6:c3:61:17:10:f2:
         98:7d:24:87:b3:6e:bf:89:a6:02:15:f1:70:70:3d:be:76:0d:
         b7:10:ce:c2:86:ca:50:5b:81:8c:89:fb:17:a6:a5:bb:2e:c7:
         ac:82:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 13:02:54 2024 by rpki-client on console-ams.rpki-client.org