Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa
File:                     3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (raw, json)
Hash identifier:          WViuI/xdMDBrt+IfB4On0g51v6taJpJY/F/aMgozHk8=
Subject key identifier:   38:6F:D8:D9:2F:85:81:9A:27:13:1D:63:8C:AE:EC:35:F1:5B:B5:0B
Certificate issuer:       /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial:       0ACDCC87579CBE87C1EC9EA191C808E464B71438
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa
Signing time:             Mon 31 Jul 2023 00:08:17 +0000
ROA not before:           Mon 31 Jul 2023 00:03:17 +0000
ROA not after:            Mon 29 Jul 2024 00:08:17 +0000
asID:                     64300
IP address blocks:        103.153.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
                          rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cd:cc:87:57:9c:be:87:c1:ec:9e:a1:91:c8:08:e4:64:b7:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
        Validity
            Not Before: Jul 31 00:03:17 2023 GMT
            Not After : Jul 29 00:08:17 2024 GMT
        Subject: CN=386FD8D92F85819A27131D638CAEEC35F15BB50B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:b3:c0:05:d3:4f:3e:16:47:42:6a:41:dc:
                    08:98:4a:5e:b3:95:3f:ec:ab:7e:c1:13:82:8a:28:
                    1c:bd:45:f0:c0:60:af:d8:81:08:7b:20:ea:6f:57:
                    b2:67:5b:2c:65:81:42:16:e3:f4:d1:c0:44:72:e3:
                    1d:c7:e0:3a:b7:63:e9:5d:7a:09:b7:8a:24:b4:ea:
                    d1:d6:cc:50:e3:e5:e2:a4:66:c1:97:a8:c9:e4:d1:
                    fb:2c:f6:74:a0:7b:38:75:67:26:34:1d:c2:e2:8e:
                    4a:e4:cd:1b:a7:c7:37:4c:5c:d0:f1:5b:72:bf:89:
                    dd:97:60:bc:ce:d7:23:ac:77:a0:83:32:32:87:26:
                    f1:d3:0b:53:67:6f:64:45:74:8a:52:da:c8:01:50:
                    c7:68:28:08:c9:84:78:14:60:84:19:3c:86:c5:25:
                    91:3e:2f:67:e2:80:1e:0a:92:52:72:56:6f:bd:04:
                    3c:84:ab:b0:1b:4b:f4:9e:a7:4d:6b:4c:6f:7f:e4:
                    c2:02:26:6c:03:c2:74:18:d9:93:47:8b:95:ab:70:
                    be:78:82:34:03:62:9c:5b:2e:75:30:f1:38:f0:d5:
                    8d:9c:18:91:d4:f2:af:c4:ae:b8:cd:de:0a:9a:f3:
                    46:9e:39:a6:08:91:b5:79:51:1b:90:bd:be:9e:e9:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6F:D8:D9:2F:85:81:9A:27:13:1D:63:8C:AE:EC:35:F1:5B:B5:0B
            X509v3 Authority Key Identifier:
                keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:f9:90:d6:d9:03:c6:96:45:a5:6d:e2:49:fc:13:c4:52:
         d9:b5:b5:30:32:d2:5c:9c:ce:cc:a1:e1:ac:19:a3:0b:21:7c:
         47:8c:e6:a8:25:f6:14:01:eb:36:17:4d:bc:91:54:00:98:94:
         32:40:17:d9:61:b3:7a:ba:e1:b1:32:14:c1:da:22:9b:a8:4f:
         61:fe:6f:c1:14:db:9a:62:63:47:53:01:61:79:17:d1:5a:11:
         f2:fa:b3:69:26:48:e7:f7:51:06:c5:f9:ed:58:a2:da:79:ed:
         18:ca:70:4c:93:e7:f0:db:ef:8c:f2:24:0c:65:da:28:53:b2:
         4c:03:3c:1f:9b:82:75:26:2e:51:a2:30:ac:4f:21:a5:21:d0:
         c3:4d:fb:84:92:e0:97:ac:97:25:dc:92:d9:c0:0a:a2:a1:f3:
         57:ad:d5:50:85:bc:52:a5:f7:20:74:bd:1c:81:ce:62:68:d5:
         db:f3:49:16:f0:a2:a6:4d:c7:ef:90:26:61:af:41:c0:a1:8b:
         3a:79:14:77:83:68:ba:23:d9:d9:84:10:6a:8f:a1:60:4f:4c:
         26:9b:8b:41:ca:ab:b2:ee:32:27:eb:01:64:f0:5a:44:30:be:
         2b:4c:0c:81:b2:75:2d:c4:99:bd:a2:cd:14:fd:c4:68:f7:2f:
         7b:d7:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 06:25:05 2024 by rpki-client on console-fra.rpki-client.org