Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/3130332e32302e3139362e302f32332d3234203d3e203538353536.roa
File:                     3130332e32302e3139362e302f32332d3234203d3e203538353536.roa (raw, json)
Hash identifier:          gXv4TrH9tnsPTRF8SEUUY4EBCjW0CgRkovvQCUuQ3Zc=
Subject key identifier:   8C:40:19:EA:20:D6:EB:AC:CA:11:74:C0:5C:A8:DE:AA:0B:75:02:DD
Certificate issuer:       /CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
Certificate serial:       38C4BC44DD2972385B85B822BBBE555B3B402A5B
Authority key identifier: 1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/3130332e32302e3139362e302f32332d3234203d3e203538353536.roa
Signing time:             Mon 31 Jul 2023 00:04:38 +0000
ROA not before:           Sun 30 Jul 2023 23:59:38 +0000
ROA not after:            Mon 29 Jul 2024 00:04:38 +0000
asID:                     58556
IP address blocks:        103.20.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl
                          rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c4:bc:44:dd:29:72:38:5b:85:b8:22:bb:be:55:5b:3b:40:2a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A0FC4695466F0034FDC7BD35D97BF935042446D
        Validity
            Not Before: Jul 30 23:59:38 2023 GMT
            Not After : Jul 29 00:04:38 2024 GMT
        Subject: CN=8C4019EA20D6EBACCA1174C05CA8DEAA0B7502DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:77:6b:77:e6:c4:6a:fd:ea:65:7a:dd:b9:
                    4e:1d:a4:01:2b:ff:24:4a:61:ca:68:b9:a5:4c:00:
                    ab:aa:69:33:e5:c7:1e:b1:31:99:4a:f9:4a:be:be:
                    ce:b4:e6:c2:34:99:02:03:16:9e:80:58:d1:93:57:
                    4f:1a:a9:40:2e:a0:ec:86:dd:a1:50:b5:ed:d4:d9:
                    b5:4e:3d:d3:01:0c:f9:4f:2a:ca:e3:64:cb:8b:f4:
                    99:c7:43:26:87:dd:67:6a:f7:b9:a2:83:c5:ff:cb:
                    ad:95:ac:67:b0:a3:58:3e:27:15:20:16:ee:52:39:
                    32:4e:8a:09:18:2a:50:6e:3d:7f:c5:94:0a:26:5b:
                    8c:ae:5d:03:30:fd:3f:f6:94:05:28:d9:75:29:5d:
                    16:dc:4b:89:5c:6c:1e:b0:b6:7d:e0:e6:0a:19:2e:
                    16:83:66:4a:39:06:2b:63:7e:6e:1e:56:4c:51:d0:
                    b9:48:7e:a7:d0:06:37:e1:e0:d3:b5:5f:a3:67:1d:
                    08:3a:55:56:29:d8:43:36:a5:cb:ca:80:99:43:8a:
                    49:dd:05:f0:78:c8:2c:45:36:ee:9d:d6:0c:60:3c:
                    1c:af:ba:45:33:b0:21:e2:d4:e5:c1:03:77:66:b5:
                    8d:4e:55:3b:6e:1e:d8:16:29:66:22:58:65:97:24:
                    65:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:40:19:EA:20:D6:EB:AC:CA:11:74:C0:5C:A8:DE:AA:0B:75:02:DD
            X509v3 Authority Key Identifier:
                keyid:1A:0F:C4:69:54:66:F0:03:4F:DC:7B:D3:5D:97:BF:93:50:42:44:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/1A0FC4695466F0034FDC7BD35D97BF935042446D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A0FC4695466F0034FDC7BD35D97BF935042446D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87aee7f-d65b-46ec-a781-7cbef5aaeb80/0/3130332e32302e3139362e302f32332d3234203d3e203538353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:37:31:db:35:50:cb:fa:48:4f:99:15:bc:61:3f:6d:1c:35:
         69:c6:fe:ec:4c:05:0d:f2:a0:72:c9:9c:bd:9c:50:4c:be:94:
         6a:bb:77:3c:43:5c:a0:8d:69:6c:b8:11:3a:db:35:c4:95:d2:
         2d:f7:d6:78:f4:27:05:aa:da:00:c2:75:04:13:88:a4:ac:db:
         12:7c:af:72:69:7d:c5:c0:95:83:7b:2b:3c:46:ef:49:96:77:
         fc:61:0c:51:f0:9d:5c:ef:95:17:54:d3:d3:89:10:27:bd:9b:
         8f:86:04:f1:de:3c:e4:b9:f4:88:36:b1:87:18:7c:4c:79:14:
         d1:a8:c6:42:f9:ff:85:54:00:e1:88:c8:b6:6a:ae:60:f5:12:
         33:3b:88:67:4d:67:bc:9e:47:be:17:ee:ff:15:c0:15:97:05:
         e7:18:fc:d1:ed:91:4f:a4:83:fb:94:fd:3f:6b:32:66:3a:9c:
         d9:01:14:f1:d3:9c:e8:b4:d2:41:3f:b0:24:e5:b4:48:78:58:
         c7:c0:6d:83:a3:70:32:d9:43:ab:47:28:7a:24:39:3a:09:9f:
         10:d3:71:fa:6f:3d:b3:aa:0f:14:6d:1e:16:1a:ab:97:68:d2:
         f3:95:df:74:d7:eb:51:80:a5:f4:e1:59:95:74:0e:31:d1:73:
         51:05:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 10:44:53 2024 by rpki-client on console-ams.rpki-client.org