Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa
File:                     3130332e35342e38322e302f32332d3233203d3e20313530353132.roa (raw, json)
Hash identifier:          zcHchx8EeGCm9dS/ERCPe8h8v4IFFJKbWoSMXMWHVc4=
Subject key identifier:   9A:10:DE:C0:93:00:9D:D0:C6:9D:E2:39:0A:41:C4:56:78:0B:0F:C7
Certificate issuer:       /CN=2ADCBF290A98776E6F59353351C879A1502B884A
Certificate serial:       2D87545C6B4B88E9B4CAE4D687BD69A2CFF54447
Authority key identifier: 2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa
Signing time:             Wed 17 Apr 2024 04:12:36 +0000
ROA not before:           Wed 17 Apr 2024 04:07:36 +0000
ROA not after:            Wed 16 Apr 2025 04:12:36 +0000
asID:                     150512
IP address blocks:        103.54.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl
                          rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:87:54:5c:6b:4b:88:e9:b4:ca:e4:d6:87:bd:69:a2:cf:f5:44:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADCBF290A98776E6F59353351C879A1502B884A
        Validity
            Not Before: Apr 17 04:07:36 2024 GMT
            Not After : Apr 16 04:12:36 2025 GMT
        Subject: CN=9A10DEC093009DD0C69DE2390A41C456780B0FC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:85:64:21:d7:2a:b7:28:d2:a4:23:bb:36:
                    5c:4e:a6:cd:55:88:7b:f1:64:92:a0:27:58:6a:48:
                    56:a4:44:9b:fa:26:55:3e:1f:b6:44:02:dc:59:c2:
                    09:e9:26:69:59:e2:50:4a:ab:64:1b:55:64:b3:c2:
                    26:51:d4:ab:61:13:3f:91:36:0c:5c:36:74:a2:fa:
                    2c:ed:90:a8:07:a7:30:53:01:24:72:1a:69:ba:b0:
                    f8:25:79:c4:b3:71:53:59:10:91:a0:dd:36:c5:a1:
                    7a:64:48:71:c0:84:a2:85:6c:21:6e:6c:72:5c:37:
                    8c:f2:a1:b4:34:3a:9d:46:8c:4a:1f:7a:7c:34:47:
                    12:52:54:2e:38:24:cb:af:c5:91:60:36:96:30:27:
                    9a:b2:73:90:d1:61:dc:86:91:c1:5a:bd:7c:58:91:
                    2a:d0:23:f8:df:e3:ae:e5:37:9a:43:06:6d:08:7e:
                    a9:51:1f:7d:b0:bc:58:dd:ff:b9:aa:41:ea:bf:b0:
                    19:67:02:01:4d:ba:10:f4:6b:fb:e2:5d:9f:f7:65:
                    dc:bb:6d:5f:86:01:ca:62:c2:45:d9:dc:54:7b:2c:
                    14:df:0a:0a:fa:c0:15:1a:c2:f6:49:64:1a:d1:23:
                    32:4e:01:53:00:bc:a3:7c:f5:c3:ce:e4:71:d0:d3:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:10:DE:C0:93:00:9D:D0:C6:9D:E2:39:0A:41:C4:56:78:0B:0F:C7
            X509v3 Authority Key Identifier:
                keyid:2A:DC:BF:29:0A:98:77:6E:6F:59:35:33:51:C8:79:A1:50:2B:88:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/2ADCBF290A98776E6F59353351C879A1502B884A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2ADCBF290A98776E6F59353351C879A1502B884A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8de9463-68a7-462d-9408-a7c39ce6e8ff/0/3130332e35342e38322e302f32332d3233203d3e20313530353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:18:54:c3:c8:77:3d:fd:68:2a:d5:ac:88:d8:c6:88:5d:d3:
         63:c0:18:40:6a:38:8f:61:84:4e:cc:3f:99:a6:b8:66:0b:b5:
         11:07:8e:9e:5c:6a:c2:35:f1:e6:05:2f:c3:be:25:a2:e7:a1:
         1e:e4:39:b2:af:f8:48:a7:31:b2:2a:81:3a:5b:32:15:bd:84:
         9d:c2:8a:2e:6a:db:2b:f3:01:a8:82:47:b1:62:50:6e:69:d0:
         a5:3c:68:d2:a6:c0:3c:bb:09:67:b3:40:cb:cd:f2:3d:55:a5:
         81:b2:aa:85:61:7e:36:9d:bb:05:45:1e:98:74:36:21:a0:f4:
         b6:88:d6:41:d3:57:d0:24:3d:f6:a9:96:e6:4e:83:ec:f0:5e:
         48:76:37:1c:72:2e:29:29:3c:9f:a9:ec:3f:8e:fe:78:ff:80:
         85:50:a3:dd:07:0c:a6:07:03:d1:74:ed:1f:f6:c0:cf:d2:2a:
         1a:37:58:05:ac:13:c3:93:25:e6:cd:69:a1:70:ad:61:26:2b:
         7a:1d:ea:d8:95:37:c2:0b:70:c8:c0:71:7f:4c:ba:95:db:e9:
         f8:ad:05:b6:9f:35:46:3a:3d:50:51:44:f3:c0:4a:c0:6c:a4:
         b1:92:d5:80:af:8a:52:56:e8:f8:40:41:c6:97:57:f9:ba:93:
         9c:f2:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:01 2024 by rpki-client on console-fra.rpki-client.org