Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa
File:                     3130332e38302e3233362e302f32322d3234203d3e203634333135.roa (raw, json)
Hash identifier:          SweulEvE0gpEsszhKCQqE5y0Di1KL7xhBM4QB0WAN7c=
Subject key identifier:   5B:9B:88:37:FF:B4:2C:A8:D1:E2:D4:9A:AF:A3:20:EF:3D:2F:4B:91
Certificate issuer:       /CN=5782DE79396EB62186D082F936F3AB7084CB59CB
Certificate serial:       46096A26465C3FA396D704D13508EB4B3AAF31CA
Authority key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa
Signing time:             Mon 01 Jul 2024 01:03:33 +0000
ROA not before:           Mon 01 Jul 2024 00:58:33 +0000
ROA not after:            Mon 30 Jun 2025 01:03:33 +0000
asID:                     64315
IP address blocks:        103.80.236.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl
                          rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:09:6a:26:46:5c:3f:a3:96:d7:04:d1:35:08:eb:4b:3a:af:31:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5782DE79396EB62186D082F936F3AB7084CB59CB
        Validity
            Not Before: Jul  1 00:58:33 2024 GMT
            Not After : Jun 30 01:03:33 2025 GMT
        Subject: CN=5B9B8837FFB42CA8D1E2D49AAFA320EF3D2F4B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:04:fd:62:a6:8f:17:53:9a:45:b6:07:7f:3d:
                    15:81:b4:cd:ea:2b:61:cb:9b:1e:35:cf:91:bd:67:
                    f8:4f:ec:ca:3e:89:fc:a4:c7:f7:05:41:44:28:9b:
                    bf:1b:57:92:fc:54:90:26:0d:fa:c1:1c:c3:1b:9d:
                    14:bc:13:db:08:77:98:89:b0:76:b5:82:9f:c9:18:
                    b4:8e:cf:9a:d8:6e:1d:12:cc:52:1b:51:d7:75:01:
                    53:1d:a3:0f:ef:42:cc:2c:80:82:3b:8b:7c:e8:bb:
                    c2:20:42:26:2b:a8:b6:f0:bb:59:32:94:88:8d:43:
                    86:a1:3a:60:81:6f:7a:3b:2d:69:c5:ad:2d:62:7e:
                    e9:d2:2d:d7:a3:57:70:4c:17:cc:80:3c:c3:8c:e6:
                    7a:38:31:d4:78:f4:88:e1:5b:c7:f7:12:d9:15:2f:
                    2a:57:a5:e6:7c:cd:8f:c5:5b:fb:c9:67:2e:1e:ce:
                    a8:5c:88:20:b6:75:f4:78:c8:ca:69:07:40:51:2b:
                    ff:f7:05:b0:de:38:56:45:54:99:0f:f5:87:e5:fb:
                    83:7d:e9:a1:80:13:a3:03:bc:c7:cc:3a:40:d2:df:
                    57:e1:33:31:b8:78:6a:55:6a:c1:73:fa:62:76:45:
                    71:54:08:d3:a2:0d:29:e2:d2:6c:e9:db:22:95:51:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9B:88:37:FF:B4:2C:A8:D1:E2:D4:9A:AF:A3:20:EF:3D:2F:4B:91
            X509v3 Authority Key Identifier:
                keyid:57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/3130332e38302e3233362e302f32322d3234203d3e203634333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:2a:62:53:b1:ee:ad:d8:0d:d9:27:89:70:0a:ed:54:d3:75:
         99:dc:0c:3e:53:ba:f4:2c:1e:8a:f1:6d:ff:fa:50:d5:8e:a2:
         d5:de:95:fd:9d:69:03:90:d3:6f:51:59:65:e4:32:cd:67:d4:
         75:74:a7:bb:d6:e3:cd:c6:33:4e:97:ec:e9:95:a1:28:0f:6c:
         aa:e8:1d:8a:ee:d9:b1:bf:58:e5:87:85:b7:22:9c:2d:58:f3:
         d9:3e:cb:f6:42:b5:e8:f4:64:c6:28:2c:c2:c6:45:41:24:8d:
         5b:b1:38:6a:32:52:84:2d:97:54:57:21:d8:2f:0c:17:75:12:
         ea:a0:d0:ae:a7:68:ca:4a:40:d6:d9:8f:e3:0f:dd:84:44:7c:
         1b:3b:9b:9a:cb:0a:e9:d0:a1:ef:5e:7f:7c:2b:ca:b1:ab:ae:
         82:c6:a3:ad:e2:b5:68:d2:88:ab:59:cb:4c:72:8e:35:74:b2:
         03:13:f2:64:5a:27:0a:f8:ca:f5:f6:1d:51:0b:d7:09:41:b3:
         58:dc:bb:6d:ec:97:70:1b:28:1e:c5:a0:92:8b:3f:77:14:23:
         a2:37:1a:ce:ec:f5:9c:0a:18:e3:c2:a3:28:e2:98:8d:85:5d:
         74:45:eb:90:98:48:4e:cc:69:6f:c5:c4:b5:a2:eb:79:66:b2:
         5c:12:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org