Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
File:                     3130332e34302e39322e302f32332d3233203d3e203633353034.roa (raw, json)
Hash identifier:          3F/Ls2qhXUa4S9cBXHSt6kG6S2ZgzGR5S48Dst3/z70=
Subject key identifier:   7E:E3:8F:8E:89:21:CC:F2:C7:A6:84:65:EB:C5:62:55:17:FD:68:FA
Certificate issuer:       /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
Certificate serial:       3C914BB8E4A30B9DC448D1913D7E2CC5B49CC1DA
Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa
Signing time:             Tue 04 Jun 2024 05:03:23 +0000
ROA not before:           Tue 04 Jun 2024 04:58:23 +0000
ROA not after:            Tue 03 Jun 2025 05:03:23 +0000
asID:                     63504
IP address blocks:        103.40.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl
                          rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:91:4b:b8:e4:a3:0b:9d:c4:48:d1:91:3d:7e:2c:c5:b4:9c:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC
        Validity
            Not Before: Jun  4 04:58:23 2024 GMT
            Not After : Jun  3 05:03:23 2025 GMT
        Subject: CN=7EE38F8E8921CCF2C7A68465EBC5625517FD68FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:ec:46:6f:4d:52:f0:4b:9d:7f:d0:b9:79:
                    26:4e:df:0a:3d:13:ae:b0:e8:1d:19:81:7a:03:9b:
                    9c:3b:fb:07:ee:96:c7:f6:6f:40:cc:b1:b2:89:7b:
                    ef:80:a2:40:7f:bd:5c:07:6a:ee:de:79:b8:73:dd:
                    20:81:37:51:e6:0d:e1:3d:28:18:6d:67:6c:dc:10:
                    b4:ce:7d:38:8f:47:8c:b9:93:23:14:f1:4f:35:e4:
                    c2:12:76:00:af:54:9e:04:90:bc:dd:ce:37:74:6b:
                    75:aa:ae:d0:94:0c:dd:9c:cb:24:b5:01:fd:cc:75:
                    4e:8b:5b:ef:57:40:a4:68:fe:97:41:a8:e8:60:d9:
                    30:bb:97:a5:2f:1f:11:65:ae:8f:f4:95:17:94:be:
                    6a:11:d7:dd:10:f7:76:22:0e:0d:ba:16:c3:22:7f:
                    51:b7:99:6c:f9:a5:1d:88:63:d1:4d:61:c5:ec:c9:
                    f2:86:74:fe:a0:6a:74:e9:bd:4c:50:75:78:47:46:
                    d1:a3:5f:be:53:be:5c:d7:54:3e:26:92:b2:2a:50:
                    d6:08:a7:88:e0:04:eb:53:33:1b:7d:ad:93:12:7c:
                    e8:31:43:6e:d3:59:90:8f:66:20:f3:78:6f:3c:50:
                    7c:55:a7:e1:2a:17:4d:24:94:f7:43:f0:66:35:ae:
                    d2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:8F:8E:89:21:CC:F2:C7:A6:84:65:EB:C5:62:55:17:FD:68:FA
            X509v3 Authority Key Identifier:
                keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/3130332e34302e39322e302f32332d3233203d3e203633353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:4b:aa:c2:39:cd:71:0e:9f:d6:69:52:30:72:47:33:bf:64:
         b1:b5:a8:20:60:85:58:8a:ec:46:39:36:17:d7:2f:57:90:83:
         66:99:e3:1c:1d:1d:e1:5b:34:a4:b8:8d:11:ba:c2:a7:0b:2b:
         30:10:6c:05:c0:8f:d5:25:88:c6:2d:0e:5d:62:d5:15:5c:81:
         37:d1:fb:9a:60:73:9d:6b:23:18:2c:3d:b5:db:a1:5f:cd:ce:
         11:f3:15:a4:6b:d5:56:49:4e:4a:7f:fe:33:7a:31:8d:0a:ab:
         0a:88:79:5e:5e:a5:2c:23:4a:c7:62:7c:e2:02:43:fb:31:f8:
         1e:b5:24:11:96:90:29:dc:78:25:c1:2c:2f:6d:21:76:a8:af:
         bf:20:8a:63:ea:91:ae:d8:df:ea:9d:2d:d8:6b:28:4a:5e:69:
         ce:d0:2d:c1:ad:84:e5:ec:73:f1:f0:50:85:f3:4f:0c:83:a6:
         0f:d4:3c:e3:37:3e:e5:6e:3d:8e:a6:0c:d4:6c:7b:4e:2c:67:
         c0:75:61:d6:87:66:7e:04:06:83:fb:43:2f:bf:b9:0c:28:34:
         bd:4e:c8:10:0f:c2:b6:af:71:9c:ee:5a:a5:fb:c1:85:99:18:
         e5:f8:5d:e9:2b:f9:36:79:dd:af:2a:7c:f3:4e:8f:09:ab:78:
         1d:10:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:32 2024 by rpki-client on console-ams.rpki-client.org