Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa
File:                     3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa (raw, json)
Hash identifier:          lUZF/QzFHugeiEEl0D5koXzJlhQqH/0dDMKXvae9nbE=
Subject key identifier:   69:6A:E0:79:07:6E:F9:24:8D:F1:50:15:3B:EE:A2:D3:85:35:BA:71
Certificate issuer:       /CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
Certificate serial:       12CE0037D131FC19C7CFB85FCD5585CF9B5EA7E5
Authority key identifier: 3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa
Signing time:             Sun 11 Feb 2024 10:59:17 +0000
ROA not before:           Sun 11 Feb 2024 10:54:17 +0000
ROA not after:            Sun 09 Feb 2025 10:59:17 +0000
asID:                     150257
IP address blocks:        103.30.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl
                          rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ce:00:37:d1:31:fc:19:c7:cf:b8:5f:cd:55:85:cf:9b:5e:a7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D20522B51AEAA41F59490E2D55C36DEB6C21C77
        Validity
            Not Before: Feb 11 10:54:17 2024 GMT
            Not After : Feb  9 10:59:17 2025 GMT
        Subject: CN=696AE079076EF9248DF150153BEEA2D38535BA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:bb:db:f3:bf:8d:f2:ce:23:ef:8b:e9:2c:
                    f0:94:10:57:08:54:11:99:57:54:cf:42:66:53:ce:
                    af:14:62:44:f2:9c:50:90:c8:93:81:5c:4d:4e:00:
                    e4:72:a4:5e:3b:ef:a8:e2:e7:f6:69:2c:07:a2:a1:
                    b1:7c:57:ed:1b:f8:8e:89:e2:72:a0:94:a3:d5:0d:
                    f6:4a:29:80:b3:bd:7f:0f:2c:0d:2f:68:e4:f5:fa:
                    3f:f4:d2:52:33:bc:90:a2:7c:10:ad:ae:d2:91:56:
                    78:7a:ec:49:21:ed:23:d7:a2:8f:5e:8b:14:f1:e4:
                    ae:12:40:67:ef:59:64:ce:1d:cb:4d:ed:2d:a9:a2:
                    51:77:b2:7a:a5:0f:13:50:d8:b1:0b:17:d6:2b:f3:
                    9d:6c:bf:86:82:e3:63:d1:43:c3:73:f6:76:5b:50:
                    1a:02:82:e3:c4:db:20:72:b8:35:f9:65:b8:64:ab:
                    28:b0:db:87:26:87:2e:ce:ce:cd:f1:bf:99:0d:a9:
                    ae:55:ea:cd:83:4a:e6:b6:bd:14:73:40:e5:c5:e4:
                    ef:7c:32:a1:d3:0f:16:bd:4a:0f:2d:90:ed:69:37:
                    c1:4f:56:e1:48:d6:de:75:5b:34:d9:29:50:25:91:
                    81:41:dd:1d:01:69:c9:5b:fa:5f:57:35:b0:d5:a0:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6A:E0:79:07:6E:F9:24:8D:F1:50:15:3B:EE:A2:D3:85:35:BA:71
            X509v3 Authority Key Identifier:
                keyid:3D:20:52:2B:51:AE:AA:41:F5:94:90:E2:D5:5C:36:DE:B6:C2:1C:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D20522B51AEAA41F59490E2D55C36DEB6C21C77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee61e5ae-e45f-4ee3-8f6b-7cb59d61783b/0/3130332e33302e3139322e302f32332d3233203d3e20313530323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:7a:90:f0:18:fc:55:86:2e:7f:3c:ba:61:84:f3:5a:c8:
         27:f9:f1:0a:09:10:bd:20:db:76:f3:78:0e:ef:0e:19:44:68:
         6f:69:e7:a9:c1:d3:df:42:e5:3e:84:08:1e:fc:98:1e:c3:a2:
         55:ab:54:58:d0:db:73:41:9b:32:b9:0c:d7:28:3c:42:09:62:
         f0:ec:49:d0:4d:cf:85:a8:17:ec:85:a2:5a:2d:9d:fa:39:83:
         b3:53:ec:1e:1b:67:d8:05:06:a4:63:2c:55:81:2d:68:49:3e:
         df:b0:64:ae:0c:8f:35:27:9f:8b:6b:cb:19:47:88:b0:b5:e2:
         00:14:f4:c4:15:85:47:42:50:48:a7:9f:2d:0a:d6:7e:d5:82:
         7c:fb:cc:6b:84:e5:53:07:bd:63:de:74:53:fb:79:af:4c:fb:
         e4:94:a5:60:6c:9a:a4:fe:f2:ea:dc:42:c9:2b:7c:9e:54:e4:
         2f:97:27:35:6d:f8:5c:8a:13:2f:e3:9b:5d:9b:04:28:82:6a:
         c8:7d:e9:ed:83:5b:bb:1e:d5:38:cb:d6:44:4c:c0:33:58:97:
         0b:f0:e9:62:0a:be:a0:2c:f3:bc:e4:07:5c:7e:26:a5:c9:ab:
         72:b9:b2:9b:91:60:c1:fa:43:36:ba:ca:8d:5e:fa:0e:fd:5a:
         28:71:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:52:36 2024 by rpki-client on console-fra.rpki-client.org