Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa
File:                     3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (raw, json)
Hash identifier:          YXBLniWIP1tEpCZLI2E35OhkhCdsQi0gYJFIjwBZCnk=
Subject key identifier:   DA:88:8F:98:D1:5D:6A:2B:1A:A6:71:A1:12:DB:D1:B8:AA:71:1B:2C
Certificate issuer:       /CN=78578588503A7F091F1D7CD7B16BDC9E55055889
Certificate serial:       75D2E20D433D4086E1D0729CAADA0FCE384780C1
Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa
Signing time:             Fri 01 Nov 2024 07:01:31 +0000
ROA not before:           Fri 01 Nov 2024 06:56:31 +0000
ROA not after:            Fri 31 Oct 2025 07:01:31 +0000
asID:                     18351
IP address blocks:        103.115.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl
                          rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d2:e2:0d:43:3d:40:86:e1:d0:72:9c:aa:da:0f:ce:38:47:80:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889
        Validity
            Not Before: Nov  1 06:56:31 2024 GMT
            Not After : Oct 31 07:01:31 2025 GMT
        Subject: CN=DA888F98D15D6A2B1AA671A112DBD1B8AA711B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6e:90:6d:43:43:43:80:2d:17:b8:71:38:ee:
                    c5:72:24:ea:f5:11:bb:de:0c:19:57:23:9e:f7:12:
                    22:6c:09:7b:9e:c5:67:2d:09:72:3f:8d:37:00:5d:
                    6d:9f:7c:04:eb:92:73:38:c2:6d:2f:ff:e1:76:2c:
                    f3:56:42:e8:19:b2:89:1d:e3:4d:dd:6c:29:e0:2e:
                    12:5c:66:82:75:36:57:62:62:02:79:39:cb:a8:44:
                    6f:07:ba:b5:63:28:49:c1:80:a0:39:25:a0:d2:8e:
                    c8:aa:b8:15:8b:18:f2:a3:af:e7:8c:97:6c:a8:87:
                    37:cc:80:42:12:88:1e:ed:fe:fa:34:9a:a7:ea:80:
                    40:61:2d:03:5e:47:e9:7a:bf:14:8a:2e:75:3f:ed:
                    77:a3:16:b3:6a:5a:16:65:84:4f:67:f4:4c:bf:77:
                    c2:18:fa:45:c7:7e:95:32:34:08:ba:94:c4:e0:f4:
                    10:ba:dc:1a:ed:15:1a:85:19:83:4c:6f:02:61:56:
                    4b:fa:22:21:98:ab:27:92:52:21:ed:07:c7:b2:9b:
                    6b:ef:82:a8:32:6f:be:9e:1e:77:ed:f9:8e:54:34:
                    e0:3f:b0:99:0d:25:4f:ee:2b:a8:4d:5c:23:34:42:
                    c9:63:b3:87:e5:f2:c1:70:c9:0b:0d:b1:a9:0f:e7:
                    48:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:88:8F:98:D1:5D:6A:2B:1A:A6:71:A1:12:DB:D1:B8:AA:71:1B:2C
            X509v3 Authority Key Identifier:
                keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:f9:ad:57:b9:43:82:a8:4b:2f:de:53:fd:a9:b3:65:4b:4c:
         f0:fb:5a:61:a8:98:83:9f:67:61:a9:7e:5b:37:57:69:59:e7:
         56:3a:b2:8d:61:63:41:72:2b:0c:ad:40:c0:aa:75:55:30:9a:
         e4:eb:27:e4:93:2e:90:45:55:b8:86:5a:81:5e:37:a2:4d:fe:
         89:b5:af:0a:e9:71:5a:14:f2:21:46:63:b1:99:88:6b:53:97:
         4f:37:ad:f4:e2:49:f1:f0:c9:c5:62:fb:50:60:18:60:92:42:
         4d:c5:95:99:71:c8:91:ec:e5:85:36:cc:34:df:a5:19:a6:e8:
         75:6c:8c:55:55:b7:2a:9c:74:43:bb:58:ba:7d:c3:36:4f:eb:
         00:d1:02:9b:f5:ec:6b:69:3f:41:c5:f4:e3:a5:33:d5:52:ab:
         18:5f:b0:fc:2f:6e:80:a3:10:59:36:a4:91:81:18:e7:fc:3f:
         82:bc:8e:b3:7c:fe:7e:1b:13:3d:50:b2:f2:ff:f3:c8:80:32:
         92:e7:43:1e:c2:cc:01:de:8e:d4:cc:f0:ea:c8:ef:fd:54:de:
         9d:5c:dc:32:19:4c:73:ae:33:f1:de:b8:06:2e:69:b2:4b:39:
         0b:8a:82:4a:ea:45:5d:1f:b3:08:f9:26:e7:29:a1:c3:f0:f8:
         c0:86:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org