Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          oROfitqlgNaATdT+QTLN6ZtJzmTZClV8rG4OFOyoYmk=
Subject key identifier:   74:FB:FF:E9:C8:2A:BD:DB:98:CB:07:BB:20:4B:35:95:44:AA:14:0E
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       11E2F39D8FC9289E63100D8330D05B680013342C
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 30 Jul 2023 23:00:15 +0000
ROA not before:           Sun 30 Jul 2023 22:55:15 +0000
ROA not after:            Sun 28 Jul 2024 23:00:15 +0000
asID:                     38165
IP address blocks:        103.83.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:e2:f3:9d:8f:c9:28:9e:63:10:0d:83:30:d0:5b:68:00:13:34:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jul 30 22:55:15 2023 GMT
            Not After : Jul 28 23:00:15 2024 GMT
        Subject: CN=74FBFFE9C82ABDDB98CB07BB204B359544AA140E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:36:9b:7f:7f:a9:35:8d:d2:59:75:9b:c3:
                    d6:2b:e3:e4:fd:c5:56:8e:ee:28:e5:e0:98:23:f3:
                    e3:96:fb:52:05:fe:55:fc:05:26:18:a6:a9:51:4d:
                    d3:c4:8a:1c:c1:a4:8c:f4:96:4a:5a:35:9a:77:f0:
                    18:67:c4:dc:72:c0:4a:c1:da:54:2f:ce:25:ea:20:
                    ae:0b:44:ac:9a:55:43:f6:8d:a3:42:35:21:ec:84:
                    b1:8b:88:41:54:5f:c1:e0:54:2c:f5:44:e5:3a:69:
                    93:29:07:94:41:11:40:17:60:af:4a:40:81:7e:2c:
                    50:f9:cd:99:92:ad:09:83:71:13:0b:cd:11:bb:3a:
                    9c:de:f0:4b:76:5f:f6:b8:98:1c:51:57:a3:1b:54:
                    3c:47:9f:b5:6e:74:37:6d:2f:af:16:46:a7:b7:61:
                    71:49:b4:24:e6:56:6d:50:96:79:07:20:8f:9b:f9:
                    71:86:c7:bc:2b:8c:fe:d3:da:eb:54:69:08:b7:21:
                    a6:a8:7d:a0:f3:de:26:de:b6:cf:bc:ae:2e:47:98:
                    5a:32:ba:0c:91:20:a5:99:e9:e4:e5:c7:0d:7b:6e:
                    a4:5e:33:51:e4:87:66:3d:03:24:97:2d:4a:5d:af:
                    3b:2e:de:e1:3f:37:9e:a2:41:6b:08:6c:bb:e9:b0:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:FF:E9:C8:2A:BD:DB:98:CB:07:BB:20:4B:35:95:44:AA:14:0E
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:93:60:70:7a:16:b4:dc:9f:93:92:ce:e2:01:ca:59:bf:ad:
         17:a6:b1:6f:1e:32:ba:09:19:9e:e9:28:fe:6d:a0:53:c2:55:
         c3:6b:b7:ae:46:81:21:6b:d3:06:25:f3:1e:1d:63:d3:89:4f:
         76:43:41:32:13:02:c3:a5:5b:f2:07:b5:7a:d0:b5:c7:0e:64:
         79:e7:d3:f1:ff:80:ed:d3:17:43:eb:5d:cd:93:bb:77:34:16:
         ff:9a:cd:15:35:a0:0f:44:2b:7c:08:d2:25:18:5d:93:e1:3e:
         2c:93:21:29:27:95:5d:4a:bf:2a:bd:6b:ad:80:22:f8:68:f6:
         93:c2:30:be:0f:46:c4:7a:64:5b:b7:a8:12:1d:19:87:be:f2:
         17:22:e9:c9:68:28:dd:c1:01:c0:d5:b8:0b:70:f4:30:1b:d2:
         8d:5f:22:c4:48:35:79:15:24:88:3b:8e:f2:3a:84:fa:ac:39:
         21:ea:48:41:85:e7:0c:b9:bd:47:24:f7:52:1e:1e:b3:60:6c:
         e6:09:f1:8a:03:a0:f2:e4:61:59:c3:80:dd:bc:8e:18:78:8d:
         b5:9b:ef:48:f9:07:70:d7:23:12:07:12:e0:a6:58:cd:9c:64:
         ea:63:2e:51:aa:d5:c1:ef:eb:58:4b:0f:76:fe:ab:71:e9:cc:
         c8:a1:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 08:37:57 2024 by rpki-client on console-fra.rpki-client.org