Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa
File:                     3130332e38322e39322e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          GZ00UROycN5H3jCh+kAfoaN43OxWdIE34qy+DPXEIgY=
Subject key identifier:   2A:D5:85:EE:D7:28:1E:7F:DB:47:EE:69:2D:5B:92:21:35:C5:E4:BD
Certificate issuer:       /CN=11D0290B4630192458231FFEA93A463483E71D15
Certificate serial:       1DB684FB2F4A0F7F241680D674EB80C79A46571B
Authority key identifier: 11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa
Signing time:             Thu 11 Jan 2024 02:00:00 +0000
ROA not before:           Thu 11 Jan 2024 01:55:00 +0000
ROA not after:            Thu 09 Jan 2025 02:00:00 +0000
asID:                     136052
IP address blocks:        103.82.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl
                          rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:84:fb:2f:4a:0f:7f:24:16:80:d6:74:eb:80:c7:9a:46:57:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11D0290B4630192458231FFEA93A463483E71D15
        Validity
            Not Before: Jan 11 01:55:00 2024 GMT
            Not After : Jan  9 02:00:00 2025 GMT
        Subject: CN=2AD585EED7281E7FDB47EE692D5B922135C5E4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7d:e5:0e:b1:0a:22:c9:1d:1a:81:c9:c9:e7:
                    5e:ff:e3:0e:86:5c:91:ec:70:07:e7:29:d9:52:0d:
                    69:8c:04:19:c5:08:6b:5e:4c:09:f3:3f:15:1d:f2:
                    50:10:8c:46:ed:e7:af:84:47:6d:aa:2d:8e:45:9f:
                    08:5a:00:bb:55:f5:b9:38:10:23:b3:95:99:b4:51:
                    3d:a6:74:95:f1:15:6e:18:bd:ec:22:7d:f9:24:f7:
                    c7:63:58:22:23:fe:bf:97:45:65:00:db:38:06:91:
                    da:d3:9b:ce:f5:dc:29:4e:ce:c2:49:f1:97:d4:4d:
                    c8:e4:9f:55:b0:eb:86:aa:39:a9:f6:cf:2e:3e:71:
                    16:72:f6:93:39:be:0e:dd:ea:17:b7:b7:bb:3a:68:
                    ae:d1:89:bf:0e:c6:dc:40:59:9e:c0:08:0a:c3:d8:
                    0a:c5:a4:54:a7:e4:a5:aa:21:30:98:da:86:05:bf:
                    12:fe:c5:f1:b2:7f:86:96:4d:f5:46:1c:8c:fb:ac:
                    1d:3a:3e:ea:a2:36:59:57:59:99:a9:98:5e:ed:a8:
                    69:fa:1b:74:78:4a:ee:18:5c:c1:bd:c4:13:cc:14:
                    34:7b:08:52:f2:c7:a3:9a:1c:bd:ec:74:e5:04:1d:
                    98:59:96:e3:85:2a:79:68:a2:0f:04:c8:cc:5e:5d:
                    62:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D5:85:EE:D7:28:1E:7F:DB:47:EE:69:2D:5B:92:21:35:C5:E4:BD
            X509v3 Authority Key Identifier:
                keyid:11:D0:29:0B:46:30:19:24:58:23:1F:FE:A9:3A:46:34:83:E7:1D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/11D0290B4630192458231FFEA93A463483E71D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11D0290B4630192458231FFEA93A463483E71D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77eccff-ce9b-41da-b98a-abcfe49253af/0/3130332e38322e39322e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:36:f8:52:94:9b:58:45:bc:c7:85:a3:93:bc:1f:f1:7b:9b:
         7a:3f:ae:3c:36:e1:1b:1e:f0:c8:bd:34:ac:39:33:10:a6:e2:
         e9:9c:32:4d:2a:bc:be:b1:3c:f6:98:58:5e:af:47:82:0f:ac:
         38:60:89:cb:dd:fe:ad:53:4a:95:13:ea:90:07:a9:f1:41:b4:
         a0:25:f8:3f:5b:d5:e4:62:52:af:05:5a:e6:0d:1f:64:74:77:
         5e:cc:96:0b:65:78:26:37:86:3f:13:f9:ec:c5:8d:20:f7:cc:
         e5:c1:ce:65:2a:8b:9b:0c:66:07:59:15:25:19:9e:62:5a:4b:
         ac:da:6b:ce:8b:4f:f3:64:de:76:2c:3e:63:0c:7e:45:c1:10:
         5f:11:d9:89:04:4a:5c:11:b4:df:6f:48:e2:b7:c8:8c:ea:16:
         98:17:59:a3:a7:8f:e2:bc:ff:13:d0:dd:ab:ab:73:c1:0e:c9:
         c5:ea:ea:7e:e7:77:33:ac:70:ae:6b:09:d6:d6:36:ff:72:53:
         d2:2d:9e:8c:55:63:8d:9b:c0:b3:1d:f4:1d:75:25:90:89:88:
         71:0e:c4:9f:bb:be:b4:58:d0:32:36:56:22:04:97:90:ce:88:
         09:e1:48:ad:9c:3f:95:8d:82:00:d1:2c:29:db:c2:f0:dc:f6:
         e5:e8:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org