Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
File:                     3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          X/LGr2iOyULTq7bhZhyo103gakFKNiM+r1Wf9NsL/8c=
Subject key identifier:   44:DC:AC:1C:DB:11:04:92:A0:8D:7A:57:22:35:8D:8B:82:AA:7A:D6
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       3A1B40C43A5354BE69C7CBEBCAC7CC95AB7B3CFB
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa
Signing time:             Mon 31 Jul 2023 00:02:35 +0000
ROA not before:           Sun 30 Jul 2023 23:57:35 +0000
ROA not after:            Mon 29 Jul 2024 00:02:35 +0000
asID:                     46026
IP address blocks:        103.135.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1b:40:c4:3a:53:54:be:69:c7:cb:eb:ca:c7:cc:95:ab:7b:3c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jul 30 23:57:35 2023 GMT
            Not After : Jul 29 00:02:35 2024 GMT
        Subject: CN=44DCAC1CDB110492A08D7A5722358D8B82AA7AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:bd:a4:66:ba:06:58:83:16:20:b3:c2:49:
                    cd:67:d6:53:9f:1b:c2:2c:29:f5:b3:67:00:12:05:
                    78:c5:aa:11:ab:8d:2a:52:cf:38:1a:e5:8d:fa:af:
                    da:70:17:d5:d9:42:45:4d:0f:2d:d5:60:ee:3e:d3:
                    e8:b8:55:75:48:cd:09:1b:da:27:ec:e1:df:d9:20:
                    35:af:84:78:47:a0:3a:fe:71:3c:6a:c5:9c:b5:55:
                    91:cc:b8:3c:9c:d4:24:f8:6c:ad:43:99:d4:60:64:
                    b1:d3:e7:0b:9d:8d:b1:a2:b8:53:c4:1a:c6:47:e5:
                    4e:d4:41:93:91:0d:81:97:b3:c2:61:2a:c9:d3:f8:
                    31:c6:0f:0a:16:ec:07:73:a4:09:f3:41:d7:cb:56:
                    98:c6:b6:9c:b1:ef:ce:4c:0d:18:d4:57:f9:4d:3d:
                    10:bb:5f:53:8f:34:8b:cb:b2:30:97:55:6b:0a:37:
                    35:25:4d:ff:a7:e1:ca:66:49:c4:42:eb:f7:f6:b1:
                    46:87:ca:18:cd:c2:e0:16:df:49:c0:81:89:bd:f1:
                    63:2c:6b:c5:dd:56:2f:41:42:3b:08:04:35:a6:73:
                    d0:3d:40:64:d1:ec:d7:58:8a:a0:9c:4c:49:68:19:
                    54:71:d9:63:72:6c:7f:a9:c4:29:c7:50:a1:33:ed:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DC:AC:1C:DB:11:04:92:A0:8D:7A:57:22:35:8D:8B:82:AA:7A:D6
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3130332e3133352e37352e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:c5:73:50:e6:4f:03:cd:f8:e3:9a:bc:5e:0a:79:c3:1b:dd:
         fc:83:60:20:ce:f9:8e:c9:20:31:09:b8:7e:f0:91:eb:b9:77:
         9e:a6:47:44:8f:65:15:91:9b:47:f3:6a:32:5a:63:74:88:b8:
         b6:ad:1c:c7:23:e1:7d:64:c5:31:80:c7:e0:ab:5e:6b:53:52:
         91:15:27:20:ff:71:f0:1b:9f:0d:fb:ca:f5:9c:ce:41:88:6d:
         43:36:22:8e:c6:99:f9:dd:0c:f9:a4:55:f6:86:4c:a2:49:44:
         36:d7:93:ca:bf:3d:b0:e9:4c:8c:2c:f6:6e:7a:65:36:e9:9a:
         b9:70:8d:03:32:e1:6c:41:39:84:b9:30:38:1c:c4:d9:45:93:
         eb:6e:bb:83:c1:13:28:09:82:44:be:77:9d:0d:1d:d8:a1:e4:
         3d:18:79:60:b7:1b:cd:d6:cb:35:1f:a1:45:24:c5:fe:6e:07:
         fa:79:29:85:9d:f6:bb:a7:da:d7:12:b4:31:af:fb:b1:75:5c:
         b4:21:27:eb:c7:f6:b2:05:31:74:c2:25:43:9a:fc:45:8e:ab:
         8e:67:e4:ab:b2:a2:bd:e1:7b:d5:36:81:90:e7:83:90:53:f5:
         04:0f:33:5c:ee:50:c7:e3:3d:e7:0d:ec:58:91:c9:5d:95:56:
         b0:d6:3c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 04:46:11 2024 by rpki-client on console-fra.rpki-client.org