Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa
File:                     3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (raw, json)
Hash identifier:          snt9gqIX0Tu71JHqy4+1WN6xAnx6fnULGbS46QmtfVE=
Subject key identifier:   E0:0F:46:9A:A0:D3:48:C9:AD:27:47:44:69:C3:E3:4C:F6:0D:73:52
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       14A09F2FB5B8F3571C143043D03E3D2A356A5014
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa
Signing time:             Thu 23 May 2024 03:33:12 +0000
ROA not before:           Thu 23 May 2024 03:28:12 +0000
ROA not after:            Thu 22 May 2025 03:33:12 +0000
asID:                     138811
IP address blocks:        103.137.32.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl
                          rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 06:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:9f:2f:b5:b8:f3:57:1c:14:30:43:d0:3e:3d:2a:35:6a:50:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: May 23 03:28:12 2024 GMT
            Not After : May 22 03:33:12 2025 GMT
        Subject: CN=E00F469AA0D348C9AD27474469C3E34CF60D7352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:95:38:ec:6c:f2:f1:01:37:b8:de:d6:b8:
                    98:a0:90:ca:e2:4c:d6:03:2c:43:48:92:63:7c:f3:
                    f2:e7:a9:36:03:fb:45:b4:99:a7:4a:fa:d8:70:24:
                    56:05:b7:e7:ad:32:bf:93:0d:c8:b9:7d:4b:c1:56:
                    2d:11:d8:bd:90:44:62:3e:32:e3:99:0a:90:14:d9:
                    0c:b3:1e:bd:8b:67:cf:4e:de:2f:91:07:7f:89:9d:
                    2c:7e:39:96:32:44:5a:f5:a1:c9:4b:f6:d4:4c:6d:
                    44:1f:fe:57:85:94:3f:56:10:11:a3:9f:09:39:f8:
                    0e:de:9d:ed:31:9d:f0:ed:68:bf:d9:fe:11:78:a3:
                    ad:ae:79:6f:2d:9e:da:34:26:28:7f:a8:6d:b9:80:
                    b8:49:f5:6a:74:0b:a7:08:a2:a3:23:24:f7:62:8f:
                    b0:62:64:92:b6:e1:88:2e:99:11:87:bc:3f:6c:fa:
                    8b:1c:e7:d3:21:29:e6:76:3a:12:bf:dd:76:2f:1d:
                    c8:05:96:df:b1:43:a2:72:43:62:24:a6:f2:c9:c5:
                    4a:ac:10:cd:d2:fd:49:3a:32:0f:2b:9f:9b:39:26:
                    dd:d5:d1:d8:28:20:68:dc:1d:7f:ce:00:e6:7d:48:
                    1a:da:13:28:06:74:e2:05:75:3d:97:a6:8e:1d:e8:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:46:9A:A0:D3:48:C9:AD:27:47:44:69:C3:E3:4C:F6:0D:73:52
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:cb:88:96:9e:a3:60:1d:5c:dd:9c:67:81:1c:2e:5a:6b:
         10:2d:1c:f6:b3:b6:a5:db:7d:88:e8:e8:d0:a8:8b:1e:f8:bc:
         3e:5d:f6:07:32:a9:da:e6:81:70:80:50:6d:41:b0:8e:89:f6:
         ad:e4:04:bc:17:90:48:fa:88:08:40:65:b4:db:c0:13:99:82:
         0e:78:0b:40:40:b9:85:9d:e3:7f:19:38:6e:db:a2:a2:ee:43:
         74:64:d3:ca:af:67:32:03:76:8a:46:17:25:c7:9a:a0:1a:b3:
         0f:ec:c2:3a:11:fe:cd:93:b0:09:32:8f:85:67:b5:29:7b:11:
         cc:36:c3:07:03:5d:e1:e8:cc:1c:f5:fe:d7:4c:23:6b:ef:86:
         3e:b6:9b:37:13:15:1b:2e:44:ea:2a:2b:7a:d3:92:3e:13:c3:
         0c:b5:4f:b3:4e:b3:41:32:c9:0f:d0:4b:77:b4:12:1d:9d:5a:
         c2:59:87:18:f7:19:73:e0:f1:27:38:c7:50:80:3c:dd:44:28:
         df:e7:ea:ab:e6:87:da:f1:43:f4:99:90:63:a1:9e:9b:23:7e:
         bb:36:ae:33:12:20:a4:ba:4b:83:31:0d:90:61:06:82:2b:16:
         a0:ac:a4:44:bb:f6:2e:e8:91:45:92:74:f2:57:95:22:18:38:
         bb:27:c0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 07:38:43 2024 by rpki-client on console-fra.rpki-client.org