Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa
File:                     3130332e3133372e33322e302f32342d3234203d3e203436303535.roa (raw, json)
Hash identifier:          WQsz/y9HXFVOEeyEGRzqXVoGANJfDYGC/yrRTXTg7uo=
Subject key identifier:   3E:CF:8A:FC:E3:C3:18:11:4E:FF:D1:DD:1D:70:C3:90:5F:9C:30:F9
Certificate issuer:       /CN=7ED240749DF73AB541823D94017C578425D757A6
Certificate serial:       53C08C8ED4F8336004BE8DBBEC96185DEA193A48
Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa
Signing time:             Wed 05 Jul 2023 07:50:38 +0000
ROA not before:           Wed 05 Jul 2023 07:45:38 +0000
ROA not after:            Wed 03 Jul 2024 07:50:38 +0000
asID:                     46055
IP address blocks:        103.137.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl
                          rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 13:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c0:8c:8e:d4:f8:33:60:04:be:8d:bb:ec:96:18:5d:ea:19:3a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6
        Validity
            Not Before: Jul  5 07:45:38 2023 GMT
            Not After : Jul  3 07:50:38 2024 GMT
        Subject: CN=3ECF8AFCE3C318114EFFD1DD1D70C3905F9C30F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:15:76:2e:e8:32:cf:ce:bc:ee:66:a1:a3:
                    92:9a:a0:ad:2a:b4:2a:41:a5:23:94:46:a1:23:02:
                    e2:a5:3a:d6:f9:66:c5:3b:92:be:94:d9:31:e7:09:
                    a8:9e:57:77:86:51:54:82:21:75:17:35:a7:d7:41:
                    d4:ae:38:12:53:a7:ae:60:e0:2f:66:9d:5f:b6:61:
                    82:ee:e6:25:50:b0:a5:74:19:f0:d3:33:f2:7b:63:
                    06:4e:ed:d0:c6:3e:e5:74:ff:e4:0a:ea:67:6b:a0:
                    78:c8:ab:e3:3c:4d:1d:a8:4a:13:e7:12:b1:93:04:
                    d7:56:4d:67:ee:f7:a9:4a:91:74:3b:27:44:2b:de:
                    82:ee:a4:c6:f2:34:a9:75:cd:6d:80:fd:49:4c:8f:
                    89:e3:ad:4a:e0:7a:92:fc:01:b2:09:bd:4b:b1:b1:
                    26:e9:fe:ae:0a:a9:6f:c4:dd:43:74:0d:8e:45:73:
                    c4:9a:e0:c0:a9:9c:34:f6:21:70:56:21:f8:ca:77:
                    93:71:7f:5f:ca:2c:8b:1e:02:e1:b2:43:c0:2a:30:
                    69:25:07:6a:ab:d5:8e:0d:87:52:2c:d6:59:fb:ed:
                    32:cb:09:12:4c:a6:d3:a4:35:fa:ed:c3:2e:49:44:
                    08:4c:39:e0:de:77:14:a6:dc:02:27:62:7a:40:7e:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CF:8A:FC:E3:C3:18:11:4E:FF:D1:DD:1D:70:C3:90:5F:9C:30:F9
            X509v3 Authority Key Identifier:
                keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/3130332e3133372e33322e302f32342d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:fb:12:84:48:ac:3c:48:f4:1d:4b:87:99:30:e4:70:df:91:
         60:76:bd:70:85:83:8e:6e:47:44:9d:4f:ce:ea:74:ec:55:f7:
         47:40:45:55:f2:a6:1d:39:cc:e3:93:56:11:99:c3:7e:28:cc:
         af:79:a4:31:0a:46:ce:13:08:dd:d8:3c:09:37:18:6a:74:ec:
         cf:cc:2e:f8:a9:b3:98:3f:ea:25:2d:03:aa:dc:ae:1f:78:69:
         30:a1:33:07:01:56:e4:bc:ac:46:ea:37:4d:ee:0d:ef:25:bc:
         1f:bd:c1:6e:68:86:fb:e8:7e:31:2f:32:5c:dd:ea:40:d4:dc:
         b9:6f:b2:90:dd:9b:fa:25:30:c2:82:7f:c1:e8:b6:c6:1d:45:
         d8:16:01:07:8f:aa:3f:8a:64:ec:a2:28:5d:66:c4:3e:04:93:
         c0:d5:ca:c6:34:2a:27:c5:d4:28:1b:83:b1:25:86:54:f5:66:
         f0:95:63:c4:d6:c5:f6:43:f8:07:c9:18:0f:a4:7b:98:33:72:
         cc:67:a4:4b:d2:c9:c8:80:b5:e5:55:c6:a3:1e:2c:a7:ed:f6:
         7f:eb:4e:af:7b:11:08:5c:7f:23:67:c9:d2:88:d6:a1:35:9a:
         d1:53:cf:c9:9d:0e:c9:14:68:69:77:22:21:40:49:34:17:12:
         89:b8:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:38 2024 by rpki-client on console-fra.rpki-client.org