Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa
File:                     3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa (raw, json)
Hash identifier:          dGC3Ba7gDg44WGmhoadcVrdZFepIk5RYXaxJNW0mdRo=
Subject key identifier:   67:0E:70:C4:9C:05:A5:55:5F:4D:D7:12:78:ED:76:88:2A:7C:67:F8
Certificate issuer:       /CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
Certificate serial:       56DABA758FB91C272ADE48B3EB3B150B4925CC99
Authority key identifier: EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa
Signing time:             Mon 31 Jul 2023 00:02:37 +0000
ROA not before:           Sun 30 Jul 2023 23:57:37 +0000
ROA not after:            Mon 29 Jul 2024 00:02:37 +0000
asID:                     138878
IP address blocks:        103.139.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl
                          rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 20:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:da:ba:75:8f:b9:1c:27:2a:de:48:b3:eb:3b:15:0b:49:25:cc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC39D766063B56E5EA4DBFB2A502298FB995956A
        Validity
            Not Before: Jul 30 23:57:37 2023 GMT
            Not After : Jul 29 00:02:37 2024 GMT
        Subject: CN=670E70C49C05A5555F4DD71278ED76882A7C67F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0e:82:a4:c7:ea:f7:84:58:38:dc:e0:a9:dc:
                    ad:69:e3:fc:37:0c:97:c7:37:bc:14:57:2d:98:bf:
                    48:cc:8b:2b:19:ce:f0:c0:22:55:56:73:fe:16:9e:
                    e0:e7:63:66:39:ec:d6:21:d7:f1:07:68:96:aa:41:
                    23:8e:f6:a2:ca:43:f4:8d:ee:ed:45:ac:05:78:2c:
                    3f:4b:99:9b:24:2e:9c:dd:6c:01:71:03:03:f4:1a:
                    50:ff:42:c4:7c:3e:e5:94:5b:df:f9:a4:06:3e:af:
                    47:a1:1c:78:c0:f5:b7:80:5f:4e:fc:37:1e:43:c6:
                    0e:59:f9:1d:77:23:c7:0f:e3:96:c4:9e:be:c9:7e:
                    fb:cb:72:f4:ee:de:70:30:de:9f:4e:01:94:78:ed:
                    ac:a0:03:94:47:1c:73:c6:81:90:4c:76:d4:7e:e0:
                    5e:ed:f4:54:d6:a2:72:ed:b3:de:f0:7f:9c:b9:11:
                    73:6e:7a:6f:8a:e2:09:d9:e4:fe:48:7b:f6:73:78:
                    99:ed:d4:99:e2:9c:28:c1:3f:6c:d7:60:11:81:3e:
                    d7:9a:aa:ac:c3:82:e0:8d:64:0f:3c:ce:75:1c:81:
                    02:5c:0a:30:06:77:f6:91:a4:3e:c3:74:bb:73:f2:
                    f5:e9:1b:34:57:00:be:a2:1a:fd:40:b1:08:8d:72:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:70:C4:9C:05:A5:55:5F:4D:D7:12:78:ED:76:88:2A:7C:67:F8
            X509v3 Authority Key Identifier:
                keyid:EC:39:D7:66:06:3B:56:E5:EA:4D:BF:B2:A5:02:29:8F:B9:95:95:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/EC39D766063B56E5EA4DBFB2A502298FB995956A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC39D766063B56E5EA4DBFB2A502298FB995956A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73fe4255-1d91-4fcc-bce4-8a42adfe3c29/0/3130332e3133392e32352e302f32342d3234203d3e20313338383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b9:ca:1d:f2:a5:e6:b4:f6:9c:d1:e0:f4:64:2e:c3:0c:0f:
         f9:54:76:99:80:99:a8:3b:68:80:d5:1a:7a:af:37:52:ff:03:
         1c:b2:18:da:f1:bd:53:bb:81:49:43:6c:0d:83:53:82:af:29:
         22:1d:23:ca:ce:97:da:63:d7:12:e8:72:91:81:f3:da:88:14:
         3e:b5:51:82:9a:ae:4e:37:b8:f2:b5:e0:bf:21:b1:07:79:ad:
         94:33:1b:c3:e6:dd:8e:d5:7f:45:3e:02:68:d3:d0:d4:57:e3:
         ee:58:0a:45:92:33:36:b4:d1:e9:52:03:d3:80:68:75:e2:f6:
         c7:36:ae:98:13:ca:fc:d3:b3:d0:27:fc:48:e6:d6:e2:34:7b:
         da:7b:76:51:47:5c:e3:c9:3f:02:55:9f:29:73:d8:fc:a3:1c:
         69:dc:d1:89:11:dc:17:9e:12:08:a9:23:8d:a5:4b:4f:6a:14:
         bc:fd:b6:50:16:b9:ac:5b:40:dd:2b:2e:64:fa:6d:21:dc:0a:
         2c:f1:19:1f:cb:34:4b:69:e5:f1:4a:a2:5e:b2:47:02:84:84:
         22:32:d4:89:f9:33:f8:50:36:d4:69:02:97:59:f3:07:70:9a:
         b4:83:9b:25:db:28:68:1d:f7:3f:3e:ae:fd:c3:84:df:4d:5e:
         25:f7:2e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 23:30:22 2024 by rpki-client on console-ams.rpki-client.org