Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
File:                     3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          JQkl8pRKLsPismPaCte+mJOTiJMY+r8F2iDyAL2eBaI=
Subject key identifier:   3D:09:31:88:4B:1C:FA:A1:BF:A6:B6:CF:E1:A1:42:5A:37:64:C7:06
Certificate issuer:       /CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
Certificate serial:       3D74A5AF797AD30B1E7DDFF792DD10BC0922BA16
Authority key identifier: 73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
Signing time:             Thu 28 Mar 2024 07:45:23 +0000
ROA not before:           Thu 28 Mar 2024 07:40:23 +0000
ROA not after:            Thu 27 Mar 2025 07:45:23 +0000
asID:                     396982
IP address blocks:        103.55.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl
                          rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 May 2024 19:35:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:74:a5:af:79:7a:d3:0b:1e:7d:df:f7:92:dd:10:bc:09:22:ba:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9
        Validity
            Not Before: Mar 28 07:40:23 2024 GMT
            Not After : Mar 27 07:45:23 2025 GMT
        Subject: CN=3D0931884B1CFAA1BFA6B6CFE1A1425A3764C706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:4d:7c:b3:92:18:3a:3d:e1:eb:56:9d:2d:
                    96:7d:c7:fd:4d:e2:c0:5d:a9:7c:3d:86:a5:8d:4a:
                    d6:e9:fd:d9:09:dc:f9:6a:47:c6:3a:cb:f2:b5:40:
                    37:d2:17:f2:83:d7:cd:d5:be:2d:40:ea:b2:87:eb:
                    4a:d2:9e:81:24:44:eb:ef:8f:ee:c1:aa:4d:25:5b:
                    d4:6e:51:29:29:72:12:07:ea:89:8c:72:66:6b:64:
                    46:39:59:19:cb:c2:94:f7:34:f8:83:a4:eb:e2:d1:
                    fa:74:ca:0f:4f:8e:bb:30:b6:f2:22:1d:1a:60:2d:
                    8a:c5:e7:81:ae:1a:2c:3e:75:bc:f8:50:d7:5b:08:
                    16:88:ad:e6:23:07:ec:65:d3:28:73:50:3f:b8:42:
                    0d:e2:87:3b:db:53:96:e7:0b:fe:a8:3f:38:5b:94:
                    e4:09:6a:16:24:54:6f:c7:01:85:a9:97:29:18:e0:
                    cb:2b:3a:1c:cb:ea:25:41:17:cb:90:13:2d:91:a6:
                    ca:d8:17:21:38:2a:eb:f1:b2:7c:fa:c7:13:b8:67:
                    6c:b0:c6:99:19:d2:b5:bf:9b:4a:ab:94:1e:c7:f7:
                    67:f3:4b:67:56:43:28:4f:5d:18:54:44:94:c1:a6:
                    09:0a:ce:3f:3e:bc:9b:db:97:1c:cc:a4:d7:6c:8e:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:31:88:4B:1C:FA:A1:BF:A6:B6:CF:E1:A1:42:5A:37:64:C7:06
            X509v3 Authority Key Identifier:
                keyid:73:27:9D:AD:B4:EB:9B:31:B8:8C:CA:B5:F6:83:DD:A0:55:F4:F0:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73279DADB4EB9B31B88CCAB5F683DDA055F4F0A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:b3:8e:30:20:f9:95:19:31:18:56:7a:57:3e:21:99:c0:
         53:7e:26:4b:d8:bd:c1:76:43:52:46:d7:03:88:f7:06:b0:3d:
         e8:ef:81:0a:68:82:39:ab:7f:5f:83:bd:1c:48:bb:06:54:53:
         a6:88:22:45:3e:3f:39:8a:bb:70:32:79:e3:7b:71:b3:fb:f8:
         0c:70:f3:36:90:1c:22:bc:be:51:ba:16:0a:b4:71:97:22:2d:
         44:9f:7d:bc:97:c4:95:36:8d:1b:5b:de:38:ea:8f:df:2a:5b:
         84:3b:f2:4a:04:07:7a:6c:7d:fe:47:a7:cb:fd:52:65:c6:06:
         97:88:6f:c7:97:ea:bb:fb:ea:e2:fa:8b:5d:5a:15:df:0f:4d:
         44:9c:e8:c8:72:7c:82:42:26:90:8f:9c:21:61:1a:1c:34:46:
         f1:a2:46:6c:7a:08:ec:4c:67:8a:b5:e6:e7:02:df:50:dd:7a:
         c0:3b:50:f2:d9:30:30:1e:d1:47:cb:3c:b9:53:b3:3a:7e:ba:
         d8:bd:f8:ab:e5:ad:b3:b3:22:b0:cc:95:6c:13:5b:07:be:5e:
         b4:d6:84:a0:80:0a:20:ef:d1:42:d6:96:3b:37:cb:27:cb:33:
         19:07:1d:2b:44:36:3e:87:62:b7:d8:23:5e:49:15:7a:42:e4:
         21:85:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:32:27 2024 by rpki-client on console-fra.rpki-client.org