Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          VVbnG15nYQznOtaegyIF7xC39ey/Ndl2h6I1ShPKpVA=
Subject key identifier:   F5:FB:E5:55:A3:6A:AD:25:F4:16:07:6C:ED:61:F6:DC:2D:AF:A2:6F
Certificate issuer:       /CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
Certificate serial:       77DDBE54FF6EC2E1CCBF860D8C4B2DE1A073F525
Authority key identifier: 2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 09:02:01 +0000
ROA not before:           Wed 03 Jan 2024 08:57:01 +0000
ROA not after:            Wed 01 Jan 2025 09:02:01 +0000
asID:                     135478
IP address blocks:        103.129.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl
                          rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:dd:be:54:ff:6e:c2:e1:cc:bf:86:0d:8c:4b:2d:e1:a0:73:f5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AA6E65B86E4423AEC7D02D85B43BA008012D29D
        Validity
            Not Before: Jan  3 08:57:01 2024 GMT
            Not After : Jan  1 09:02:01 2025 GMT
        Subject: CN=F5FBE555A36AAD25F416076CED61F6DC2DAFA26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f3:18:9c:83:52:20:1f:db:fe:dd:45:59:81:
                    c4:c8:c0:1b:f0:cd:00:5c:8a:4f:5d:78:b2:1c:91:
                    27:3a:bf:2f:d0:9b:f1:9d:01:1b:30:e7:00:69:d4:
                    86:5f:4c:a0:da:0d:65:4f:6f:1c:63:f2:74:e6:b7:
                    40:d4:dd:a6:25:ee:13:de:c7:e1:a3:83:fa:55:a7:
                    68:37:24:4c:12:d1:46:46:95:1c:9e:45:60:c0:dd:
                    fa:bf:63:1d:b4:df:77:4e:9c:37:f7:5d:64:96:00:
                    68:6a:a0:c2:ef:1f:b8:16:90:6a:7e:69:49:f0:21:
                    3b:f0:d4:6b:62:56:4a:40:9c:ba:7d:15:84:94:47:
                    a7:5a:2e:ab:e9:e0:52:43:0d:f8:b0:fa:b4:b0:c6:
                    fd:9e:ca:ef:a6:0a:0d:f3:cf:27:0f:7b:46:66:7b:
                    eb:6e:22:b5:70:71:0b:2a:4f:b8:3a:19:cd:ef:9f:
                    7e:cd:87:dd:f6:6f:90:17:e9:12:10:c7:7e:72:03:
                    03:95:05:29:31:0f:fc:49:a2:02:1e:24:52:26:d8:
                    d9:39:2a:8d:b6:40:f1:ca:7b:89:c9:45:17:b7:24:
                    5d:59:15:fd:41:c6:f0:fe:96:f4:e5:55:3a:e5:56:
                    5b:88:4e:1f:f2:46:ae:32:b5:cd:10:fd:2f:59:1f:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FB:E5:55:A3:6A:AD:25:F4:16:07:6C:ED:61:F6:DC:2D:AF:A2:6F
            X509v3 Authority Key Identifier:
                keyid:2A:A6:E6:5B:86:E4:42:3A:EC:7D:02:D8:5B:43:BA:00:80:12:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AA6E65B86E4423AEC7D02D85B43BA008012D29D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e6bff9d-fb13-47b9-9cc0-dd6a0730a1c6/0/3130332e3132392e34382e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:b8:6f:76:09:34:99:2f:4f:78:1e:6e:9a:82:27:9d:18:
         aa:6d:79:95:c5:aa:18:ed:a9:fe:46:65:07:44:4a:43:f1:ad:
         00:4d:98:0d:9c:fb:5c:d3:71:93:2d:a6:a6:9e:8d:89:8b:d9:
         d4:c6:8c:3a:de:bb:e6:a4:f0:aa:3a:c3:81:92:cc:c3:8e:05:
         b1:38:db:1e:0c:13:05:ca:31:0d:30:e9:1c:aa:f3:14:d6:8d:
         e9:0d:fe:be:8f:0a:8b:e8:2f:f1:77:9d:8f:86:fb:c3:66:91:
         52:36:2c:04:7c:ff:e6:2e:91:07:e0:c6:32:12:d1:f3:fe:a3:
         7a:f9:ae:1b:8d:d8:f1:10:a2:7f:d7:42:44:f2:90:d9:9a:ce:
         e6:77:58:e5:f6:c7:bc:86:86:1f:26:75:64:b0:2d:9f:50:21:
         5f:e7:4a:8f:16:8c:9e:6b:32:35:1a:98:3f:f4:93:0b:bf:ee:
         b6:a7:51:4a:34:4a:8d:ee:96:2b:c3:9e:80:c7:2c:1b:9e:42:
         9c:07:d1:4b:91:47:9b:79:38:af:04:c3:5e:70:88:00:37:ec:
         9f:a2:6b:2e:9f:ae:80:05:02:9d:04:8d:4b:78:60:07:72:ae:
         21:1a:6d:d3:14:9b:9b:ac:48:75:47:2c:9e:de:cc:96:1d:4e:
         1a:8b:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 07:33:40 2024 by rpki-client on console-fra.rpki-client.org