Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          RoYDKZMREekELmgfcMRFF1j1MwrQ0QlTFeV/+BP8fNM=
Subject key identifier:   F5:E9:87:EB:04:30:E0:CB:C1:8B:A3:C5:A0:09:18:BE:56:8A:14:77
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       48C3AE90F51BD076C2B2569C35AC31D9C7574AB5
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:24 +0000
ROA not before:           Sun 30 Jul 2023 23:57:24 +0000
ROA not after:            Mon 29 Jul 2024 00:02:24 +0000
asID:                     135478
IP address blocks:        101.128.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c3:ae:90:f5:1b:d0:76:c2:b2:56:9c:35:ac:31:d9:c7:57:4a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:24 2023 GMT
            Not After : Jul 29 00:02:24 2024 GMT
        Subject: CN=F5E987EB0430E0CBC18BA3C5A00918BE568A1477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:ad:0f:7c:61:1c:a6:92:b2:08:a8:be:d3:
                    cd:17:8d:85:11:09:ea:08:76:04:b9:88:24:c3:a6:
                    fa:f7:be:dd:b6:77:58:80:14:56:fe:40:a0:fe:d8:
                    95:58:61:89:b1:40:8c:10:1b:e9:64:9e:ad:ac:83:
                    51:19:66:cc:59:47:af:f3:df:fa:2f:00:87:99:75:
                    2a:b4:b4:8c:40:0e:1a:68:21:4c:78:7f:36:a2:e8:
                    95:98:91:31:f6:c5:89:c5:2e:d0:f2:de:be:bb:08:
                    73:eb:12:04:f7:56:e7:7c:b3:21:ba:ad:d4:58:ac:
                    fc:90:d6:e5:43:24:3d:03:bf:66:9d:49:99:bf:c7:
                    34:f4:33:75:38:d0:a8:1c:21:ba:46:7b:e5:76:ff:
                    4c:52:cf:25:13:d2:dd:40:5d:f1:8f:8d:f7:c8:08:
                    e0:07:3f:75:18:cf:3a:84:15:45:fd:48:c4:0c:54:
                    53:f6:8a:00:30:15:a9:77:01:20:a5:40:d8:7a:b8:
                    ff:24:f1:9f:7d:06:58:15:08:84:51:c9:ed:62:5e:
                    14:e7:7d:8b:5f:8b:84:67:91:9f:6a:f3:9b:a9:d5:
                    5f:83:de:f9:25:c3:1f:e7:03:5b:d6:8e:50:bf:6f:
                    d8:d3:72:0a:14:c1:e8:0e:f7:5f:82:aa:ff:7b:9e:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E9:87:EB:04:30:E0:CB:C1:8B:A3:C5:A0:09:18:BE:56:8A:14:77
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3130342e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:a5:58:08:f3:c5:e3:c0:d4:59:b8:2e:11:a3:5d:80:ad:b9:
         30:a9:64:fe:7f:e0:60:6a:3d:b6:a4:62:52:15:8a:76:6d:fe:
         2b:ef:15:9a:5e:5a:10:d9:53:40:d4:0c:13:c0:e3:cd:49:94:
         2c:b6:94:0f:53:5c:5a:48:85:3a:f8:f6:2d:b1:ab:63:c1:40:
         d7:ec:73:4b:cb:85:60:5d:9a:93:ea:f8:cd:03:98:a3:1b:db:
         a6:68:26:0c:64:21:10:82:7d:26:d2:52:c9:3b:b3:83:9c:5e:
         38:02:b2:53:6e:30:8a:45:cd:63:77:ba:1f:d5:79:06:a5:f1:
         ee:bf:35:2e:c2:25:80:fa:54:3d:c3:bc:29:7e:12:c3:6c:03:
         42:ef:c3:8b:fa:42:b2:7e:ad:e5:f6:df:88:53:d8:27:84:0e:
         47:80:eb:34:9c:8b:aa:c9:a6:5c:62:db:e5:8a:3b:6f:c7:89:
         f1:b2:48:ec:37:04:0d:c6:e6:43:e0:00:71:77:21:76:e0:0f:
         82:2f:14:6e:40:88:70:11:4e:5d:77:13:90:97:ed:8d:e4:42:
         23:16:d2:09:2a:eb:b4:a9:1a:e8:6e:50:1d:9f:28:c4:84:32:
         2d:76:47:1a:ab:79:6d:b4:bb:6e:20:fe:9e:2f:07:e5:7b:af:
         9a:85:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org