Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          8/plYAKiSJeyK6KnsYKRPLXjbIwYEzLKTRoWdkgBAcU=
Subject key identifier:   95:C2:19:E8:9F:30:70:C3:8B:73:78:8D:C9:4D:BA:6E:8A:C8:80:C1
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       7C5FCDB033E46EC9BFB8FBC1F384C619C59DA0CF
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:27 +0000
ROA not before:           Sun 30 Jul 2023 23:57:27 +0000
ROA not after:            Mon 29 Jul 2024 00:02:27 +0000
asID:                     135478
IP address blocks:        101.128.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5f:cd:b0:33:e4:6e:c9:bf:b8:fb:c1:f3:84:c6:19:c5:9d:a0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:27 2023 GMT
            Not After : Jul 29 00:02:27 2024 GMT
        Subject: CN=95C219E89F3070C38B73788DC94DBA6E8AC880C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e3:ef:1e:de:d7:60:e4:7f:96:0f:03:5a:44:
                    be:5b:18:c3:38:cb:e4:2f:79:53:be:9a:92:f8:78:
                    9d:10:c3:7e:a1:3a:67:39:d8:51:3d:6e:1f:6d:73:
                    d6:b6:3e:50:c3:03:5c:5d:ee:99:3d:0c:4a:4a:a9:
                    f3:44:71:86:1a:96:a8:33:cd:46:ef:c8:80:93:04:
                    76:d6:c8:a1:f0:b5:fe:7b:48:c9:56:19:2d:14:d1:
                    40:18:f6:63:27:54:a1:1a:cc:38:a6:76:cb:d1:1d:
                    a0:e6:e7:ad:6b:1c:38:d1:58:30:d2:7f:51:77:77:
                    9f:c4:24:56:9d:cd:44:af:8e:c9:8f:cc:e9:d5:67:
                    5d:6c:11:fb:0c:03:bf:f6:61:29:58:e9:a6:0a:f0:
                    48:3a:bc:56:cb:50:b4:c4:c8:da:7a:71:b9:a6:39:
                    32:9f:17:65:5a:c8:f0:91:d8:a6:e9:c4:fc:d7:b3:
                    24:62:d8:20:eb:0f:5d:14:95:3c:c0:16:15:29:2b:
                    e1:f5:68:03:63:68:69:13:45:a0:e9:27:92:d7:8a:
                    d7:2b:c5:75:27:88:cc:ab:90:db:60:79:fd:88:39:
                    c7:6c:3f:ad:e3:3d:3a:27:0e:91:6a:00:90:a1:df:
                    21:a1:3b:31:cc:9d:03:d5:ac:3b:1b:a0:ff:c7:08:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C2:19:E8:9F:30:70:C3:8B:73:78:8D:C9:4D:BA:6E:8A:C8:80:C1
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3131322e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:19:45:90:85:39:9e:f9:f0:c1:89:d4:c5:27:d4:a3:03:dc:
         ba:42:69:1b:36:73:43:0d:d6:fa:71:52:a5:9b:bc:d7:d6:3a:
         e5:79:f9:73:69:f7:db:32:49:91:89:b2:8d:1d:62:50:72:a0:
         56:ac:e3:38:10:95:4d:5f:1b:42:22:76:5c:82:26:eb:75:1d:
         f4:41:e2:65:71:21:75:cf:66:36:42:b6:29:f0:d6:33:55:8c:
         81:e8:23:40:b4:28:55:92:ac:50:92:b7:58:76:51:5b:e0:27:
         41:e0:ff:5d:02:cf:dd:06:01:36:0c:be:f5:be:5d:8e:6e:35:
         83:7f:0d:96:b1:23:af:de:e4:23:48:20:a6:59:8d:09:e8:22:
         b7:9a:27:a9:85:90:6e:7e:b3:0c:46:c7:74:ff:77:d1:26:05:
         fe:5f:08:1c:cd:51:8f:a9:f2:eb:f2:0f:f5:24:e1:53:a6:c2:
         49:ce:c7:34:c9:0e:81:b3:7b:b4:06:96:82:16:bc:75:7f:1c:
         e0:87:48:f7:93:b0:88:44:6c:7c:36:48:8f:1e:d0:31:55:00:
         61:79:98:77:17:f6:39:ca:d4:b0:b8:83:96:eb:c9:1a:47:7c:
         49:b1:5c:be:5a:41:4f:2b:dd:a2:8a:b9:f2:04:47:4c:50:55:
         fe:5c:5c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org