Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          bQMItoT7tu/+kfNWFFTspyxp0Y6UUwsz+KYdN2BJZwQ=
Subject key identifier:   14:10:18:8D:ED:38:17:F6:39:3A:75:DC:8A:53:DA:A3:43:26:20:16
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       691EF1F1313A0E16DB8149B0C68B077EAD792919
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:22 +0000
ROA not before:           Sun 30 Jul 2023 23:57:22 +0000
ROA not after:            Mon 29 Jul 2024 00:02:22 +0000
asID:                     135478
IP address blocks:        101.128.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:f1:f1:31:3a:0e:16:db:81:49:b0:c6:8b:07:7e:ad:79:29:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:22 2023 GMT
            Not After : Jul 29 00:02:22 2024 GMT
        Subject: CN=1410188DED3817F6393A75DC8A53DAA343262016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:07:0f:db:b7:df:56:cb:38:4f:3c:c6:15:
                    13:f4:56:21:98:60:da:57:cc:74:c2:e4:d2:1a:80:
                    9c:66:e2:a2:91:ee:6b:94:8f:b0:5e:6d:e1:92:07:
                    96:b4:4b:6b:b2:13:d7:39:77:20:f0:7f:5e:7f:c0:
                    5b:6d:5c:6a:f4:ae:3d:16:47:c6:34:7d:fc:bb:35:
                    51:2b:3e:b9:37:da:37:3d:20:09:6f:7d:52:a8:63:
                    ad:65:e0:20:94:de:58:cd:bd:b8:d5:b3:81:8c:9e:
                    0f:8b:c8:93:71:05:48:b4:c8:f1:23:b1:2b:9d:eb:
                    b4:08:50:5e:03:10:c5:ed:bc:b8:ca:69:95:66:93:
                    9b:2f:2c:88:08:dd:fc:a6:0d:0c:c3:6b:23:10:5c:
                    fb:87:ea:2b:c4:77:98:5d:81:ba:36:18:31:0a:5d:
                    42:ca:ae:b9:94:59:b3:32:f0:b3:71:66:74:1c:49:
                    5b:c2:6b:ae:f1:ce:c5:e2:c1:33:84:72:1b:61:88:
                    55:6b:43:51:04:3d:a6:ce:3d:4e:de:06:56:b7:45:
                    c2:97:49:d6:0d:da:d4:06:f9:cf:74:dc:9a:7f:3a:
                    91:0d:f1:f0:f3:cb:7e:1d:58:76:3a:31:dc:fd:be:
                    ad:11:57:96:b4:cd:b8:04:42:31:63:5f:c2:2d:9f:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:18:8D:ED:38:17:F6:39:3A:75:DC:8A:53:DA:A3:43:26:20:16
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132302e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:7b:aa:a2:83:31:85:be:90:76:dd:68:ff:06:c3:c3:7f:
         a1:80:94:e4:9d:f3:2d:db:f1:aa:84:a7:7c:6a:57:f1:ae:8d:
         d9:3a:af:a4:4d:46:f0:97:89:ad:52:56:a5:e5:69:bb:ab:c1:
         64:01:c5:c3:3d:4f:8d:f3:6e:b7:10:49:4a:ce:74:a4:2b:dd:
         cb:e7:fd:91:aa:2f:39:4c:57:57:2b:1b:d6:7c:65:d2:c7:41:
         96:9f:4a:62:f9:ad:0c:af:cc:e1:2e:a7:f5:41:4b:ec:54:cb:
         07:76:95:75:52:bf:77:62:7c:58:71:01:b5:e3:b3:50:df:84:
         85:8e:6d:d5:0a:b8:8b:7a:5c:59:5f:a5:3c:be:b0:b6:e8:54:
         b6:91:db:ff:30:e3:2b:01:26:26:18:59:7a:1e:30:7e:f4:2c:
         87:1c:53:e5:80:fd:91:ae:2e:64:6a:04:d1:7a:d7:1c:13:3f:
         a2:9d:03:b2:73:be:a5:37:55:5c:f0:00:a8:62:ac:cc:9c:7e:
         db:b3:0a:fa:b3:eb:71:b3:79:7c:ff:52:34:a5:a2:d8:28:95:
         ac:ec:e5:49:ad:cd:83:d7:2f:82:ca:67:0c:5d:3d:f0:2d:17:
         b9:cf:3e:1a:dd:b8:96:ad:53:43:fa:2b:1b:97:6f:ff:92:e1:
         8e:02:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org