Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          Op18eTJ76qIidA2+ibv/befi3EQidf14+Ri1HBp0rQU=
Subject key identifier:   26:3A:DF:53:3D:69:57:46:88:7C:25:A4:AA:E6:0A:A5:3A:8B:DC:09
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       105C903F1E304784CA7C24451D5D3D9E77FD4385
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:28 +0000
ROA not before:           Sun 30 Jul 2023 23:57:28 +0000
ROA not after:            Mon 29 Jul 2024 00:02:28 +0000
asID:                     135478
IP address blocks:        101.128.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5c:90:3f:1e:30:47:84:ca:7c:24:45:1d:5d:3d:9e:77:fd:43:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:28 2023 GMT
            Not After : Jul 29 00:02:28 2024 GMT
        Subject: CN=263ADF533D695746887C25A4AAE60AA53A8BDC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:8c:8a:78:4a:9b:4b:2e:71:57:fa:f2:d4:
                    7c:df:6b:ba:5c:e8:ad:6f:83:f7:94:df:bf:6f:1e:
                    a5:3c:28:d6:6e:36:19:bc:ed:82:01:80:28:45:8b:
                    11:f4:3e:38:e4:bd:c6:96:9d:3c:47:94:74:01:57:
                    65:1a:d3:e2:2c:e1:99:3b:d3:46:92:b9:9f:01:e8:
                    44:64:21:51:f9:ba:4b:13:ef:32:ec:46:a7:c2:6b:
                    c3:ce:74:3c:64:85:6a:d9:a2:9e:8f:8b:e2:30:f3:
                    51:c8:23:9d:38:91:de:51:77:d5:ac:93:f1:c5:b9:
                    36:34:49:bf:26:d1:a1:6a:19:2f:a2:91:fa:2f:1d:
                    7d:70:47:9d:6c:e7:83:bd:84:15:7c:29:30:f5:b1:
                    cf:d0:b3:91:80:cd:4f:25:59:54:d3:2a:b8:f7:bd:
                    d4:c7:17:db:12:70:b9:22:95:72:eb:4f:c1:a2:c3:
                    ed:a4:f7:9f:25:b6:a5:33:f3:6f:ff:7c:e7:e8:2d:
                    d0:46:12:15:1a:cc:f7:64:8a:5d:9d:51:7c:6c:41:
                    97:2f:52:8c:cf:6d:70:d9:81:50:7a:d9:34:f6:0f:
                    c6:a0:33:59:07:5b:9e:e9:b5:f0:c3:fb:8b:0b:cc:
                    f0:d5:a4:56:33:d5:b9:5a:98:32:3a:48:ca:31:f6:
                    05:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3A:DF:53:3D:69:57:46:88:7C:25:A4:AA:E6:0A:A5:3A:8B:DC:09
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e3132342e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:df:b7:0d:26:06:50:b7:25:1e:3b:d5:e0:5b:24:ae:6b:16:
         10:0b:ba:63:09:c6:76:ab:04:77:8f:12:ad:bc:92:d2:45:86:
         30:b7:18:ad:ce:2d:e1:e6:9c:f5:f6:96:c1:b6:30:70:cb:fc:
         5d:12:0f:2c:31:66:b2:40:f1:7a:e5:2d:b5:32:6d:49:75:a9:
         f9:d4:05:01:b1:a7:9d:9f:ec:69:d0:7b:09:1d:8c:cb:68:0d:
         ea:9a:2a:55:52:2e:11:0b:b4:a1:c5:e0:22:95:26:56:cb:8a:
         d7:dd:be:a2:e8:ae:a6:4c:bc:25:13:98:fd:0c:01:b1:a1:9e:
         79:e1:1c:ea:b8:07:6b:be:78:3f:d2:8e:91:a9:35:53:2f:f7:
         92:e3:8a:5a:a1:7d:f7:4c:46:c2:04:d6:e3:d1:59:b8:ea:24:
         f2:7a:76:0f:50:e3:3c:8a:d7:99:ff:ce:92:ef:aa:50:b5:5a:
         7a:4d:87:95:ef:70:43:e4:6e:24:c3:2b:84:95:88:38:91:48:
         7d:49:af:10:81:3a:e9:53:a1:06:cf:85:23:3f:b9:e2:d7:de:
         92:a3:0d:e0:6d:8c:e5:01:ce:3c:63:77:3b:a0:cb:70:79:3c:
         aa:e4:7c:77:0a:f8:6c:69:4d:f6:45:76:1b:46:85:a9:09:41:
         d3:69:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org