Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          sdm8s2gd9ddGhQaq9KZuOD5SsJHQVjzNXpTwnP40XuE=
Subject key identifier:   AD:22:C1:4C:20:93:53:D3:64:48:74:5B:4F:3E:FE:13:C8:3A:2C:53
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       5B4899D0CAA3609ED8FBA8509E47C82991F4351F
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:25 +0000
ROA not before:           Sun 30 Jul 2023 23:57:25 +0000
ROA not after:            Mon 29 Jul 2024 00:02:25 +0000
asID:                     135478
IP address blocks:        101.128.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:48:99:d0:ca:a3:60:9e:d8:fb:a8:50:9e:47:c8:29:91:f4:35:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:25 2023 GMT
            Not After : Jul 29 00:02:25 2024 GMT
        Subject: CN=AD22C14C209353D36448745B4F3EFE13C83A2C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:83:43:15:ae:df:04:aa:64:86:d0:b5:71:
                    1f:92:56:be:ce:e6:2e:e4:e9:14:f4:10:24:cf:85:
                    1b:67:11:e0:83:a5:77:1e:6d:95:7e:54:69:56:13:
                    35:7b:b4:6e:83:a5:0e:ab:68:8e:db:4b:a3:2e:11:
                    de:a3:d7:93:a9:f4:b4:c7:74:1a:95:41:b5:c1:42:
                    27:92:76:2e:5e:14:ec:79:84:c3:71:74:c7:7d:19:
                    f4:ad:ff:db:66:fe:9d:db:44:c5:d3:51:a1:ec:33:
                    80:36:11:8d:89:94:8a:16:e3:7e:dd:0f:fa:4c:88:
                    fe:ec:a5:33:22:43:4e:7d:10:08:bc:90:04:74:f3:
                    0a:09:63:23:e3:80:99:15:0e:16:41:30:90:fb:d5:
                    49:98:d6:1f:12:5b:6b:e9:21:a4:e2:41:c1:79:29:
                    cb:58:6e:41:93:69:74:22:52:0d:53:07:ee:67:18:
                    fc:aa:39:a4:1b:3b:ab:81:78:37:15:af:17:ab:f7:
                    65:60:1e:cd:4c:17:dd:a2:63:73:7b:02:d9:eb:2d:
                    94:76:4e:4f:02:6e:65:0b:f9:06:b2:63:3a:e1:fd:
                    4a:ff:69:c5:c5:0d:64:61:58:54:30:86:bb:70:1b:
                    a5:a6:7a:14:e8:2b:1d:89:15:fb:06:5f:31:7f:15:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:C1:4C:20:93:53:D3:64:48:74:5B:4F:3E:FE:13:C8:3A:2C:53
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:4a:dd:01:ee:c3:a8:38:4d:31:ac:7b:be:31:d5:53:45:12:
         d3:f2:23:f0:ab:d0:89:22:f3:24:cb:66:c1:ec:a9:9c:43:48:
         a4:c3:58:13:02:0f:80:c0:0e:1c:bc:78:15:83:fb:1b:89:d7:
         87:72:e6:30:1a:d3:b8:65:08:79:4e:99:1b:2e:78:3e:f3:04:
         37:3f:5f:26:27:0a:8d:7f:91:e4:20:fb:46:fd:01:f0:f9:a8:
         14:c9:0f:73:05:e5:2a:3d:14:3f:56:09:d1:fa:43:9f:9d:1d:
         87:58:ed:39:de:1c:36:31:45:9b:ed:dd:8b:0f:14:dc:ad:4e:
         66:a4:fe:78:cd:51:54:c5:80:0a:e2:89:93:91:a8:18:c3:3e:
         e8:c3:be:88:23:8f:84:91:1e:2b:09:3f:c2:ea:8b:92:44:05:
         28:c6:45:bf:51:a6:03:63:cd:7a:a6:c7:6d:77:b7:59:46:18:
         5b:f3:d2:41:06:e8:b5:ab:7a:c2:32:d9:33:61:02:e2:5b:86:
         32:72:65:ea:68:a9:aa:e2:11:db:8f:26:4d:46:05:f0:13:b9:
         e1:a8:ef:39:2f:ea:a6:b4:a1:53:20:21:fd:de:01:cc:ad:d8:
         7a:23:1c:71:a1:3d:11:2f:f6:cb:c5:21:d1:49:2a:cf:c1:c8:
         c3:ff:95:6f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUW0iZ0MqjYJ7Y+6hQnkfIKZH0NR8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjVaFw0yNDA3MjkwMDAyMjVaMDMxMTAvBgNV
BAMTKEFEMjJDMTRDMjA5MzUzRDM2NDQ4NzQ1QjRGM0VGRTEzQzgzQTJDNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmsINDFa7fBKpkhtC1cR+SVr7O
5i7k6RT0ECTPhRtnEeCDpXcebZV+VGlWEzV7tG6DpQ6raI7bS6MuEd6j15Op9LTH
dBqVQbXBQieSdi5eFOx5hMNxdMd9GfSt/9tm/p3bRMXTUaHsM4A2EY2JlIoW437d
D/pMiP7spTMiQ059EAi8kAR08woJYyPjgJkVDhZBMJD71UmY1h8SW2vpIaTiQcF5
KctYbkGTaXQiUg1TB+5nGPyqOaQbO6uBeDcVrxer92VgHs1MF92iY3N7AtnrLZR2
Tk8CbmUL+QayYzrh/Ur/acXFDWRhWFQwhrtwG6WmehToKx2JFfsGXzF/Fa/jAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrSLBTCCTU9NkSHRbTz7+E8g6LFMwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzNjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZYBAMA0GCSqG
SIb3DQEBCwUAA4IBAQCKSt0B7sOoOE0xrHu+MdVTRRLT8iPwq9CJIvMky2bB7Kmc
Q0ikw1gTAg+AwA4cvHgVg/sbideHcuYwGtO4ZQh5TpkbLng+8wQ3P18mJwqNf5Hk
IPtG/QHw+agUyQ9zBeUqPRQ/VgnR+kOfnR2HWO053hw2MUWb7d2LDxTcrU5mpP54
zVFUxYAK4omTkagYwz7ow76II4+EkR4rCT/C6ouSRAUoxkW/UaYDY816psdtd7dZ
Rhhb89JBBui1q3rCMtkzYQLiW4YycmXqaKmq4hHbjyZNRgXwE7nhqO85L+qmtKFT
ICH93gHMrdh6IxxxoT0RL/bLxSHRSSrPwcjD/5Vv
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:36:30 2024 by rpki-client on console-fra.rpki-client.org