Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
File:                     3130332e3133352e322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          XWnh1VykZqMD04Gqe6UZfKtVzo0XPT3InbmErZuC12M=
Subject key identifier:   1C:69:EB:A4:3C:3F:91:60:77:D5:E0:2B:79:6D:1F:33:38:22:BD:EC
Certificate issuer:       /CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
Certificate serial:       7E37419B15FF1CA066B2D9877CFE89DFC4A24194
Authority key identifier: 3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 05 Aug 2024 03:01:46 +0000
ROA not before:           Mon 05 Aug 2024 02:56:46 +0000
ROA not after:            Mon 04 Aug 2025 03:01:46 +0000
asID:                     38320
IP address blocks:        103.135.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl
                          rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:37:41:9b:15:ff:1c:a0:66:b2:d9:87:7c:fe:89:df:c4:a2:41:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3C868A5674B425FAE567426BCB238E23AE20AC
        Validity
            Not Before: Aug  5 02:56:46 2024 GMT
            Not After : Aug  4 03:01:46 2025 GMT
        Subject: CN=1C69EBA43C3F916077D5E02B796D1F333822BDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:56:96:ec:92:ea:8c:c2:1c:32:d7:e8:fa:
                    6d:3c:2e:0b:1d:1d:c2:ce:ec:20:2f:6b:47:5f:47:
                    4d:11:0f:de:c9:35:2c:fc:b4:a1:72:87:2c:ab:0b:
                    a7:53:ac:b9:6a:88:2f:f6:b4:da:a6:7d:a5:62:ec:
                    46:f4:47:51:db:47:8b:7f:f5:1b:b6:59:fa:2a:af:
                    2c:62:1b:9f:c3:17:e9:2b:63:a3:f4:a7:04:c3:13:
                    8c:07:9d:5a:27:82:b6:10:87:4b:5d:43:f8:7a:77:
                    9f:c5:3d:42:0d:b2:5b:98:4e:a7:00:ee:af:8a:62:
                    bf:c7:e8:e2:4f:a6:9a:0f:64:10:9f:09:24:97:6c:
                    b1:ff:a7:d4:75:a7:d9:e9:69:a7:0e:eb:9d:22:12:
                    0b:51:dd:c3:85:ba:98:cc:de:3d:87:a6:58:a2:79:
                    03:66:e5:01:c4:a3:61:44:da:14:52:a7:d7:2b:f9:
                    22:eb:85:94:7d:db:b6:f7:2d:6b:0b:03:08:26:8f:
                    2f:98:97:b2:fe:b2:d0:61:27:1a:e1:2e:7f:8b:0f:
                    89:73:0a:6d:55:5c:e5:b6:27:97:ab:58:86:39:4b:
                    a3:52:4e:18:99:28:32:2b:e9:fa:d4:89:34:81:f3:
                    fe:bb:9c:49:6f:c7:a0:2c:b5:28:a8:35:5c:f1:65:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:69:EB:A4:3C:3F:91:60:77:D5:E0:2B:79:6D:1F:33:38:22:BD:EC
            X509v3 Authority Key Identifier:
                keyid:3C:3C:86:8A:56:74:B4:25:FA:E5:67:42:6B:CB:23:8E:23:AE:20:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3C3C868A5674B425FAE567426BCB238E23AE20AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C3C868A5674B425FAE567426BCB238E23AE20AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0299e6f0-f23c-41ff-b67c-41af051339d1/0/3130332e3133352e322e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:1e:c3:93:5d:d9:ee:ac:c8:12:dd:6a:b7:96:cb:68:58:61:
         e0:73:86:af:6f:4a:b1:52:43:d6:e0:83:e7:86:56:ce:5b:25:
         d4:44:27:96:39:82:76:fc:7d:72:8c:d8:09:2b:a4:09:fe:89:
         13:42:fb:db:64:39:f2:d7:bc:a4:3e:c3:f8:c4:0b:1e:d9:8b:
         46:a0:d4:65:b9:46:aa:8c:8f:4f:ff:c0:e9:22:bc:ec:dd:7c:
         31:dd:4c:ba:31:0f:44:02:39:8c:91:9f:b5:d8:ad:85:cf:ff:
         a2:39:2f:85:bc:93:74:25:86:34:d0:8e:15:92:0d:31:15:40:
         bc:64:55:47:4f:e3:c1:12:b1:57:91:1a:77:da:ae:cb:72:c0:
         69:4d:5b:ee:89:47:fb:a1:8c:71:78:90:44:67:70:a4:17:e2:
         16:a3:cd:ce:83:0f:84:97:23:97:c4:2c:dc:e0:8b:15:06:56:
         ec:3a:90:23:d4:e0:a1:3a:f8:ec:9e:7b:bb:7f:d7:ce:95:3d:
         53:cd:11:75:fb:cd:3d:45:ba:e0:b9:61:f8:d6:15:3c:0e:af:
         2b:67:08:b4:59:31:8f:f0:e4:60:08:f4:79:79:80:42:fc:06:
         fe:7c:43:4e:ef:77:da:33:58:01:55:5c:63:67:bf:d2:81:03:
         dd:a0:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:05 2024 by rpki-client on console-fra.rpki-client.org