Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa
File:                     3133392e352e34302e302f32322d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          U5zGvsqNtC2VlLl8wjjNKwBB1Td9IN0SDrOEFi/0Mso=
Subject key identifier:   93:CB:D1:AF:27:00:C1:D1:6E:5C:9D:75:56:7D:DB:70:7C:DE:8F:5D
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       2EA9C16821DF496B9256E00994E79ABEB8BB7631
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa
Signing time:             Mon 01 Jul 2024 01:04:37 +0000
ROA not before:           Mon 01 Jul 2024 00:59:37 +0000
ROA not after:            Mon 30 Jun 2025 01:04:37 +0000
asID:                     135448
IP address blocks:        139.5.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a9:c1:68:21:df:49:6b:92:56:e0:09:94:e7:9a:be:b8:bb:76:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul  1 00:59:37 2024 GMT
            Not After : Jun 30 01:04:37 2025 GMT
        Subject: CN=93CBD1AF2700C1D16E5C9D75567DDB707CDE8F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:13:9f:53:ad:a7:87:54:55:43:3e:38:b1:
                    9b:9b:e6:3d:c8:da:97:f8:59:ba:1c:57:6c:24:1d:
                    ee:6d:70:26:4b:31:40:bf:dd:33:e3:73:60:43:04:
                    28:39:24:6b:4c:e5:1b:22:3a:cc:1c:c3:80:ea:d6:
                    a5:d2:4e:bb:98:07:5a:48:cc:06:be:05:5a:d0:a0:
                    38:a3:68:1d:9c:ce:cc:c4:88:0a:25:9f:4d:57:a0:
                    11:55:2c:05:82:2a:51:44:07:62:6b:2d:14:2c:a2:
                    58:65:28:7a:65:5b:73:b5:88:3d:03:49:3b:5f:4f:
                    92:ea:80:09:1b:7b:35:e1:38:4c:b8:e2:40:8e:cd:
                    3b:91:74:cb:e2:1f:c4:bc:91:a7:fd:12:57:31:27:
                    e8:69:03:34:d5:9e:dd:68:0b:ca:ed:30:6d:73:a7:
                    0a:fd:c0:cd:69:32:11:ce:29:45:2a:9b:20:82:35:
                    61:58:fb:dc:01:fe:45:a5:27:0f:13:71:e4:a3:a9:
                    08:6c:87:2f:5a:78:a7:c9:2e:82:3d:19:ac:13:ed:
                    36:df:d7:30:7f:94:62:dd:b4:59:96:d0:df:05:f2:
                    23:da:62:ff:f9:d3:b1:26:59:dc:c1:f8:5f:cf:6e:
                    5f:a1:b0:a7:c3:45:a9:c5:33:2e:69:81:22:4e:53:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CB:D1:AF:27:00:C1:D1:6E:5C:9D:75:56:7D:DB:70:7C:DE:8F:5D
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3133392e352e34302e302f32322d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:f1:40:66:ba:b6:2c:b2:5f:31:e1:9a:60:35:2e:0e:00:40:
         39:d2:ac:88:b7:e2:29:99:ad:c5:b6:ef:06:50:1f:dd:11:83:
         b7:51:48:f4:a9:5f:57:35:8c:9e:be:d2:7c:60:1a:2c:ae:9d:
         17:9e:65:e8:0a:27:7d:e7:83:d0:ea:4a:bf:7b:5d:8c:3e:6e:
         3c:1c:59:8e:dc:3a:60:0b:5e:3e:66:01:0a:04:84:b5:18:40:
         a5:43:f6:fe:4b:2b:44:1c:68:12:9b:7f:cd:1b:62:17:8b:97:
         04:59:91:4d:73:9b:9b:3d:bc:91:44:6c:96:d5:d3:88:d3:a0:
         97:56:d2:4c:43:ba:d0:bf:97:02:56:56:57:e7:23:cc:63:a2:
         e1:b5:15:e9:eb:63:71:39:ba:15:df:90:88:34:fe:bc:04:13:
         f8:3b:7e:98:a2:64:4c:bc:11:de:c6:f6:96:fd:f2:b4:29:6e:
         f8:dc:72:f3:60:c2:b4:8d:58:72:d8:13:24:cb:d8:8f:5c:e8:
         c4:0a:a7:f8:07:fd:18:df:26:f6:f4:c7:c6:76:61:83:58:e2:
         5c:d1:0b:71:4f:39:05:89:12:71:0c:60:da:c3:c1:83:97:7b:
         0c:e4:b9:d7:c7:a2:21:24:52:a1:54:35:1c:cb:85:e1:91:ce:
         70:6a:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org