Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa
File:                     3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa (raw, json)
Hash identifier:          yNJSdp21QxHQXQ/ZofOt5hJYx3kP1vMmfYB/I1WV2CA=
Subject key identifier:   5F:4E:BE:DD:A3:C4:FE:35:82:62:62:CC:79:DE:B6:EE:7A:DF:70:D4
Certificate issuer:       /CN=74D4F2785CA261D018C909BA622D8244292BCB3E
Certificate serial:       535ECD9DD8A5750374BAFD523555CA2253E5C1FC
Authority key identifier: 74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa
Signing time:             Thu 01 Aug 2024 18:00:01 +0000
ROA not before:           Thu 01 Aug 2024 17:55:01 +0000
ROA not after:            Thu 31 Jul 2025 18:00:01 +0000
asID:                     136861
IP address blocks:        103.103.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl
                          rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:5e:cd:9d:d8:a5:75:03:74:ba:fd:52:35:55:ca:22:53:e5:c1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74D4F2785CA261D018C909BA622D8244292BCB3E
        Validity
            Not Before: Aug  1 17:55:01 2024 GMT
            Not After : Jul 31 18:00:01 2025 GMT
        Subject: CN=5F4EBEDDA3C4FE35826262CC79DEB6EE7ADF70D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:b7:fd:41:64:cf:6f:3b:5e:eb:e2:ff:8a:
                    d0:b0:b2:84:bc:29:a0:79:92:62:f8:8f:d3:7d:49:
                    16:29:0f:88:45:4c:be:03:ab:96:d1:93:2a:d4:fe:
                    1e:98:54:dd:55:03:17:e2:97:84:3e:ee:32:e2:98:
                    6a:2b:a6:67:28:14:38:ff:2d:34:98:03:92:64:59:
                    d3:f0:0c:3a:68:97:89:c7:ad:3b:49:78:1d:1c:57:
                    2f:a9:33:4f:6d:56:2b:39:9b:c2:31:3c:09:b0:3b:
                    34:a8:6d:d1:b6:16:f1:c6:30:6a:55:10:7c:e0:57:
                    16:c9:f7:94:38:56:d5:50:ca:3a:ae:c9:61:15:f6:
                    f9:d9:81:3b:08:bb:a4:95:6c:ea:69:97:9e:93:63:
                    c6:2b:58:aa:4e:c4:a1:5a:02:83:93:91:ed:80:b7:
                    47:12:9e:94:55:e0:ff:20:9b:69:25:0e:54:ff:3e:
                    c2:b1:35:90:d6:7b:08:eb:0d:5c:c3:21:4c:de:da:
                    4b:5e:4c:52:d4:04:ba:a2:10:4c:12:db:a2:ef:c0:
                    f2:47:60:d6:21:8e:bf:f0:8f:a3:d7:1d:66:a3:00:
                    62:70:ee:0f:af:bc:38:70:b6:bf:3d:5a:1d:f4:95:
                    5c:d0:3c:9f:71:67:06:0e:cf:d8:df:82:ba:7c:8c:
                    07:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4E:BE:DD:A3:C4:FE:35:82:62:62:CC:79:DE:B6:EE:7A:DF:70:D4
            X509v3 Authority Key Identifier:
                keyid:74:D4:F2:78:5C:A2:61:D0:18:C9:09:BA:62:2D:82:44:29:2B:CB:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/74D4F2785CA261D018C909BA622D8244292BCB3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74D4F2785CA261D018C909BA622D8244292BCB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12ea77b5-88f7-4085-b331-975024cd046d/0/3130332e3130332e3134342e302f32322d3234203d3e20313336383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:13:3d:6f:77:25:f4:8e:ff:f7:a2:c6:f2:a6:48:4f:37:
         71:d6:72:a2:08:87:5e:0c:bf:ad:68:ae:cb:bc:6c:bf:f3:8e:
         88:0c:ab:34:37:85:a8:55:25:2d:37:b2:a4:c5:46:b6:a4:cb:
         0f:db:11:8c:e4:98:49:86:74:ef:ed:7e:bd:ef:20:cb:de:2f:
         a1:9d:3e:67:54:a2:c1:fc:24:9f:22:54:5e:e9:46:7e:5c:3b:
         69:7c:95:8e:00:5a:8e:b0:e4:2d:5a:6d:27:e4:9b:45:54:e7:
         4e:4d:2b:41:42:b0:bb:e8:a4:2c:67:65:9a:25:7e:f5:af:5f:
         c6:f3:df:99:4d:ae:db:ca:bf:84:94:15:2f:11:10:c0:fe:cb:
         d6:8b:44:cb:08:9c:3e:2e:03:40:14:f1:88:02:c6:51:6b:b9:
         99:b5:ab:32:12:09:6c:53:2f:3f:ea:3a:10:ed:5d:77:23:f7:
         93:67:27:cb:ae:a2:46:c4:37:b9:70:d0:69:e4:d7:79:80:51:
         df:3e:74:46:c3:9a:c7:98:42:9f:ce:69:9a:98:a1:9b:2b:f7:
         0e:d3:1b:18:2d:34:a1:49:40:c5:4f:56:76:6c:8c:38:ce:0e:
         1c:40:8a:4a:4f:ca:8d:3d:b9:7b:94:62:5e:6c:0b:ed:20:45:
         18:47:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:40 2024 by rpki-client on console-fra.rpki-client.org