Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          +EMTcbukOuAl9deYBfEd9/F/6Td5wsS0yGUvgXo39vg=
Subject key identifier:   01:26:21:A0:FF:23:DE:4D:7A:DA:9C:E4:BE:E6:81:98:62:A1:49:8C
Certificate issuer:       /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
Certificate serial:       135CB2CEB0A09AF5BE40F850A8BA055AA7213E69
Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 03 Nov 2023 07:00:00 +0000
ROA not before:           Fri 03 Nov 2023 06:55:00 +0000
ROA not after:            Fri 01 Nov 2024 07:00:00 +0000
asID:                     9341
IP address blocks:        103.35.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl
                          rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5c:b2:ce:b0:a0:9a:f5:be:40:f8:50:a8:ba:05:5a:a7:21:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
        Validity
            Not Before: Nov  3 06:55:00 2023 GMT
            Not After : Nov  1 07:00:00 2024 GMT
        Subject: CN=012621A0FF23DE4D7ADA9CE4BEE6819862A1498C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:69:9c:c2:de:87:10:a0:56:34:92:2d:56:
                    94:d7:bb:fa:b1:ec:a1:5c:e4:b2:56:d6:c1:8e:aa:
                    7e:d3:fb:49:5a:01:69:16:81:b0:a5:fa:36:e0:78:
                    6b:ed:b7:76:12:7d:00:c4:a1:3a:10:41:89:ff:b1:
                    73:db:71:7b:53:e4:da:fe:c3:17:e8:1c:cc:c1:49:
                    1b:c2:a3:84:ce:c1:15:72:b7:c8:be:c1:e3:fc:de:
                    3a:62:38:ab:b1:34:a6:ff:35:48:ba:de:ab:37:b0:
                    9b:94:69:da:90:85:df:a5:55:2a:48:15:99:6a:9f:
                    11:a0:78:67:55:70:b6:4b:d3:6c:cb:d5:d1:0e:26:
                    af:32:23:dd:ae:8d:91:a8:27:5c:a2:3c:3d:a0:64:
                    63:55:32:c3:48:37:99:9b:06:43:0b:9a:4c:3f:25:
                    da:74:c9:80:bc:9d:47:02:8f:28:e4:0b:5b:92:0c:
                    fd:5c:00:32:c6:41:37:67:f8:88:a6:bb:00:2d:e2:
                    27:09:d0:12:c4:b6:2d:cb:57:93:4a:5d:87:da:92:
                    f1:01:f1:94:e2:1d:88:41:d6:b1:0a:4f:31:36:d2:
                    53:39:c4:4c:01:ef:a4:da:ed:92:33:e8:11:63:ac:
                    bc:30:84:2a:72:ab:84:3f:1d:fb:8b:88:4d:9c:94:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:26:21:A0:FF:23:DE:4D:7A:DA:9C:E4:BE:E6:81:98:62:A1:49:8C
            X509v3 Authority Key Identifier:
                keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:b3:ab:1c:e9:06:e7:41:f5:97:d9:c8:0b:44:7d:b3:c7:59:
         c6:f8:db:5a:37:eb:e3:8e:90:fe:98:3c:3e:c4:16:ac:b0:88:
         b1:c2:32:a9:72:b3:3f:12:ff:3a:dc:a8:5b:37:aa:66:cc:34:
         06:40:c6:1a:16:21:b9:f8:24:96:da:f5:94:f3:16:b4:79:be:
         b0:da:90:ef:81:f0:e4:9a:74:96:e6:c2:27:14:47:df:99:2b:
         de:f7:2c:27:13:4a:f6:a9:b9:91:79:6c:d7:d0:8f:0c:e6:00:
         4c:be:e5:3e:dd:f3:29:2f:04:eb:eb:d9:9b:14:d0:ac:4c:ef:
         88:4a:d6:d6:7e:58:66:ff:cf:39:89:44:69:e1:d6:02:3b:61:
         ef:b3:f8:35:70:9b:53:4c:36:35:85:7f:77:7b:bb:27:f5:9e:
         a6:ce:f9:e2:3f:07:14:47:5a:9e:f1:02:0c:5e:42:84:b1:c1:
         9f:d3:b6:c1:a6:21:5c:6a:8b:f0:d7:94:1e:13:5c:51:d1:f7:
         32:dd:9b:cd:f1:0c:14:90:9f:bd:76:fc:4f:8d:87:e2:70:77:
         bf:b6:34:0d:cf:88:4f:5a:52:a7:4b:0c:d4:9b:f9:0e:c6:5c:
         8a:e4:ee:0a:92:28:29:c5:12:b9:90:1e:b9:ff:2c:1a:07:ef:
         68:41:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:22 2024 by rpki-client on console-fra.rpki-client.org