Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa
File:                     3130332e3134302e33352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          Yd01J5hPcZQ8iNNroa+Nv/YFeQyu4ZExz0qlMlvbB+U=
Subject key identifier:   E1:17:1D:68:16:99:3D:ED:5F:E7:09:96:9D:A4:40:64:39:19:39:AB
Certificate issuer:       /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial:       65671563BE325BFA2A6B593F6C3F078732F2FD0A
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:30 +0000
ROA not before:           Mon 01 Jul 2024 00:59:30 +0000
ROA not after:            Mon 30 Jun 2025 01:04:30 +0000
asID:                     58369
IP address blocks:        103.140.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
                          rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:67:15:63:be:32:5b:fa:2a:6b:59:3f:6c:3f:07:87:32:f2:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
        Validity
            Not Before: Jul  1 00:59:30 2024 GMT
            Not After : Jun 30 01:04:30 2025 GMT
        Subject: CN=E1171D6816993DED5FE709969DA44064391939AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:49:06:21:a4:0a:90:56:b4:e9:79:99:52:
                    3a:72:c8:bb:0d:94:e3:e7:44:70:0f:0d:96:1c:f9:
                    69:8c:6a:75:aa:d2:21:d4:ca:19:43:9f:98:db:3b:
                    3b:01:41:5b:d3:5c:56:96:02:0e:b5:2a:b6:77:91:
                    12:9a:93:64:f8:ff:97:f8:6d:eb:2b:33:0c:a3:81:
                    f7:b0:74:71:fc:f1:27:3b:59:d1:da:d3:e9:76:c3:
                    0f:42:a2:8d:de:75:dd:a6:d7:ff:94:7a:16:af:9c:
                    bb:58:c6:51:1d:c6:5e:13:02:e0:21:0c:cc:58:c5:
                    93:82:1c:0b:0b:9b:f0:a1:57:35:58:cc:be:b6:03:
                    23:97:2d:32:8d:12:0e:d7:9e:88:b9:24:bd:38:7e:
                    24:75:80:3f:2c:ff:84:39:aa:ac:2f:3e:2c:7b:a1:
                    a7:0d:05:48:c9:5f:4b:a9:31:6d:65:44:16:c8:5c:
                    75:66:70:20:94:5d:cb:bf:57:0b:66:4f:89:aa:e5:
                    1b:2f:05:c5:45:31:c0:98:f2:be:b3:39:f1:8e:09:
                    33:4d:fb:16:73:53:8a:d6:c7:f1:52:a4:8f:eb:65:
                    e4:67:fa:93:65:e7:87:03:1e:d7:4f:ce:33:cd:a3:
                    dd:13:9f:10:93:e4:54:a4:95:fe:92:9b:c7:f4:b3:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:17:1D:68:16:99:3D:ED:5F:E7:09:96:9D:A4:40:64:39:19:39:AB
            X509v3 Authority Key Identifier:
                keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:8c:53:43:1e:44:80:18:a2:ba:04:52:0a:ff:b5:b6:8a:
         af:a5:12:72:8e:28:9b:9b:fd:8b:53:1f:77:7d:d2:85:ee:de:
         b2:76:45:b1:31:29:e9:c1:e8:63:91:b5:89:0e:3a:45:44:e0:
         ba:72:fa:97:6d:8e:67:3c:41:fe:46:f0:18:60:15:0a:74:be:
         2c:34:a8:44:54:5f:a3:26:e8:32:07:4e:4d:8f:92:3f:82:0d:
         47:70:99:31:e9:1b:1b:4a:d7:05:3f:01:2b:4b:d3:d4:01:44:
         d4:b3:ce:6e:3d:0e:9b:29:3b:73:02:bd:f5:06:8f:ae:55:da:
         96:cb:72:41:c3:8f:94:0b:bc:56:12:69:ec:4e:93:1b:da:45:
         b6:25:41:86:f8:31:48:9d:80:d6:d0:fd:d5:e2:a5:ae:f2:3c:
         27:a3:b7:4e:55:18:bb:db:77:9f:33:9f:10:71:a0:3c:45:a3:
         97:d1:81:a7:23:32:fb:c2:94:59:6a:2e:c0:60:b3:41:93:8e:
         97:3a:2c:49:3c:02:0d:6a:74:93:26:6a:0d:d3:45:2e:c8:b5:
         f5:e8:c4:aa:64:81:1f:c3:f1:33:8b:4f:58:c7:4b:21:c6:9f:
         bd:8b:00:83:2d:38:56:c5:9f:f1:78:11:37:12:a5:c6:a8:65:
         81:30:76:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org