Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
File:                     3130332e382e35362e302f32322d3234203d3e203435373037.roa (raw, json)
Hash identifier:          e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=
Subject key identifier:   54:26:B3:16:DD:1F:8D:05:5C:A6:56:CC:8D:2A:CD:36:FD:E2:C3:08
Certificate issuer:       /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
Certificate serial:       59A970330078006B50CC9BEE340607C833ADD5D1
Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa
Signing time:             Fri 27 Dec 2024 08:00:01 +0000
ROA not before:           Fri 27 Dec 2024 07:55:01 +0000
ROA not after:            Fri 26 Dec 2025 08:00:01 +0000
asID:                     45707
IP address blocks:        103.8.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl
                          rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 00:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a9:70:33:00:78:00:6b:50:cc:9b:ee:34:06:07:c8:33:ad:d5:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB
        Validity
            Not Before: Dec 27 07:55:01 2024 GMT
            Not After : Dec 26 08:00:01 2025 GMT
        Subject: CN=5426B316DD1F8D055CA656CC8D2ACD36FDE2C308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:65:04:b6:e3:9e:63:e0:91:77:99:fa:7f:b7:
                    5c:5a:ce:7a:a4:ad:ad:d0:f9:a9:e0:f8:77:d8:df:
                    93:5b:ab:98:b9:93:e8:92:be:2f:cb:4e:47:75:39:
                    9f:f6:f7:f4:32:48:6e:07:3d:d2:3c:ab:9d:13:6c:
                    55:49:b9:82:78:49:f4:8d:67:d8:18:a6:97:ee:95:
                    db:c6:e0:cd:e6:d6:8a:3b:31:38:ce:23:58:28:1f:
                    3f:99:93:df:d8:bc:e7:58:e2:81:e9:8f:71:ee:32:
                    a3:5f:45:85:5a:49:81:cf:78:78:6e:10:47:15:82:
                    4d:c2:23:99:95:34:50:0d:bb:c9:90:9d:dd:e1:7b:
                    91:7b:0b:41:6e:e3:ef:87:f0:f2:b9:db:bc:46:c9:
                    b1:c5:68:a7:90:8b:0c:d5:21:df:3f:c7:b4:29:f3:
                    1f:6f:51:37:b3:df:10:b3:e4:5f:6b:30:d3:6f:9d:
                    72:17:0e:e2:c6:df:2b:5c:0f:e1:42:10:92:74:44:
                    42:b8:10:71:49:2f:71:b2:49:f0:e0:5b:2a:d0:d5:
                    a8:ec:5b:94:c6:5b:b4:18:be:5b:a4:53:c6:82:6a:
                    08:51:ce:25:15:8a:0a:ad:1a:ae:94:e0:fb:be:16:
                    6c:54:ac:bc:eb:8b:07:ef:53:cb:bb:d7:24:af:c5:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:B3:16:DD:1F:8D:05:5C:A6:56:CC:8D:2A:CD:36:FD:E2:C3:08
            X509v3 Authority Key Identifier:
                keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/3130332e382e35362e302f32322d3234203d3e203435373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.8.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:ab:8f:18:15:ca:31:79:85:90:91:60:1d:ba:4b:a7:f7:e4:
         5d:4b:c7:32:68:00:4d:03:e4:d5:ce:b8:a0:1a:58:81:79:94:
         3a:19:00:18:ed:b9:2b:1a:df:f8:ac:b6:8b:7e:49:62:58:c2:
         37:d9:b9:c0:34:2d:e4:f2:7a:b2:c6:ca:ca:d9:b6:44:d9:e3:
         12:2b:7e:03:c9:60:69:c8:ab:15:c1:0e:3c:cc:3b:cc:47:3d:
         72:40:25:43:bc:50:d1:ac:50:73:1f:54:0a:13:b2:11:99:8b:
         9f:a6:17:72:77:3d:f9:2b:4e:4d:f7:1d:18:86:90:82:2f:ca:
         58:7c:67:7c:24:d4:0c:31:6b:63:11:9e:5a:41:69:41:38:a2:
         14:bb:b8:2a:d0:fa:f3:73:3d:69:64:e2:9f:6f:4d:e6:d7:f2:
         40:ea:06:ef:0a:b9:b0:02:0d:db:61:f0:41:0f:bb:a2:ec:5e:
         22:c0:52:e3:97:a1:25:2c:d1:56:b9:d0:d0:19:59:c2:23:65:
         6e:02:3a:db:0f:75:d2:56:a3:15:1f:43:09:24:01:a5:f9:8a:
         87:69:e0:87:00:83:48:33:06:da:a4:5a:9f:83:ec:41:e7:82:
         48:9d:ea:f0:97:9f:b1:47:5d:62:3b:4c:f7:82:7e:2d:be:be:
         6b:9d:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:41 2025 by rpki-client