Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa
File:                     3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (raw, json)
Hash identifier:          kRpP0BeJh3DcYk/o0PW91y6EIMDXBtYhIc0dJMopnO0=
Subject key identifier:   3E:14:EE:29:B6:83:C2:96:5A:9D:7F:D2:17:B2:41:1B:55:6C:B0:40
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       300CDBC95C967CC1A4F6AD9A0AC026002FD2CEFA
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa
Signing time:             Thu 04 Apr 2024 03:00:02 +0000
ROA not before:           Thu 04 Apr 2024 02:55:02 +0000
ROA not after:            Thu 03 Apr 2025 03:00:02 +0000
asID:                     131773
IP address blocks:        103.134.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:db:c9:5c:96:7c:c1:a4:f6:ad:9a:0a:c0:26:00:2f:d2:ce:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Apr  4 02:55:02 2024 GMT
            Not After : Apr  3 03:00:02 2025 GMT
        Subject: CN=3E14EE29B683C2965A9D7FD217B2411B556CB040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:15:78:94:cc:ea:03:da:ee:4c:53:71:5d:
                    89:02:f9:dc:4d:ae:76:ba:6b:65:07:26:41:b7:86:
                    fb:d8:3f:66:0f:c3:a1:a5:c9:43:2f:23:10:a7:9f:
                    98:82:a9:ff:58:6d:9e:5b:74:7f:79:e1:5f:2a:9c:
                    0f:71:d1:3e:3c:20:73:87:8f:5d:50:33:d6:cc:27:
                    36:3b:f4:97:a8:95:d2:7e:9c:b1:7e:6d:ac:ac:50:
                    05:55:47:e5:dc:5f:53:60:d5:e7:cd:bd:88:ca:15:
                    90:d1:f5:0d:f4:23:23:d4:98:a7:07:bd:c3:1f:2a:
                    51:39:73:4f:45:b1:7a:52:ca:bd:bc:57:6c:57:0f:
                    2c:cd:51:e0:d6:7a:39:23:a9:29:58:c4:69:b7:0d:
                    66:3f:f3:07:a2:71:81:a7:b0:6a:51:52:c5:ab:fc:
                    65:dd:ee:4d:2f:18:e0:10:71:0d:f8:ae:48:b1:05:
                    3e:c8:57:20:bd:63:4b:c3:36:3f:51:b6:56:c2:79:
                    5b:b8:2d:a1:07:a3:cd:ce:18:c4:b6:a0:ad:86:44:
                    57:56:98:42:40:99:02:7c:b5:68:07:37:27:b6:1c:
                    80:e7:7f:66:22:9a:fc:16:f9:5e:b0:bd:75:b0:99:
                    56:45:b8:c1:d5:fd:ec:5e:d0:d6:af:7b:3d:54:73:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:EE:29:B6:83:C2:96:5A:9D:7F:D2:17:B2:41:1B:55:6C:B0:40
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:94:6f:0d:b4:40:c7:1d:d5:5b:18:ee:20:2a:a7:2d:e6:2b:
         28:fa:ab:65:40:f0:db:2e:e4:ba:06:a5:8a:15:6e:cd:47:57:
         bc:e8:c6:17:60:3b:3b:bc:8a:1d:24:56:c6:76:dc:fb:b6:a5:
         46:0c:3d:4b:6d:0d:9e:9a:c1:be:ce:0d:f7:2e:fa:5b:8d:63:
         ec:e2:d1:20:c9:c6:f9:aa:07:07:90:bc:4f:c3:cf:ee:1f:68:
         b3:f0:d5:42:49:16:13:8a:bb:20:58:e5:a8:01:c0:04:3d:f8:
         30:9e:34:12:35:d8:e5:f6:5a:1b:78:ae:21:58:03:c1:8a:eb:
         c6:32:e7:62:ce:eb:fc:7c:ee:f7:a8:b6:e9:c2:ae:28:eb:7d:
         bf:f0:d1:a2:93:c0:32:64:63:de:c0:ce:7a:57:61:1b:58:03:
         44:7c:b6:21:d7:9c:6f:05:77:6e:7a:ba:e6:13:22:24:73:48:
         12:60:8e:c6:f5:6f:52:7c:70:e5:68:bc:cf:29:af:46:18:d5:
         ac:2a:a8:3e:71:6e:6c:4e:38:42:38:d2:a3:40:8b:0a:3f:d6:
         98:bb:af:9a:ce:76:3e:a0:52:e5:e9:fa:2b:e0:e8:41:3e:93:
         aa:fb:60:9e:bc:15:11:5f:09:ac:37:5c:75:c2:1a:68:af:c4:
         07:2d:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org