Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa
File:                     3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (raw, json)
Hash identifier:          89NaN2Qid0Bn8uAEHeLf2je8c86Fr/P9bXEvZ/Ka6sU=
Subject key identifier:   BE:B3:F9:9E:86:5E:AB:42:A7:C9:28:50:70:6A:D5:05:C8:8E:17:62
Certificate issuer:       /CN=37EECBD045CA279ED50372AC86831099D2FD896F
Certificate serial:       1E98A020A831ABE19E4C5C85E3203E378E5A1B22
Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa
Signing time:             Thu 04 Apr 2024 09:00:02 +0000
ROA not before:           Thu 04 Apr 2024 08:55:02 +0000
ROA not after:            Thu 03 Apr 2025 09:00:02 +0000
asID:                     131773
IP address blocks:        103.134.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl
                          rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:98:a0:20:a8:31:ab:e1:9e:4c:5c:85:e3:20:3e:37:8e:5a:1b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F
        Validity
            Not Before: Apr  4 08:55:02 2024 GMT
            Not After : Apr  3 09:00:02 2025 GMT
        Subject: CN=BEB3F99E865EAB42A7C92850706AD505C88E1762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:54:5d:28:f7:6f:2d:bc:c8:12:f4:a5:30:
                    f9:c9:bc:32:9f:1d:4c:c1:53:88:48:52:29:6b:aa:
                    a0:ea:7e:8e:cc:57:61:fe:c6:09:4a:f8:28:7f:ea:
                    c7:8d:de:c4:82:df:14:fb:81:1b:a4:d8:b1:62:0d:
                    a4:fb:e5:28:0d:6c:63:1f:17:9a:a7:30:d5:60:47:
                    f2:3f:b2:a6:b1:fa:69:b6:ce:5d:9a:f4:a8:6c:fb:
                    c0:77:ea:ea:ff:05:7a:e6:17:63:76:52:fa:c3:86:
                    4e:93:c3:0c:64:5a:92:df:79:63:8c:90:b4:2b:c0:
                    fb:bd:fd:9c:b9:c0:1e:27:96:c2:1c:0d:a7:a8:b1:
                    48:c4:32:67:4d:77:28:44:d5:6f:b2:45:ac:ea:ae:
                    07:d6:1d:cf:88:cc:d1:bb:73:80:e0:88:0c:dd:e6:
                    12:7a:4b:61:05:c4:bc:6b:1a:60:01:53:bb:25:18:
                    7d:c0:18:8d:e3:38:b5:fc:b1:97:ed:45:ae:42:4a:
                    d5:d6:c0:d5:89:ab:ec:74:76:73:92:5e:57:dc:8d:
                    10:dc:0e:fa:72:1c:be:93:54:05:5f:f6:d8:32:fb:
                    7c:9f:a7:3c:5a:74:49:f0:d4:a0:26:9c:51:20:28:
                    00:49:df:a0:f0:68:86:b0:c4:29:d3:26:07:c0:83:
                    bb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B3:F9:9E:86:5E:AB:42:A7:C9:28:50:70:6A:D5:05:C8:8E:17:62
            X509v3 Authority Key Identifier:
                keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f7:10:3b:41:ed:57:8e:eb:f7:1f:ff:73:d1:2b:2f:c8:72:
         65:5b:05:74:f7:2f:c7:6c:0a:6d:41:df:35:2d:fb:68:89:f7:
         42:98:46:83:5a:66:ce:1f:e1:9f:d1:94:2c:e4:60:a8:94:1c:
         cd:b5:1c:eb:0e:15:f4:cc:7c:43:2e:f6:52:44:12:9e:35:a1:
         16:3d:10:b2:a5:1f:c5:2b:28:49:8a:1c:89:fa:0c:81:77:85:
         cd:ff:cd:6d:5b:23:0d:3c:d8:4a:30:95:1e:ae:a0:ea:72:60:
         43:d9:b9:f9:4f:1c:a9:f9:ca:6e:55:bf:22:8a:ae:e5:13:ff:
         80:25:23:3e:dd:19:96:4a:be:5a:63:b0:3f:bf:b8:99:8a:61:
         25:bc:4f:81:ed:6c:80:f3:ca:27:57:78:64:82:3b:ae:09:6f:
         22:5b:7e:22:c8:3e:e6:38:88:d1:ab:66:7b:7e:54:9a:54:4f:
         7e:f2:6c:a0:25:29:12:3c:21:78:06:2b:10:7d:a0:94:51:a9:
         da:6b:0e:68:3a:89:04:ce:a3:17:fb:98:c4:bf:77:6d:0a:aa:
         6d:20:e9:35:00:91:bb:5d:a3:e2:a5:29:52:d4:f4:1c:9e:79:
         65:b3:29:07:4a:12:8d:ab:1b:17:5d:d7:2e:9f:20:d9:18:c5:
         59:7b:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org