Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa
File:                     3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          Jdxi2ld+DrcEuncfblvPGye54qLDFL//BHCw7NiVlyE=
Subject key identifier:   5E:18:E4:97:D4:9A:70:15:4C:F9:09:AB:A6:0E:8D:BA:F0:26:2A:1D
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       7D5BFF08EDB217410F19C86986144772576CDA4D
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa
Signing time:             Tue 13 Aug 2024 15:00:00 +0000
ROA not before:           Tue 13 Aug 2024 14:55:00 +0000
ROA not after:            Tue 12 Aug 2025 15:00:00 +0000
asID:                     136874
IP address blocks:        103.105.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 17:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5b:ff:08:ed:b2:17:41:0f:19:c8:69:86:14:47:72:57:6c:da:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Aug 13 14:55:00 2024 GMT
            Not After : Aug 12 15:00:00 2025 GMT
        Subject: CN=5E18E497D49A70154CF909ABA60E8DBAF0262A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e2:97:3d:3f:4d:a1:11:dc:99:34:e9:17:b6:
                    d4:1c:c6:23:23:f5:6e:03:d5:76:30:41:bc:08:ff:
                    da:67:c4:a6:92:15:17:ec:f1:4f:7a:13:2e:6f:5e:
                    20:70:c8:cc:ee:04:1a:5c:64:4e:b0:43:9e:f2:01:
                    5e:70:31:27:a2:2c:97:5d:0e:fb:39:ce:f2:f4:ba:
                    1f:de:a5:b0:ae:64:7c:ba:ab:67:68:43:17:f9:e3:
                    c9:a5:b6:57:88:4f:b0:8f:ea:ae:6f:8a:b1:03:7c:
                    a1:12:3f:d6:04:02:ef:77:aa:0a:56:b3:b3:9b:de:
                    cf:b2:b5:3e:6c:62:39:5e:cb:7c:6a:dc:9a:a1:42:
                    0d:f2:3f:e8:a9:9a:22:bd:ae:d6:74:e2:28:d7:c6:
                    44:f8:a5:e8:a3:5a:51:bc:0a:6d:b9:4c:64:48:c3:
                    b1:e0:2a:53:8b:04:f1:57:e6:f4:f2:13:12:fc:0f:
                    35:c4:0a:74:c8:88:08:51:0f:3d:72:a3:9e:bb:29:
                    09:12:96:cb:99:27:0d:73:85:de:53:ee:fa:04:64:
                    cd:0c:9f:c3:ed:36:fe:d5:8e:00:10:44:26:58:7c:
                    01:b0:4e:7e:86:09:0b:46:71:ca:64:df:bb:eb:93:
                    21:02:a3:9c:5f:4d:3f:09:aa:89:12:95:76:fe:3e:
                    8c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:18:E4:97:D4:9A:70:15:4C:F9:09:AB:A6:0E:8D:BA:F0:26:2A:1D
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:d7:12:c7:01:08:01:a6:d5:74:2b:64:1e:14:75:84:b2:bc:
         4f:2d:57:3b:83:27:54:19:08:78:a0:3d:8d:d1:44:03:ca:62:
         ad:e1:16:27:81:35:ac:18:6c:04:7c:73:a4:4b:19:46:a6:14:
         b0:21:9e:81:ce:61:05:4a:52:a6:1b:2f:dd:c3:c1:5d:56:fc:
         94:f6:03:91:8a:85:00:2d:b7:77:6b:f4:57:f4:f6:72:d0:48:
         de:8a:de:7e:8e:e5:cc:a5:80:a9:e7:3e:78:2c:6f:12:39:b8:
         d9:66:c6:4d:e5:c1:a1:25:d3:c7:ee:04:b7:1d:74:4d:3a:b2:
         b6:51:a4:1b:18:4f:b0:13:86:7c:71:9b:04:17:35:04:8c:c3:
         34:0d:8a:90:60:2c:22:bc:9b:72:7f:48:2a:60:16:ab:51:a5:
         9e:10:e4:bc:a3:53:6d:ff:9c:47:9d:fc:f3:bb:9d:a6:1c:3b:
         6b:11:06:ef:1b:11:df:03:6f:6d:06:12:80:a7:b7:16:7f:f8:
         dd:5f:4e:5f:c6:c4:d0:3f:92:f5:f5:1a:b6:0d:ae:fb:d7:66:
         3c:1c:1e:2a:f5:cb:83:8f:6e:e3:c5:66:2c:60:af:7e:11:c6:
         29:5f:ba:1d:9a:2a:87:90:86:a1:fe:48:10:29:bb:5a:39:76:
         25:c8:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:12:25 2025 by rpki-client