Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          VsbfJ5LamH1LZgTZlkqTfKKnrHD6JMniVjqMc/sQ0Wk=
Subject key identifier:   33:5D:64:EA:E2:B8:07:A6:19:62:3A:35:E0:21:9A:97:97:37:26:D3
Certificate issuer:       /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A
Certificate serial:       643B4A4BC5FF628BD70D9D66A0619B59D567ADB6
Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 15 May 2024 06:02:04 +0000
ROA not before:           Wed 15 May 2024 05:57:04 +0000
ROA not after:            Wed 14 May 2025 06:02:04 +0000
asID:                     38320
IP address blocks:        103.135.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl
                          rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:4a:4b:c5:ff:62:8b:d7:0d:9d:66:a0:61:9b:59:d5:67:ad:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A
        Validity
            Not Before: May 15 05:57:04 2024 GMT
            Not After : May 14 06:02:04 2025 GMT
        Subject: CN=335D64EAE2B807A619623A35E0219A97973726D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:b8:91:e4:29:c9:13:77:04:09:c6:19:bb:
                    6e:1d:0f:34:4b:c4:70:66:5d:21:7c:69:b6:92:a2:
                    ff:9b:a8:f7:79:5e:78:83:9b:aa:b6:d4:c9:14:c2:
                    f8:b6:9c:90:33:fa:cd:43:e1:70:93:0d:90:87:cb:
                    12:ac:98:c5:72:f5:d1:d8:54:82:b0:70:de:3b:5b:
                    db:e9:55:38:a7:eb:d7:5d:42:f3:e2:51:b1:77:ce:
                    1f:74:c4:2f:7c:a7:ee:54:15:03:61:47:89:9d:69:
                    04:70:d9:97:83:0f:ad:14:a8:d3:cb:0f:33:db:0c:
                    cd:03:9b:05:24:1b:b5:00:72:6f:2c:a6:ee:84:66:
                    d8:ec:f9:60:5e:0d:da:24:ad:46:e6:99:fd:45:3a:
                    c9:94:d9:81:5c:2b:dc:83:62:50:30:19:02:fe:90:
                    f2:14:1e:7d:9a:ef:bf:cb:1e:aa:77:d4:50:60:85:
                    c9:e1:bd:ec:ac:ec:ae:e9:00:74:18:9b:da:51:dd:
                    9b:fa:d0:1a:ae:8f:8e:5c:ce:8e:89:1f:6c:14:c2:
                    0b:68:d6:49:76:a4:af:f7:3e:ec:0f:1f:32:0f:39:
                    a9:a3:8b:af:23:c7:5e:1b:90:f5:6a:62:40:0d:69:
                    63:8b:8b:7d:0d:0a:93:a2:b6:d7:69:4c:cb:51:42:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5D:64:EA:E2:B8:07:A6:19:62:3A:35:E0:21:9A:97:97:37:26:D3
            X509v3 Authority Key Identifier:
                keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/3130332e3133352e34382e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:a4:9c:cd:6c:45:62:b7:b0:b7:06:28:a4:5a:81:34:b2:94:
         db:2a:f9:fb:bc:a9:80:d9:e6:ca:ad:aa:ed:72:0f:fb:04:84:
         41:12:81:2e:bd:a8:73:c0:79:00:39:fc:f2:ea:f6:61:e8:20:
         01:d2:4d:36:14:e9:2f:73:4f:96:05:df:95:d0:f7:47:28:cb:
         86:5b:33:7f:b2:7d:b1:b8:7c:8e:8f:2e:26:37:59:7a:69:f8:
         0e:a6:0f:2d:1e:02:e6:9f:c1:25:05:cf:eb:33:62:85:a0:c3:
         8e:97:34:9e:d4:9b:cb:e0:2d:29:07:78:ac:97:57:ef:76:7a:
         fa:44:85:64:c4:e2:49:2f:38:71:d3:6f:7b:59:d6:06:cb:7a:
         39:c7:eb:70:3f:18:34:77:fe:7f:31:35:f6:3f:b4:c5:8e:94:
         b1:1b:5e:19:80:b1:b9:05:5f:ec:a7:3a:a4:be:b6:fd:0f:d1:
         0c:4b:17:0e:18:fc:f8:25:65:89:dd:d2:1c:0d:78:bb:90:c1:
         a3:2d:82:b6:04:02:7f:a8:6f:a7:55:35:5e:6d:92:9d:b6:36:
         de:56:03:a3:41:86:df:8a:be:76:15:87:37:a9:f6:56:5b:70:
         1e:f3:d8:25:c2:7b:81:07:98:4f:85:bb:5f:ba:96:dd:96:8c:
         f6:26:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:25 2024 by rpki-client on console-ams.rpki-client.org