Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
File:                     3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (raw, json)
Hash identifier:          PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=
Subject key identifier:   95:CE:E3:5A:31:A2:D4:1C:1B:BF:0B:2F:81:86:00:E7:62:5E:52:FE
Certificate issuer:       /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
Certificate serial:       3C390ACC6935951583F6647F3C51E17D9E54DC48
Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa
Signing time:             Mon 02 Dec 2024 14:27:40 +0000
ROA not before:           Mon 02 Dec 2024 14:22:40 +0000
ROA not after:            Mon 01 Dec 2025 14:27:40 +0000
asID:                     136087
IP address blocks:        103.87.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl
                          rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 19:49:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:0a:cc:69:35:95:15:83:f6:64:7f:3c:51:e1:7d:9e:54:dc:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4
        Validity
            Not Before: Dec  2 14:22:40 2024 GMT
            Not After : Dec  1 14:27:40 2025 GMT
        Subject: CN=95CEE35A31A2D41C1BBF0B2F818600E7625E52FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:42:bc:b1:2e:c5:0b:a4:bd:3a:d9:c5:0f:
                    34:84:44:cb:11:0f:3d:dc:a7:7c:1f:ad:db:32:23:
                    b7:19:22:8b:3f:b1:32:f4:9e:87:95:2d:f9:47:53:
                    bc:d4:b4:8e:81:a3:53:76:83:ab:5a:03:d2:fa:3a:
                    2c:b9:10:29:c3:a3:17:a2:e8:68:f5:21:e8:82:e9:
                    53:65:48:f4:8c:8e:f8:70:fc:82:42:08:fe:8d:3d:
                    49:c4:f5:46:6e:26:f7:9d:d6:1a:cc:66:06:f5:3a:
                    6d:dd:7a:29:7c:76:ea:c9:31:02:63:f7:b4:8f:88:
                    84:16:9e:4c:58:b2:bf:c9:e5:df:3a:7a:1b:8d:af:
                    85:d8:b6:c3:ff:61:38:0a:bd:e9:e3:16:5b:ba:a7:
                    bd:52:c3:29:03:2f:da:60:9f:79:c1:c6:aa:cc:88:
                    c1:6a:5b:38:b4:4d:b2:1c:28:62:33:9d:05:c7:0d:
                    06:6f:6d:6d:50:b4:12:ca:5c:c3:e2:0c:84:8f:2a:
                    5d:64:6b:da:af:20:bc:20:f8:d4:ab:53:37:99:68:
                    4c:2d:1f:69:19:96:da:50:9f:26:1b:f0:4e:7c:0d:
                    de:c6:b9:fe:c9:f9:ec:ec:62:fc:83:26:53:2a:f1:
                    3a:b7:1d:88:25:76:aa:a2:1f:12:08:ae:62:d5:a0:
                    6e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:E3:5A:31:A2:D4:1C:1B:BF:0B:2F:81:86:00:E7:62:5E:52:FE
            X509v3 Authority Key Identifier:
                keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:67:a4:4c:ec:9f:76:34:de:70:a0:60:a7:4e:8b:a1:f4:
         6b:cc:87:07:57:a4:af:7c:e1:0a:92:be:b2:b6:9a:8d:30:a8:
         ee:a9:98:42:77:85:64:e7:04:bc:69:1f:32:a5:d4:57:b9:10:
         a0:03:6d:82:ed:fb:f8:d1:55:5a:c4:1a:d9:61:b9:88:08:e2:
         0c:1d:00:0a:94:1b:f2:da:cf:9d:bb:1d:79:8d:eb:6c:c3:23:
         c3:9e:bc:82:80:81:a7:5f:1b:3f:b4:62:40:e8:1c:7f:d7:40:
         4f:b0:10:80:b8:b5:28:9e:a6:ba:0f:7b:14:ca:c6:93:ca:19:
         ab:a4:5e:00:78:76:e2:e8:58:05:27:dd:15:60:cf:c9:16:55:
         14:36:f0:5a:4a:28:b5:30:68:b5:8e:d4:6e:b9:72:1a:32:a7:
         b9:c8:49:bb:c3:d3:4e:67:dd:b2:26:af:0a:16:42:7e:77:41:
         4a:9d:44:8f:57:6c:d0:33:23:36:2a:31:d2:a7:85:18:5b:57:
         30:4b:1f:ca:d7:78:e8:54:69:b3:fe:31:8a:e7:0d:c9:f3:94:
         70:55:3e:01:78:5e:87:e6:03:0a:4f:a4:bf:33:da:d2:c7:db:
         de:bf:a2:f6:44:2a:b1:34:a4:90:7a:23:22:f1:a5:6e:40:f9:
         61:8e:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:14 2025 by rpki-client