Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa
File:                     3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa (raw, json)
Hash identifier:          blvhC5mu+XJhjfitpMdYcO0PTVbYBI2WHhZRJy/oOBc=
Subject key identifier:   7E:F8:57:79:8F:E0:C6:C0:69:B5:27:16:26:12:77:39:0C:F1:00:85
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       734E829AAD7C04A3122D24BE552F5AAA7C978BE8
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa
Signing time:             Thu 08 Aug 2024 04:00:02 +0000
ROA not before:           Thu 08 Aug 2024 03:55:02 +0000
ROA not after:            Thu 07 Aug 2025 04:00:02 +0000
asID:                     133827
IP address blocks:        103.55.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4e:82:9a:ad:7c:04:a3:12:2d:24:be:55:2f:5a:aa:7c:97:8b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Aug  8 03:55:02 2024 GMT
            Not After : Aug  7 04:00:02 2025 GMT
        Subject: CN=7EF857798FE0C6C069B52716261277390CF10085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:f2:56:0c:a0:e0:ea:8c:84:4a:8a:24:0d:
                    c4:32:c4:e6:b9:f9:4f:0e:0f:e9:b1:2a:a5:92:ec:
                    62:8c:b6:27:df:bd:d1:2f:b0:0d:e6:a4:55:c0:5d:
                    6c:11:e9:11:c4:31:b4:91:80:d8:b6:9f:b6:7a:cf:
                    bc:84:a9:62:8a:8f:08:3b:22:a6:15:57:37:67:87:
                    7a:90:98:33:42:1d:0a:c8:49:fd:c6:dc:35:91:11:
                    93:f2:ba:65:31:92:8e:89:eb:67:95:37:b3:28:de:
                    5a:0c:31:d0:e1:ba:5e:1f:a8:b5:d5:4c:a2:45:c3:
                    41:86:df:b0:26:00:ea:fc:81:47:92:a0:b3:d7:41:
                    eb:cc:2f:9d:4d:3d:c5:22:07:45:e8:98:81:53:ef:
                    ce:33:10:3c:a1:ed:8b:63:a1:c9:e7:d1:9d:dd:71:
                    6a:58:8a:e5:fb:e0:08:65:0e:cc:c2:b4:18:49:b8:
                    76:63:f7:ea:4d:70:88:0c:af:c2:19:fa:7b:a3:23:
                    ca:99:20:e3:c8:c0:4f:ca:fc:1a:63:f6:d7:d5:15:
                    45:15:4a:2f:13:9a:db:68:79:54:f5:0e:12:38:c4:
                    70:2a:e8:35:59:a8:9e:56:ba:a1:07:1a:37:bb:e6:
                    5e:eb:de:34:be:7c:1e:c5:98:c5:73:ab:8a:aa:01:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:57:79:8F:E0:C6:C0:69:B5:27:16:26:12:77:39:0C:F1:00:85
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e35352e3133392e302f32342d3234203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:df:a6:b5:c9:48:1f:02:f8:97:d7:5b:03:bf:d7:3e:e5:7c:
         3c:21:0a:3c:17:5c:62:60:5f:9e:70:ad:cd:37:b0:b2:a9:ab:
         b5:be:30:fb:dc:3f:3d:f9:60:fe:8e:37:b5:01:34:04:b7:41:
         02:f7:69:a4:15:06:30:b5:96:ab:a4:17:c3:ef:1f:06:52:f7:
         88:1e:63:06:c0:e1:44:d3:3d:e9:bb:32:b8:3e:4b:30:41:ac:
         6e:fe:6a:75:e4:79:b9:6d:ef:39:54:1b:b7:3c:3e:77:8e:47:
         91:67:50:f8:05:bb:57:c1:ca:5f:f3:e4:d5:22:e9:03:b9:42:
         26:11:d5:db:59:80:52:67:a1:08:e4:b2:5f:8d:ad:06:ca:04:
         88:f9:43:bf:ea:57:18:a6:6b:45:7c:dc:3d:72:05:f1:b3:89:
         be:8b:9a:89:d5:22:f6:4f:bc:9a:b3:41:ae:1f:17:7e:50:d9:
         6f:a6:2b:e5:44:23:c5:af:1d:c5:37:fb:8c:8a:51:da:4b:03:
         d6:3a:80:1f:7e:2c:0d:1b:10:25:a0:82:e1:16:5a:5c:ad:07:
         86:1c:06:0f:fa:16:84:b6:42:f6:fa:21:5f:d3:13:25:90:e7:
         4f:e3:a6:e0:07:dc:ad:48:68:27:79:67:06:50:4e:d6:10:4d:
         de:6d:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org