Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
File:                     3130332e39352e372e302f32342d3234203d3e20313333383237.roa (raw, json)
Hash identifier:          2278ZJ1gGMvFP2g/vEd5/wEl+LVW1rbxi3M1w9tcyIU=
Subject key identifier:   05:73:AA:96:40:BF:DA:57:1A:E9:6B:47:47:45:31:57:C6:C4:F5:3F
Certificate issuer:       /CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
Certificate serial:       39CFB1207D4707492A3BFCED8AFCEF248E0A8AB4
Authority key identifier: 0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa
Signing time:             Thu 08 Aug 2024 04:00:02 +0000
ROA not before:           Thu 08 Aug 2024 03:55:02 +0000
ROA not after:            Thu 07 Aug 2025 04:00:02 +0000
asID:                     133827
IP address blocks:        103.95.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl
                          rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:17:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:cf:b1:20:7d:47:07:49:2a:3b:fc:ed:8a:fc:ef:24:8e:0a:8a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE6A79D53D829F2A55623676E8D2A9A569F836F
        Validity
            Not Before: Aug  8 03:55:02 2024 GMT
            Not After : Aug  7 04:00:02 2025 GMT
        Subject: CN=0573AA9640BFDA571AE96B4747453157C6C4F53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:85:1a:29:bf:87:ca:dc:cb:71:1a:c2:7f:
                    98:00:e7:5c:bb:96:4c:ea:a1:d0:66:58:dd:7e:e5:
                    74:7a:c5:9e:ba:2a:72:7e:fb:ff:f4:92:fd:25:3f:
                    8b:6c:6c:9d:99:ff:f6:c7:d1:7a:ce:36:7e:13:90:
                    30:df:b8:6a:40:1a:00:76:86:e0:bb:12:00:29:54:
                    7a:23:a6:0d:a1:b5:ce:38:74:9a:5f:0f:35:92:59:
                    b9:79:26:28:b5:2e:7a:65:3f:55:6b:2b:df:6c:3f:
                    3a:e3:17:c4:dc:94:72:73:17:35:aa:6a:3a:f2:55:
                    bb:ab:fd:c2:ee:b0:ad:0c:e5:d2:e5:b6:e4:03:c1:
                    a4:49:8f:71:4d:19:06:b2:02:60:6f:ff:8f:96:1c:
                    7e:08:18:30:c1:e7:d9:57:74:ea:18:ff:aa:fb:84:
                    c0:4b:70:a9:88:17:8d:99:74:a0:81:f3:bb:5f:4c:
                    0c:27:c4:66:42:35:03:cf:fc:20:42:f4:be:74:e0:
                    44:4e:b2:c2:1c:6e:23:de:91:0a:1c:ce:68:ff:3e:
                    a7:92:0f:f8:88:37:cf:f7:e1:2b:09:8d:58:23:a7:
                    04:40:7a:c6:fd:97:92:bd:8a:2f:a5:41:92:33:1f:
                    54:98:ae:50:51:75:24:dd:58:74:a4:46:24:56:34:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:73:AA:96:40:BF:DA:57:1A:E9:6B:47:47:45:31:57:C6:C4:F5:3F
            X509v3 Authority Key Identifier:
                keyid:0C:E6:A7:9D:53:D8:29:F2:A5:56:23:67:6E:8D:2A:9A:56:9F:83:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/0CE6A79D53D829F2A55623676E8D2A9A569F836F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE6A79D53D829F2A55623676E8D2A9A569F836F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e372e302f32342d3234203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:70:14:56:0d:72:55:14:39:71:25:6a:74:22:91:c3:77:
         28:df:85:c6:c6:89:3f:4b:b1:7a:ae:ac:47:1d:d7:81:94:1d:
         16:bc:3e:17:55:30:35:e1:6c:8a:13:d8:19:d6:4f:8a:fa:04:
         c7:89:f6:d8:78:08:51:55:3b:08:b1:f1:f9:2a:3d:3f:0f:fe:
         8f:da:5a:3f:06:da:20:51:22:e1:be:e9:7b:20:4d:c9:8c:b2:
         b3:49:6b:5e:07:56:4e:6e:da:c5:09:20:4c:80:a0:7c:7a:c3:
         b4:a3:f6:96:50:2d:4b:3f:8c:78:0a:ee:0a:ea:b8:37:be:83:
         52:47:8a:69:7a:fc:af:31:0f:a1:3e:14:cc:9b:c5:34:2b:05:
         6b:63:b7:94:4e:fa:ec:f2:2d:f5:18:4c:df:f8:73:39:da:0a:
         e4:8b:1b:8c:61:e9:1d:d5:95:28:b0:80:41:f7:c4:f6:33:04:
         fb:6b:65:59:f4:1e:3d:b0:83:10:76:55:65:d9:38:a6:ac:64:
         52:e6:af:f9:35:af:29:f4:11:15:d3:42:0d:7d:ed:46:93:db:
         76:96:12:c0:4d:f9:54:e5:42:47:b4:2c:9c:6e:ff:d0:97:29:
         34:50:a9:de:26:08:3e:eb:26:bf:db:00:e4:dc:dd:f6:e0:f7:
         eb:61:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org