Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa
File:                     3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa (raw, json)
Hash identifier:          uWPrpCb0k5EiJaHgU3mG4U+ak1Nlnfzs1/52QmaMMlw=
Subject key identifier:   FD:FF:78:61:80:06:1A:CE:27:BE:C3:B7:70:A0:02:A3:B4:DB:07:AA
Certificate issuer:       /CN=35B589224D641562D0CFE2019F733A965FC8E0C7
Certificate serial:       24380DB23F4768C329921EDCF7340BA3FA71E29E
Authority key identifier: 35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa
Signing time:             Fri 26 Apr 2024 11:00:00 +0000
ROA not before:           Fri 26 Apr 2024 10:55:00 +0000
ROA not after:            Fri 25 Apr 2025 11:00:00 +0000
asID:                     147087
IP address blocks:        103.69.106.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl
                          rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:38:0d:b2:3f:47:68:c3:29:92:1e:dc:f7:34:0b:a3:fa:71:e2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35B589224D641562D0CFE2019F733A965FC8E0C7
        Validity
            Not Before: Apr 26 10:55:00 2024 GMT
            Not After : Apr 25 11:00:00 2025 GMT
        Subject: CN=FDFF786180061ACE27BEC3B770A002A3B4DB07AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:3b:64:f9:ad:8c:4f:c9:ac:92:9d:98:94:
                    f0:a2:0c:8b:0e:c6:1d:86:41:9e:ff:5b:48:cc:a7:
                    af:f3:64:ba:a4:ca:b9:67:e3:1a:24:76:8f:d9:ae:
                    0b:e5:6b:75:6d:c1:0d:06:48:7d:56:40:3a:96:70:
                    5f:44:5d:1f:05:cb:c9:d5:63:fc:8d:bc:9b:cf:ed:
                    f4:9d:99:59:e1:93:d9:3c:a5:2f:a3:91:64:d3:ca:
                    94:aa:ad:45:8f:ac:ed:17:00:4e:84:09:6e:9e:aa:
                    f6:d3:f3:fa:e8:e4:40:42:94:63:86:66:4e:04:e5:
                    a7:ed:6c:da:11:c7:2e:d3:7d:b8:68:6b:fc:70:0f:
                    ff:34:c9:47:57:fa:45:22:a9:9f:69:9e:ff:8d:92:
                    b1:93:c5:90:9d:7f:9f:20:40:af:4e:b8:b8:32:59:
                    ea:08:22:24:bd:82:f8:2b:dd:94:8a:e8:eb:db:6e:
                    fd:a9:96:d7:24:7e:ef:8f:62:a6:46:4d:29:6b:ca:
                    83:c2:44:43:50:2c:f4:d4:65:13:79:cb:33:2a:79:
                    c3:af:b3:31:75:37:ef:92:b5:a6:b6:a5:c7:03:2f:
                    f8:1f:fa:1c:cc:15:65:1f:f7:b9:c2:b8:de:e4:2f:
                    4f:61:c5:6d:7d:c6:4a:62:6f:0f:98:65:ed:4b:0e:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FF:78:61:80:06:1A:CE:27:BE:C3:B7:70:A0:02:A3:B4:DB:07:AA
            X509v3 Authority Key Identifier:
                keyid:35:B5:89:22:4D:64:15:62:D0:CF:E2:01:9F:73:3A:96:5F:C8:E0:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/35B589224D641562D0CFE2019F733A965FC8E0C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35B589224D641562D0CFE2019F733A965FC8E0C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ae2ebde-6311-488a-82b7-9d4c05530987/0/3130332e36392e3130362e302f32332d3233203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:09:04:4f:74:83:3a:e1:6f:c0:4d:08:da:2e:08:ee:11:a9:
         88:e9:44:ba:0f:4e:fb:58:72:f3:c0:e4:5b:b3:e3:3d:42:4a:
         08:15:3c:e6:00:85:38:cd:9d:84:f3:b3:d1:35:2f:f6:f9:27:
         6f:71:4b:1e:b7:d4:c5:c5:c1:f0:e2:ce:34:46:85:00:f6:35:
         78:9e:21:ea:7b:40:dd:80:f5:92:9f:7a:8f:77:76:88:4c:8f:
         a5:fa:5a:f2:77:c7:e0:ac:f1:00:64:51:0c:eb:d6:f7:b9:98:
         5a:4c:15:e4:fb:42:80:62:05:b8:98:be:33:d2:38:75:e2:b5:
         04:05:09:a8:7e:c5:1d:8d:ed:da:15:7a:7b:87:9b:7d:a4:a3:
         cb:2d:7d:c3:64:0c:23:67:3c:19:d8:cd:0b:3f:4d:2e:fe:05:
         cf:1d:9e:06:6b:4f:4f:d6:87:18:d4:61:f3:fb:38:27:cc:66:
         de:05:db:7c:01:35:4f:e8:7f:8e:24:2b:38:dd:d8:aa:cd:0e:
         41:f4:dd:d0:60:f9:e0:b2:db:3e:f6:b3:73:37:bc:8a:88:62:
         6d:ae:2c:a8:c2:b5:09:e4:75:24:2f:7d:15:bd:79:55:b7:53:
         d0:1e:d6:3a:b4:e3:07:1b:f5:7d:fe:2a:68:df:18:57:f8:8b:
         de:85:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org