Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/3130332e31332e33362e302f32342d3234203d3e20313331373231.roa
File:                     3130332e31332e33362e302f32342d3234203d3e20313331373231.roa (raw, json)
Hash identifier:          Hy2xLcFgrsXcJMEPM+FB0vEiSoA/kovkO4p5/sCss4M=
Subject key identifier:   52:CE:E2:69:35:2D:FB:B4:64:F6:95:47:95:7C:1C:52:03:B0:8C:AF
Certificate issuer:       /CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
Certificate serial:       39746DBAFD76AC7C7BAAFD03E37DDBA7F444F306
Authority key identifier: A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/3130332e31332e33362e302f32342d3234203d3e20313331373231.roa
Signing time:             Thu 08 Feb 2024 06:00:00 +0000
ROA not before:           Thu 08 Feb 2024 05:55:00 +0000
ROA not after:            Thu 06 Feb 2025 06:00:00 +0000
asID:                     131721
IP address blocks:        103.13.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl
                          rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:6d:ba:fd:76:ac:7c:7b:aa:fd:03:e3:7d:db:a7:f4:44:f3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A4C426A4F42A29829636FB3223FA7F5C68509A
        Validity
            Not Before: Feb  8 05:55:00 2024 GMT
            Not After : Feb  6 06:00:00 2025 GMT
        Subject: CN=52CEE269352DFBB464F69547957C1C5203B08CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:1f:c0:56:60:b0:8b:ce:3c:85:60:81:e6:
                    53:62:f0:54:d4:c5:f0:e1:c8:d3:ba:f5:8f:b5:34:
                    d3:eb:d9:64:b9:bd:4d:21:5a:cc:09:b8:10:e6:1f:
                    9b:b5:71:94:e0:19:c9:0a:69:91:93:b7:df:ba:fd:
                    99:27:a2:02:a5:43:c5:e8:0a:8e:fc:ae:48:cd:7f:
                    db:aa:1a:a1:27:b3:e5:d4:15:16:45:22:01:bf:0a:
                    2e:aa:bc:6a:3d:65:2d:8b:eb:23:eb:c3:98:34:48:
                    cf:7e:5f:c7:b1:4c:de:25:9c:e6:c9:3f:c3:b5:5b:
                    2e:eb:59:29:c5:66:9b:93:ce:f9:b3:89:34:31:97:
                    a4:e4:97:da:3d:ff:d1:29:d4:60:2a:ae:2b:e5:b8:
                    e0:56:7b:f3:5f:9d:4e:19:ef:ec:e8:9f:2a:2b:ae:
                    b8:c4:ad:63:08:4c:66:6c:c0:f8:5b:33:db:27:5c:
                    a3:bb:82:9e:44:52:32:7d:a4:27:06:09:74:81:95:
                    2d:6d:87:78:e0:9b:b9:8f:be:14:cf:49:ef:e9:15:
                    d0:04:d3:69:c7:45:35:d8:85:1d:c6:28:ad:b5:ab:
                    6c:86:09:2e:0c:b2:90:4c:57:07:41:9f:d3:ba:9c:
                    7e:3d:b3:54:56:97:fb:16:7d:f3:21:b9:a6:01:18:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CE:E2:69:35:2D:FB:B4:64:F6:95:47:95:7C:1C:52:03:B0:8C:AF
            X509v3 Authority Key Identifier:
                keyid:A4:A4:C4:26:A4:F4:2A:29:82:96:36:FB:32:23:FA:7F:5C:68:50:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/A4A4C426A4F42A29829636FB3223FA7F5C68509A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4A4C426A4F42A29829636FB3223FA7F5C68509A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5baebfb3-e29b-47c4-bd21-4571c30f441b/0/3130332e31332e33362e302f32342d3234203d3e20313331373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:1f:e6:8f:a9:79:2a:9e:9f:5a:f5:51:45:78:3c:91:ed:0e:
         e2:c1:3a:83:97:3f:7d:ef:4d:ad:19:4b:54:b4:3b:8e:13:79:
         bb:c9:41:f1:d0:56:b2:34:3d:42:06:db:aa:44:5c:87:50:ed:
         07:ab:29:77:e9:91:1a:01:3e:36:31:0d:b7:57:22:78:d5:a3:
         ba:73:f4:6a:15:97:3f:10:c9:8f:fd:e4:f6:b6:d1:b4:35:e9:
         e3:ee:82:1e:1f:d5:f9:94:1d:3e:7d:50:43:ee:92:46:5d:a3:
         e0:0d:96:d2:22:41:da:da:c0:3b:25:50:1d:9c:40:c1:9f:37:
         05:d0:c1:81:32:9c:6d:ee:6e:a2:06:9b:57:7b:b0:48:de:11:
         94:26:ac:e9:c7:b9:2a:48:27:25:4a:66:84:91:bf:56:42:70:
         cd:03:9c:5b:6e:3f:8e:19:60:c3:86:f4:6b:8e:b5:e1:d5:7a:
         97:a1:af:89:f9:6f:fd:ab:93:20:1b:f9:41:e0:2d:17:4f:91:
         f5:a4:b3:5d:cd:a8:7c:0a:5d:dc:a2:38:0b:18:7d:aa:77:64:
         50:9d:a6:11:b5:4a:2e:85:6d:c3:06:7f:e1:f3:51:99:33:ef:
         85:f5:65:73:a6:e0:92:03:67:f3:0f:67:17:56:69:3c:11:2a:
         d2:05:f3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org