Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa
File:                     3130332e35332e32382e302f32332d3234203d3e20313339393535.roa (raw, json)
Hash identifier:          q71VZMkHYR/jrmXSyW/PQjNtLOj+pg8vLSA4wEcrXe8=
Subject key identifier:   35:2E:A6:3E:15:E1:22:D9:C6:51:E7:A6:75:C8:22:A4:B8:56:D3:0A
Certificate issuer:       /CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE
Certificate serial:       4A46A1965ADF9AFE45FF775DF79DD63EFFC14B62
Authority key identifier: EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa
Signing time:             Wed 08 May 2024 04:42:37 +0000
ROA not before:           Wed 08 May 2024 04:37:37 +0000
ROA not after:            Wed 07 May 2025 04:42:37 +0000
asID:                     139955
IP address blocks:        103.53.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl
                          rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 17:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:46:a1:96:5a:df:9a:fe:45:ff:77:5d:f7:9d:d6:3e:ff:c1:4b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC9AAB91007053E63CE17F98D74FFD8945F29EDE
        Validity
            Not Before: May  8 04:37:37 2024 GMT
            Not After : May  7 04:42:37 2025 GMT
        Subject: CN=352EA63E15E122D9C651E7A675C822A4B856D30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:74:a4:ea:a6:aa:17:15:d9:4c:81:03:1b:
                    04:65:57:45:cd:71:d9:23:85:b9:63:cc:b8:84:d2:
                    ea:73:5e:7d:de:ba:fc:df:c4:24:e8:d2:9b:db:f1:
                    c4:ee:38:1b:9f:29:a1:31:0a:65:46:d6:ef:a4:75:
                    61:91:70:41:f1:51:76:38:51:98:07:a2:bb:d5:a8:
                    76:73:95:08:3b:62:fb:7c:34:5c:c9:f3:a4:1c:fb:
                    a7:da:7c:ef:39:fb:49:bf:15:99:fd:96:71:36:6f:
                    41:ff:9c:b9:d2:bc:8a:24:4e:4d:5c:1c:63:7c:17:
                    34:24:91:46:51:6f:e2:33:30:b0:a8:57:fd:bb:c1:
                    47:1d:5f:53:f4:c1:65:24:6e:c2:ae:e3:32:1d:61:
                    56:f5:54:aa:15:c4:f5:ba:e4:4a:e5:2a:27:85:20:
                    2f:74:ca:8d:42:8c:a5:0b:3d:a7:84:25:ec:7d:ac:
                    bf:74:42:f6:fd:dc:20:8b:27:0b:27:3f:78:a5:61:
                    4e:93:58:95:05:72:00:01:9c:6a:2e:09:77:00:d9:
                    18:e3:47:1e:f4:47:b3:11:0e:86:03:fb:b3:9c:0d:
                    85:60:ad:25:92:ff:8d:cb:0d:7d:7c:67:5f:28:05:
                    c1:92:9d:99:ea:20:5d:58:d8:13:4e:d7:ca:6f:63:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2E:A6:3E:15:E1:22:D9:C6:51:E7:A6:75:C8:22:A4:B8:56:D3:0A
            X509v3 Authority Key Identifier:
                keyid:EC:9A:AB:91:00:70:53:E6:3C:E1:7F:98:D7:4F:FD:89:45:F2:9E:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9AAB91007053E63CE17F98D74FFD8945F29EDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bb43ec8-f582-4025-8f36-3cea539d0b09/0/3130332e35332e32382e302f32332d3234203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:da:4a:2c:38:3a:04:a1:b0:61:28:7b:72:dc:f3:cd:94:
         98:d6:a4:ab:86:0b:fd:fb:c6:5b:8a:e2:27:c6:a5:eb:de:d7:
         d3:b0:16:31:d7:5f:b9:77:95:52:37:6d:e4:95:ce:2a:68:67:
         ed:1d:91:cd:ca:c1:0a:c5:89:6f:20:c9:1e:93:00:cc:09:60:
         c8:72:f4:f6:26:cd:0f:a6:63:8a:db:13:16:92:2e:be:98:18:
         46:4b:c2:0d:10:eb:a1:67:89:3f:5d:c9:e4:90:8c:3f:54:84:
         58:66:aa:98:d9:f3:52:d3:84:b4:f8:8d:b1:47:f5:b8:f8:0d:
         ab:6d:09:dd:91:6c:04:46:9b:a4:cd:75:15:1b:ca:6a:5c:6a:
         ea:1d:8e:9b:7f:c3:ee:6a:64:09:e3:51:65:a6:75:c2:42:4c:
         c6:30:05:45:69:a6:f9:b8:9e:df:01:64:09:31:3b:15:e3:01:
         e7:8e:fe:1a:56:60:11:fd:2a:ca:c8:75:42:46:7f:e8:48:2c:
         c3:f2:40:c3:aa:c9:d7:36:46:cb:20:ed:03:e8:6b:f3:c9:98:
         4b:60:83:13:b9:c9:f4:7c:16:b8:5a:d1:91:56:6a:45:4c:f6:
         72:2a:b0:82:42:33:1b:15:35:be:96:32:ab:99:a3:c9:68:6c:
         79:61:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:08 2024 by rpki-client on console-fra.rpki-client.org