Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa
File:                     3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa (raw, json)
Hash identifier:          x5hTeEOvLFOBqbVUlwe0w1rSl/ywnzu7BfrWIVUS2g4=
Subject key identifier:   AB:95:41:74:30:F2:57:4C:3D:2E:52:E6:8F:DF:07:2C:7E:54:38:E5
Certificate issuer:       /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Certificate serial:       0710749F31E232B0CB9BB5D45514E20DB1610744
Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa
Signing time:             Fri 05 Jul 2024 07:13:56 +0000
ROA not before:           Fri 05 Jul 2024 07:08:56 +0000
ROA not after:            Fri 04 Jul 2025 07:13:56 +0000
asID:                     141664
IP address blocks:        103.26.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl
                          rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:10:74:9f:31:e2:32:b0:cb:9b:b5:d4:55:14:e2:0d:b1:61:07:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
        Validity
            Not Before: Jul  5 07:08:56 2024 GMT
            Not After : Jul  4 07:13:56 2025 GMT
        Subject: CN=AB95417430F2574C3D2E52E68FDF072C7E5438E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:7a:ee:31:85:eb:83:c8:ea:75:5c:2b:d0:
                    a4:9a:6d:7b:96:1d:2c:ee:21:57:8e:1e:38:05:15:
                    c6:37:1c:3c:85:ba:05:7f:1d:c5:e8:8a:e6:08:1f:
                    cd:2d:c1:71:47:50:ef:ef:43:a9:17:13:d4:15:aa:
                    50:a5:eb:39:da:0e:37:cf:72:cb:04:26:82:52:8b:
                    ba:40:b7:12:26:32:a8:8f:50:b7:7e:a6:fb:76:2b:
                    81:70:4c:8c:65:57:52:97:59:39:e9:08:c4:cc:0f:
                    77:97:eb:81:64:8b:3b:97:55:4f:2e:71:34:16:34:
                    a8:aa:4d:57:1b:4b:6d:a7:81:3b:79:16:22:e2:b0:
                    61:2a:be:e9:74:fa:3e:4a:41:11:96:d8:f0:fb:3b:
                    10:c4:c3:ae:1b:a2:fb:7a:57:56:78:ce:71:45:39:
                    22:48:f1:a4:75:4e:c0:ee:58:ed:d4:f7:12:69:8a:
                    f5:77:de:15:f8:4a:ce:9e:53:1a:4f:cb:72:04:4e:
                    be:1e:4e:39:66:c4:54:1a:c6:eb:06:4e:80:c9:81:
                    58:47:7e:bd:1e:71:22:7d:f0:4d:bf:1b:08:43:81:
                    9d:76:c8:f3:ec:19:16:3a:ff:0a:df:bc:22:a0:9e:
                    60:71:0b:c1:91:70:cb:8a:52:4d:26:1d:53:96:bf:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:41:74:30:F2:57:4C:3D:2E:52:E6:8F:DF:07:2C:7E:54:38:E5
            X509v3 Authority Key Identifier:
                keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3132392e302f32342d3234203d3e20313431363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:bc:0a:67:ad:3c:73:f2:5d:09:e9:70:5c:83:00:19:d7:5b:
         ab:0a:0b:13:5d:a8:49:70:91:59:2e:d8:1e:01:da:b6:18:3b:
         d6:f9:fa:e4:11:3f:79:b3:86:49:55:5e:cd:99:a8:3b:cd:38:
         36:36:95:33:07:14:ae:e6:55:b6:29:ec:b4:54:ab:d3:89:b7:
         3d:ff:35:f3:4e:6b:66:58:b4:7c:82:1b:0e:73:3b:fd:29:76:
         32:be:f8:d9:5d:c4:a9:c8:3e:03:8c:a2:44:86:78:6d:b6:48:
         58:3e:16:f1:cf:c9:bd:01:39:32:23:a6:a7:a5:0b:f6:90:10:
         47:25:b2:54:92:8f:67:d3:07:60:cd:6a:74:f2:a6:f2:12:4e:
         67:3a:42:75:22:8c:2a:22:b1:e0:c1:b3:af:f9:4d:7f:7d:e0:
         58:2b:16:cf:1b:93:38:1a:bf:f6:91:2c:19:62:33:e2:6c:40:
         b4:74:7c:b9:92:96:76:91:60:4b:79:52:93:c4:15:58:17:83:
         a2:71:b9:5f:09:b1:a2:f8:fe:51:e7:e6:bc:ef:4c:e9:c3:1b:
         73:ca:72:bf:a9:e2:af:ba:56:3f:10:de:b2:0b:d1:9a:97:97:
         8e:98:57:11:e3:79:44:52:1c:3e:ed:ce:bb:6b:3f:f2:3c:63:
         75:0a:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org