Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
File:                     3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa (raw, json)
Hash identifier:          O/kvSI9r8ac9UaS8UQgMdP3IqTJCcU/HYz9o7xSla0s=
Subject key identifier:   DE:F4:BD:C4:94:81:40:11:7F:C1:41:67:60:DC:FF:E4:A7:F4:27:FE
Certificate issuer:       /CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
Certificate serial:       4984CBDEDAABB9C14AB4A3CBA8D0AE7BCCB8B199
Authority key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa
Signing time:             Wed 07 Feb 2024 08:09:47 +0000
ROA not before:           Wed 07 Feb 2024 08:04:47 +0000
ROA not after:            Wed 05 Feb 2025 08:09:47 +0000
asID:                     132663
IP address blocks:        103.26.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl
                          rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Jun 2024 20:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:84:cb:de:da:ab:b9:c1:4a:b4:a3:cb:a8:d0:ae:7b:cc:b8:b1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF
        Validity
            Not Before: Feb  7 08:04:47 2024 GMT
            Not After : Feb  5 08:09:47 2025 GMT
        Subject: CN=DEF4BDC4948140117FC1416760DCFFE4A7F427FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:0d:78:67:4e:b0:0c:f8:1d:e5:e6:01:dc:
                    90:c1:23:88:39:5c:fd:98:96:1b:3d:9b:6b:d1:27:
                    3c:91:42:8b:b0:42:97:9f:1d:70:89:90:2c:40:0a:
                    5c:8f:7e:3f:5d:29:21:31:e8:4d:69:54:95:ea:8d:
                    c5:83:61:c2:1d:55:3c:0a:d6:29:9e:0d:4c:5b:b4:
                    59:94:e3:a6:4d:2c:33:38:e6:82:83:be:64:b6:5c:
                    34:1d:fc:e4:08:c4:a8:41:e3:b9:74:05:72:fd:01:
                    b1:00:0a:4d:f9:d7:29:20:65:c5:22:61:d2:dd:8a:
                    9b:3f:58:6d:05:85:0b:54:74:04:be:9c:ee:8f:95:
                    7e:08:cc:2e:97:50:88:7f:a9:dc:f1:48:9c:39:66:
                    33:52:c2:4a:53:c1:28:91:86:1a:6b:eb:ec:cc:30:
                    af:5e:c6:34:b7:22:e2:a6:4b:07:eb:ea:87:f0:ea:
                    d3:39:ee:80:39:17:b8:28:4e:d5:68:a6:d6:32:5f:
                    cd:b7:38:ef:31:69:fd:0f:68:39:dc:92:dd:18:ab:
                    ea:f8:39:c6:26:d0:8b:61:68:61:8e:da:a8:7b:aa:
                    c5:ec:d1:2b:ae:a8:38:d1:84:13:b3:f9:b8:ca:97:
                    69:af:92:14:a1:de:c7:05:ce:d4:ea:c7:c4:e3:cd:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F4:BD:C4:94:81:40:11:7F:C1:41:67:60:DC:FF:E4:A7:F4:27:FE
            X509v3 Authority Key Identifier:
                keyid:9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/3130332e32362e3133312e302f32342d3234203d3e20313332363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:6e:2a:c9:b5:b3:3e:94:31:fc:94:5d:31:bd:c2:8d:52:
         53:87:cc:47:03:5c:3f:1c:02:2d:81:09:40:3b:8e:ea:b6:37:
         02:37:25:f3:0e:87:1a:cb:ea:52:b0:f5:c3:b3:8a:2a:4d:e5:
         35:b8:61:d3:06:32:6c:d0:b4:06:7a:d2:73:6c:d6:3a:8c:8c:
         43:90:44:13:d4:49:c7:59:c3:0b:c2:1c:a6:13:40:5d:f4:4a:
         e2:ad:0a:6c:f1:3e:12:61:c1:37:76:e1:37:7c:35:01:75:97:
         d3:b6:47:d2:5a:ca:16:28:91:51:7e:3a:81:cc:42:b8:ae:ae:
         98:50:37:43:e7:7b:6d:a2:dd:6b:f9:5b:aa:8d:89:77:e4:02:
         a4:7a:f2:c9:83:df:d0:bb:24:58:31:54:96:16:77:1d:e7:e2:
         66:d9:f9:1a:67:4d:c3:7a:b9:0a:fa:df:71:0c:89:09:5d:03:
         36:6d:54:29:e7:6f:a1:94:3f:44:2f:f0:1c:f2:f9:87:87:81:
         3f:81:de:13:95:4d:2f:34:77:44:58:7f:ea:79:12:22:0c:d0:
         8a:36:bf:58:10:50:12:aa:ad:62:71:c3:d3:2d:25:ea:72:16:
         e3:af:14:d2:c3:6e:c9:8e:9e:3f:5c:83:fa:00:3c:3c:61:cb:
         7a:60:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 9 07:42:09 2024 by rpki-client on console-fra.rpki-client.org