Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          R3fPbPLGZiRzy17EKK0wwpepbuagvyGwkQgUHPVbRMw=
Subject key identifier:   9F:71:AA:9E:52:79:95:61:58:39:79:D2:79:0A:F3:68:70:E7:1C:31
Certificate issuer:       /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
Certificate serial:       723525D361D40B25973D7BCFF131969370A0378A
Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 15 May 2024 06:00:00 +0000
ROA not before:           Wed 15 May 2024 05:55:00 +0000
ROA not after:            Wed 14 May 2025 06:00:00 +0000
asID:                     38320
IP address blocks:        103.135.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl
                          rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:35:25:d3:61:d4:0b:25:97:3d:7b:cf:f1:31:96:93:70:a0:37:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB
        Validity
            Not Before: May 15 05:55:00 2024 GMT
            Not After : May 14 06:00:00 2025 GMT
        Subject: CN=9F71AA9E52799561583979D2790AF36870E71C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:f5:00:46:07:5d:cc:de:b9:c3:06:4b:49:
                    94:2c:2e:83:71:34:ef:45:7f:e8:b1:be:b2:68:1f:
                    88:f8:19:9a:bd:75:87:1c:84:d7:07:9d:2d:a8:00:
                    d7:97:48:9a:db:4b:e6:9b:cf:29:c9:ca:aa:1c:bc:
                    93:f4:9b:2b:88:1f:bb:81:6b:73:7c:91:dc:ab:c2:
                    fe:c9:a0:a0:39:51:96:f6:bf:bb:02:95:61:6d:8a:
                    81:9a:f9:22:07:b3:3d:fd:4d:ce:1c:1c:d4:33:22:
                    0a:da:1b:5d:d9:32:bd:dd:c1:85:72:05:00:cf:41:
                    1b:ba:dd:3e:dc:3d:cb:0c:23:eb:96:02:3b:b4:e4:
                    b5:1c:8d:8a:3d:f9:3b:96:32:88:36:7b:67:a7:f7:
                    85:7c:55:ac:7e:78:77:2d:6a:58:3e:bf:32:2b:65:
                    07:de:e9:93:e2:c8:1a:c5:9b:33:21:03:31:d7:19:
                    4c:6d:32:73:f3:11:1a:ba:31:a7:ec:ab:62:59:c5:
                    6b:28:1b:2f:6f:d9:06:24:be:f0:08:3f:b8:b1:f5:
                    c7:f7:13:1c:33:22:b0:81:9c:34:1d:f2:00:59:31:
                    e9:c0:9f:fc:20:6b:2e:dc:2e:63:b2:09:f7:69:9d:
                    33:b3:65:7b:e6:f4:86:32:f5:9b:47:b7:f3:fe:0c:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:71:AA:9E:52:79:95:61:58:39:79:D2:79:0A:F3:68:70:E7:1C:31
            X509v3 Authority Key Identifier:
                keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/3130332e3133352e342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:b6:7b:61:78:eb:f8:5b:41:ff:ea:dc:3a:1c:8e:5b:a9:70:
         b4:de:e0:94:8d:c3:02:87:e6:2b:49:33:3d:db:25:06:4c:92:
         e0:66:49:94:07:47:b4:7b:c1:4b:de:32:08:49:d3:ca:7e:b3:
         36:5f:1b:3d:fb:f8:d1:20:e4:7f:9d:d5:b9:26:49:d7:b6:a6:
         90:10:c9:ff:87:a5:f4:b6:cc:9e:73:3a:c5:17:3e:24:98:bf:
         af:22:5e:40:9b:f6:0a:8f:ec:87:b2:9f:3b:0c:83:af:fa:7d:
         80:c3:e5:8f:90:22:85:73:ea:50:ea:94:8f:ff:a1:4f:3a:d7:
         3a:d5:7e:a2:fd:aa:7f:9b:7b:6e:79:dc:9f:e0:2b:08:b4:23:
         da:60:c7:4e:f0:e1:1c:b2:88:bb:60:9b:95:b7:d1:f2:41:ad:
         b6:7f:f5:20:71:48:ff:49:36:a4:01:48:01:a0:12:b7:c4:53:
         63:f2:34:82:53:d7:50:c3:73:9c:ae:d8:8d:70:d0:8a:4f:61:
         35:eb:65:15:2c:fc:7e:f3:b8:c7:ab:84:e2:34:c1:f8:84:63:
         52:e9:27:3d:13:3d:42:69:33:3d:24:4a:59:47:1c:1f:6b:d5:
         e5:e6:0e:c3:34:5f:41:4d:45:c9:7a:65:04:97:d3:91:31:03:
         e0:73:2a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org