Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          bDH+RypaUq14jL90Jkyj76XN0FbcCOLQ3ffO661yNsQ=
Subject key identifier:   DC:7E:C3:7E:A5:5B:74:22:EF:45:11:B4:79:F7:FE:D8:6D:5A:57:2C
Certificate issuer:       /CN=58D7A2E054D4F6B835578031386896062B0B0CED
Certificate serial:       3986E4C9606994D1DF6F4729C385C3DE51763FD2
Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 04 Aug 2024 10:01:02 +0000
ROA not before:           Sun 04 Aug 2024 09:56:02 +0000
ROA not after:            Sun 03 Aug 2025 10:01:02 +0000
asID:                     135636
IP address blocks:        103.103.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl
                          rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:e4:c9:60:69:94:d1:df:6f:47:29:c3:85:c3:de:51:76:3f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED
        Validity
            Not Before: Aug  4 09:56:02 2024 GMT
            Not After : Aug  3 10:01:02 2025 GMT
        Subject: CN=DC7EC37EA55B7422EF4511B479F7FED86D5A572C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:54:a0:00:b8:67:26:e7:31:fb:2b:a9:60:
                    8d:32:47:0a:c1:b2:1d:19:1b:88:d5:b5:4a:02:03:
                    2b:ba:a1:ea:97:8f:c0:74:7a:83:13:d7:ef:de:be:
                    e3:8c:53:6d:5b:40:f2:bd:a4:7b:a0:ea:9f:82:ca:
                    95:5a:e1:1f:08:89:f8:cf:b4:51:e8:47:c7:a6:43:
                    3e:f9:a0:8f:ac:8b:96:b8:28:8f:9a:47:1e:3a:18:
                    d9:2c:d2:22:77:01:35:20:c8:59:c4:ea:1b:13:81:
                    66:7d:1f:f8:31:01:85:03:2a:28:97:25:86:03:91:
                    2f:38:a9:10:19:58:22:3a:9e:ff:67:ef:dc:3a:d5:
                    43:f8:aa:43:58:55:1c:36:61:b2:97:32:f9:35:e3:
                    f7:b7:75:b5:a4:5f:f3:69:e2:d7:1e:d9:4a:fe:b1:
                    f7:0e:2a:ed:1f:90:6e:eb:7b:d7:7c:8c:a6:a5:80:
                    a2:e0:e1:77:26:3d:6f:eb:df:97:bf:6f:60:4b:b7:
                    bb:ab:6f:90:47:29:6f:59:2a:90:fb:3e:66:ba:8f:
                    e0:98:f0:ab:99:7e:7c:ea:51:c7:a0:2e:c7:47:e3:
                    b4:8c:73:82:38:46:71:5f:ad:31:85:7d:20:a7:4a:
                    03:54:8a:64:80:3f:82:35:67:01:f8:54:b0:e3:a2:
                    92:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:7E:C3:7E:A5:5B:74:22:EF:45:11:B4:79:F7:FE:D8:6D:5A:57:2C
            X509v3 Authority Key Identifier:
                keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3137352e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:36:aa:9d:11:37:39:bf:08:39:b8:bc:51:27:4a:ba:49:
         12:33:07:c5:8c:83:e7:da:d7:2a:a8:f1:0b:30:c8:2e:02:1e:
         22:fa:cc:fa:42:5a:de:fb:5c:3e:92:c0:8d:af:50:bd:c7:b1:
         2c:7f:d0:fc:1c:29:c7:92:6a:36:9e:5f:a2:b4:e2:af:bf:df:
         91:1a:03:ff:6e:4e:e1:2c:79:d4:f6:42:58:1c:2b:11:dc:86:
         52:74:41:eb:41:42:f6:dc:3c:90:7d:ae:6b:e1:a8:52:c3:4f:
         65:f7:45:bf:4f:65:7f:b6:c0:1c:b4:b6:4c:10:05:ba:c1:4c:
         96:70:70:a1:33:b4:70:da:ab:38:db:2e:74:25:01:1d:ae:92:
         9f:8a:15:b2:0c:45:8a:9e:a8:41:ef:f7:a9:2d:83:de:2e:ee:
         94:f1:2a:ea:9a:8b:52:79:03:78:ee:c1:c9:18:cb:a3:0b:5f:
         c1:6c:97:fa:4d:b0:29:41:03:19:79:bb:c5:aa:3c:ca:7a:00:
         94:08:1e:3b:3d:da:42:1d:85:5a:5f:66:99:ac:14:c7:24:e7:
         c7:6a:80:57:38:4a:4e:dc:92:e6:08:57:92:0a:09:c7:43:c8:
         f5:b5:16:23:00:03:78:ad:85:60:12:44:91:cb:4a:0d:f6:c8:
         75:53:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org