Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa
File:                     3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa (raw, json)
Hash identifier:          gD9AwYI+/EJ25OcZfTmy4Decmn8L5CjmaXYtu85gwhM=
Subject key identifier:   04:FC:46:44:E7:CC:87:6B:21:C4:D7:72:4B:DE:80:49:66:43:F2:BE
Certificate issuer:       /CN=D2EA420344F486935839E03DF1B3C237F295C2DE
Certificate serial:       391AD68A9F2C19EAEE68C00E38EF66E8370C4B85
Authority key identifier: D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa
Signing time:             Sun 03 Sep 2023 09:01:46 +0000
ROA not before:           Sun 03 Sep 2023 08:56:46 +0000
ROA not after:            Sun 01 Sep 2024 09:01:46 +0000
asID:                     137320
IP address blocks:        103.110.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl
                          rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:d6:8a:9f:2c:19:ea:ee:68:c0:0e:38:ef:66:e8:37:0c:4b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2EA420344F486935839E03DF1B3C237F295C2DE
        Validity
            Not Before: Sep  3 08:56:46 2023 GMT
            Not After : Sep  1 09:01:46 2024 GMT
        Subject: CN=04FC4644E7CC876B21C4D7724BDE80496643F2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:a9:ee:fb:a1:8c:85:14:3a:da:eb:69:5a:
                    9a:fa:62:6a:96:ad:03:f2:46:e4:57:d5:ee:2a:20:
                    17:8b:c3:58:5f:dc:8d:38:70:46:91:0c:50:6f:52:
                    eb:05:bd:79:82:4d:3a:57:95:bc:f3:ef:c4:6f:41:
                    53:a8:b0:6e:e1:70:e2:88:be:83:b5:8c:e6:ef:57:
                    2b:56:78:29:dc:af:8c:09:07:33:1b:46:ee:50:11:
                    be:fd:a7:d1:1a:2b:13:58:37:49:71:99:4e:4c:70:
                    f0:3f:39:03:6c:72:59:be:ce:8e:c1:3a:a6:4c:7c:
                    21:c9:95:16:0d:12:f1:c7:bb:0e:58:fc:54:3d:65:
                    72:a3:ee:32:e8:3b:5c:c4:71:2b:c6:2b:19:5c:3c:
                    7f:7d:d4:f6:e1:e9:e0:ca:5f:1b:4c:e0:47:39:46:
                    e2:9c:0d:f3:a1:05:08:4b:1c:97:41:09:24:b0:ef:
                    69:c9:68:e1:15:93:3c:81:1b:14:80:07:9b:c5:f6:
                    a4:2a:c2:87:28:70:3a:0c:47:21:af:cb:79:bd:d1:
                    08:a9:68:0e:71:d8:49:19:8e:59:96:d1:47:0c:50:
                    d5:65:ec:76:4c:f6:3a:2d:9e:28:5d:de:33:23:38:
                    cc:cf:36:80:87:23:ba:e6:d7:b4:10:61:b8:75:5d:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FC:46:44:E7:CC:87:6B:21:C4:D7:72:4B:DE:80:49:66:43:F2:BE
            X509v3 Authority Key Identifier:
                keyid:D2:EA:42:03:44:F4:86:93:58:39:E0:3D:F1:B3:C2:37:F2:95:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/D2EA420344F486935839E03DF1B3C237F295C2DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EA420344F486935839E03DF1B3C237F295C2DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/740883f3-457a-4c14-9577-67e150a2b12a/0/3130332e3131302e3132302e302f32322d3234203d3e20313337333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:68:5f:2d:ee:86:1a:d9:88:bb:06:e1:5a:05:5e:81:bb:
         b2:e4:66:dd:73:e4:bc:9d:b5:7a:85:01:b9:ff:19:6b:65:49:
         54:6b:ec:f1:68:a4:64:35:17:3d:7a:67:01:ca:4b:1c:b4:1a:
         74:08:4c:f9:47:06:09:90:b0:a7:74:2b:b0:7e:d5:47:1b:75:
         1d:6a:c7:53:6f:63:cb:f7:60:00:6b:64:3e:9b:25:3d:5b:9b:
         b3:d3:8c:9a:1d:0d:40:9a:13:c0:ef:9e:ea:83:d9:af:97:3f:
         8c:59:ed:d3:54:ac:13:92:01:31:c6:72:25:ca:2c:81:09:43:
         9a:d6:54:d2:28:de:1d:e5:f9:69:83:9b:73:0e:e2:d6:60:bf:
         ce:99:ad:1c:75:6a:f4:5c:8c:57:cd:45:1e:c3:79:ba:b6:67:
         fc:6d:27:99:b7:65:43:75:51:c8:56:20:f9:21:55:de:5c:59:
         a9:0d:85:af:00:06:a0:eb:1c:8c:8c:b1:59:06:6d:a6:29:13:
         79:b2:ff:93:3a:c1:6b:10:88:2d:2d:50:2e:4c:d6:2f:45:19:
         1c:8a:b5:69:04:68:4e:c0:79:21:b5:5f:f8:e4:95:e4:b0:58:
         74:ae:94:82:c8:77:6f:d6:a2:ec:6a:ef:bb:b1:78:3a:63:ec:
         fd:c7:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org