Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          0yYbeSlwt118/z/yMeSKWe8W2d/njeWTsXzGVig9O4Q=
Subject key identifier:   68:CB:5A:6B:89:C7:7E:77:13:CE:B4:DA:96:00:28:3E:9D:9F:DF:74
Certificate issuer:       /CN=C740DD931883C284135261B25A6958E80CDF63D2
Certificate serial:       18C0A673C47340B81DA4F4CA631EDE5C54DBEE2D
Authority key identifier: C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa
Signing time:             Mon 09 Oct 2023 03:45:29 +0000
ROA not before:           Mon 09 Oct 2023 03:40:29 +0000
ROA not after:            Mon 07 Oct 2024 03:45:29 +0000
asID:                     135636
IP address blocks:        103.139.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl
                          rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c0:a6:73:c4:73:40:b8:1d:a4:f4:ca:63:1e:de:5c:54:db:ee:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C740DD931883C284135261B25A6958E80CDF63D2
        Validity
            Not Before: Oct  9 03:40:29 2023 GMT
            Not After : Oct  7 03:45:29 2024 GMT
        Subject: CN=68CB5A6B89C77E7713CEB4DA9600283E9D9FDF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:fa:60:f5:45:3b:75:db:46:7d:73:e9:11:
                    03:65:13:e0:fb:b3:30:02:50:53:61:84:01:34:df:
                    33:f4:e2:3d:99:71:b8:37:65:90:03:b4:2d:36:6b:
                    c5:70:93:78:db:8b:9b:cf:1b:a5:90:6a:a7:de:69:
                    1c:3d:0a:25:d4:eb:ca:45:c5:46:83:0f:15:95:e3:
                    fc:7c:ab:30:07:56:b6:7d:6c:09:a5:d6:07:ac:85:
                    73:72:56:f1:d5:11:9f:8e:ac:11:ea:19:2e:fe:de:
                    21:48:99:8e:80:67:95:b4:bd:d2:30:90:e3:97:a7:
                    43:11:eb:95:cd:8d:8d:34:7d:3d:b7:d6:62:d3:f7:
                    40:ca:50:24:29:25:58:55:02:0e:07:5f:0a:7c:70:
                    1d:21:b4:1a:a9:78:73:63:2d:54:7e:c4:2e:3d:24:
                    89:81:52:b0:bf:9e:fa:b7:bb:10:98:91:63:c3:65:
                    ed:a9:8a:47:de:9c:61:e9:3a:96:09:e6:de:fb:cc:
                    31:f4:a3:b0:06:af:73:4b:9f:de:2c:5e:e0:91:b0:
                    93:fd:63:0a:f5:7d:72:0d:d6:a2:e2:8a:c1:dd:db:
                    6a:3e:ce:3f:f1:06:e2:af:06:80:09:8c:b7:4c:5c:
                    dd:e1:9b:41:50:6d:33:79:35:e6:a4:ad:fc:41:5f:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:5A:6B:89:C7:7E:77:13:CE:B4:DA:96:00:28:3E:9D:9F:DF:74
            X509v3 Authority Key Identifier:
                keyid:C7:40:DD:93:18:83:C2:84:13:52:61:B2:5A:69:58:E8:0C:DF:63:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/C740DD931883C284135261B25A6958E80CDF63D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C740DD931883C284135261B25A6958E80CDF63D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74714665-c670-451e-bdcb-9074219d55ce/0/3130332e3133392e3132302e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:34:ef:62:00:b6:a0:ed:4b:f8:dd:fc:0e:d4:a7:49:38:
         f4:ca:55:7f:28:10:51:d6:8d:0d:a1:69:46:75:b7:f9:a0:65:
         b2:f9:98:36:5b:73:61:8a:1c:c9:c8:14:ae:11:5f:6f:16:69:
         88:4d:d4:90:82:99:24:34:a5:f7:97:8e:a4:43:81:ba:8f:57:
         a7:8a:8e:cf:2f:a4:d4:ee:83:54:a7:b4:60:ea:97:5d:4c:d7:
         4b:24:ad:10:ac:69:0f:da:ca:c9:87:9a:5b:99:8e:e2:1f:4e:
         d0:b0:1d:db:ef:2a:25:72:9a:e4:43:83:ce:e4:bc:3f:82:78:
         60:29:e9:80:e6:de:7f:d0:67:e7:d4:cd:9e:5d:94:4c:d5:e8:
         dc:47:62:b7:a8:cc:a7:2e:21:7c:60:fd:58:5d:26:f4:f5:5b:
         03:25:42:90:20:f0:c2:54:11:7f:5f:dd:c1:49:97:30:c0:70:
         80:62:cc:da:98:70:85:c7:82:b6:98:f3:b6:f4:78:2e:65:5a:
         4e:4e:9f:62:11:24:4b:4c:87:c8:f5:85:86:cd:9c:de:c5:45:
         22:9f:32:69:02:ba:64:1f:e4:21:9f:b7:c6:83:4b:07:74:f4:
         bb:1c:34:bc:61:7b:42:6c:16:e4:93:07:9a:2c:7b:c2:1e:c8:
         ed:89:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org