Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
File:                     3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa (raw, json)
Hash identifier:          rGRG4oI6/1ffQYP10IaojPS8L+RUEUapRHZLsSECCd8=
Subject key identifier:   14:12:0E:ED:F6:33:E7:EE:3D:88:74:4A:AD:11:49:B2:65:DC:18:76
Certificate issuer:       /CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
Certificate serial:       B94E487A6C1F96FDBF8D8F6845F3C8234CA684
Authority key identifier: E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa
Signing time:             Mon 01 Jul 2024 01:02:50 +0000
ROA not before:           Mon 01 Jul 2024 00:57:50 +0000
ROA not after:            Mon 30 Jun 2025 01:02:50 +0000
asID:                     138062
IP address blocks:        103.129.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl
                          rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b9:4e:48:7a:6c:1f:96:fd:bf:8d:8f:68:45:f3:c8:23:4c:a6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD
        Validity
            Not Before: Jul  1 00:57:50 2024 GMT
            Not After : Jun 30 01:02:50 2025 GMT
        Subject: CN=14120EEDF633E7EE3D88744AAD1149B265DC1876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:5a:42:fe:94:6e:08:7b:f2:1b:00:99:52:
                    fb:19:77:f2:a8:d9:48:6b:29:90:2e:b7:0f:1f:b9:
                    74:5c:6a:e3:d9:ab:6e:fd:07:98:58:b0:85:62:e8:
                    26:a3:74:98:f4:d8:3e:88:bc:39:3e:b6:83:bb:1a:
                    56:07:4d:c4:8e:2b:cc:9c:c9:e3:b5:71:30:d0:0b:
                    3d:be:8b:b9:f1:7c:45:c5:4c:81:9d:41:3b:74:94:
                    74:9a:ad:40:01:97:be:64:4b:71:e9:ab:83:d4:05:
                    aa:a3:bd:eb:fd:23:ad:03:29:65:35:84:02:7a:bf:
                    ef:f4:6a:9a:c3:c0:7a:d5:3d:dd:73:25:33:63:91:
                    3a:c5:17:57:f7:d1:13:37:37:0c:88:55:f1:47:05:
                    74:4f:07:50:6c:e4:de:e4:3a:9a:91:3e:80:d0:85:
                    27:c9:8d:e6:94:cb:42:21:75:18:42:62:c6:54:33:
                    8a:62:48:14:08:7e:8e:2f:b0:79:e1:c8:b7:6f:f7:
                    d7:66:34:12:04:6f:74:bc:f7:56:44:03:c2:ac:db:
                    2c:f6:70:c4:f4:74:55:3c:96:f4:1a:a4:fe:5a:f9:
                    3b:5d:3c:c1:66:1a:88:30:b0:73:2a:75:55:ee:ff:
                    60:23:2f:a9:3b:fb:69:9d:3f:f9:68:db:2c:73:89:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:0E:ED:F6:33:E7:EE:3D:88:74:4A:AD:11:49:B2:65:DC:18:76
            X509v3 Authority Key Identifier:
                keyid:E2:7F:07:0B:27:EA:B0:96:E2:B3:52:3F:1A:1A:CD:7D:01:8D:0A:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E27F070B27EAB096E2B3523F1A1ACD7D018D0ADD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76a002de-0cde-462e-9404-46bc6270e04f/0/3130332e3132392e3232332e302f32342d3234203d3e20313338303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:75:1e:13:e9:28:36:a4:d2:45:d5:6c:e3:d6:48:bc:d8:61:
         12:64:f5:7c:4c:31:34:96:4d:56:0a:ff:7e:15:7f:36:47:57:
         22:92:ad:ab:a5:2e:b7:e6:2e:d1:7a:fb:61:e8:1d:2d:e9:e5:
         51:71:77:e5:28:87:b3:b8:43:4c:32:46:91:a0:df:a0:58:68:
         d3:7d:23:76:73:01:2f:b6:42:da:21:ca:dc:c0:a3:a4:b8:5b:
         9d:13:1d:99:e2:b0:2a:5e:12:b2:37:f0:83:77:38:f6:7c:c2:
         01:29:40:a1:b4:19:47:30:35:79:f8:37:c4:68:ce:3a:e1:a5:
         5e:21:1b:7d:74:05:4b:6e:3e:a2:21:6f:2d:cc:dc:c3:d6:b4:
         92:69:04:d3:13:72:52:26:c1:89:a6:0a:52:2b:80:1f:39:62:
         e4:df:7c:f2:00:92:4e:d0:9e:96:47:e0:42:af:1c:ab:0a:c5:
         bc:9b:a9:e2:cc:33:74:8d:fd:04:ae:71:3d:1c:98:cc:91:5f:
         88:4e:19:7e:c6:1e:5e:ac:73:50:6c:f6:ef:29:f1:81:b2:7f:
         e0:05:3d:21:62:25:58:53:54:2e:03:5f:77:9e:59:20:13:bd:
         02:52:4a:8d:7f:e7:59:c0:9f:64:2d:f3:70:31:18:a5:55:48:
         2c:e7:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org