Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa
File:                     3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (raw, json)
Hash identifier:          2OJ/wtKeIZAaX++aUeHXj+pN9DRnOhjC4MRVlbyCCIw=
Subject key identifier:   BE:C6:76:14:A4:E9:00:94:17:B6:93:98:3D:82:1B:A5:93:F4:43:A1
Certificate issuer:       /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
Certificate serial:       74734859017653625A8F26BD6CCA045E644DEA
Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa
Signing time:             Tue 23 Jul 2024 14:06:08 +0000
ROA not before:           Tue 23 Jul 2024 14:01:08 +0000
ROA not after:            Tue 22 Jul 2025 14:06:08 +0000
asID:                     139412
IP address blocks:        103.143.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl
                          rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:48:59:01:76:53:62:5a:8f:26:bd:6c:ca:04:5e:64:4d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2
        Validity
            Not Before: Jul 23 14:01:08 2024 GMT
            Not After : Jul 22 14:06:08 2025 GMT
        Subject: CN=BEC67614A4E9009417B693983D821BA593F443A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:10:f3:0c:41:4a:03:c2:41:fc:d8:c8:60:16:
                    ed:0a:ea:a7:06:be:98:c3:b9:f8:40:bb:f7:b6:93:
                    ea:6c:7d:c0:93:b6:48:b8:76:b4:ac:4d:25:69:29:
                    14:f3:d7:83:d3:07:a2:04:24:07:e6:5d:a8:6e:a0:
                    ec:ac:63:cc:13:a8:6e:a4:23:88:ea:34:5b:af:c5:
                    79:4f:f1:a3:97:a7:8b:61:bc:b9:42:48:97:4a:6e:
                    f2:2c:30:b6:e7:e8:69:16:2c:62:7f:6e:e9:d7:cd:
                    e0:63:cc:ad:87:54:4f:ce:6d:30:8d:6f:a3:c3:e9:
                    c9:26:ef:dc:00:2d:4a:50:88:bb:03:4f:a1:bb:0e:
                    94:6e:1b:f3:03:64:fe:d5:14:cc:92:32:22:9e:70:
                    d7:d2:25:5d:38:1e:97:e5:5b:f7:d0:16:f1:56:1a:
                    56:b3:fc:dc:96:e8:7c:0c:52:d7:d6:2c:e2:96:69:
                    5b:7c:2f:c6:5e:a3:30:df:7a:87:65:b4:3c:d5:92:
                    f3:19:67:a7:df:af:0c:ba:7c:7d:72:93:71:66:19:
                    9b:0c:ad:02:cc:74:a3:4e:b3:18:1e:a5:2f:84:37:
                    1d:9e:56:7e:9a:5d:73:c3:48:fd:1c:d0:1a:ff:bd:
                    0c:a8:76:a8:7a:b6:6f:b4:aa:ef:0c:63:bc:09:d7:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:76:14:A4:E9:00:94:17:B6:93:98:3D:82:1B:A5:93:F4:43:A1
            X509v3 Authority Key Identifier:
                keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:a5:62:8f:3a:e8:76:8c:07:06:21:ca:86:f6:aa:28:5d:
         55:e7:64:5f:c5:76:e4:28:0b:1e:a7:4b:ac:3f:35:41:50:e6:
         b1:0d:c8:f3:6c:a3:06:1b:c9:fb:93:a3:dc:a4:bd:ca:0b:bb:
         4c:fa:e1:fa:29:de:b2:01:02:84:d3:48:0c:12:b0:34:ea:fd:
         c6:59:22:0b:77:5f:59:fe:71:79:a6:0e:04:0c:bd:b3:9d:4f:
         d6:34:7d:88:a3:5e:c5:37:4e:3e:8f:9b:1e:e5:63:b2:2b:0b:
         71:66:88:7d:e2:71:d0:48:4e:25:1f:38:c8:3d:19:e3:b8:51:
         6c:5d:eb:34:73:31:6d:8e:dc:49:28:8a:85:bd:44:ec:74:25:
         6e:98:5a:a6:0f:e4:e2:fa:73:40:3e:4e:98:a4:a9:64:41:b8:
         dc:7f:52:ca:19:bc:a3:1c:6c:da:f5:7d:e7:39:ea:d0:93:c1:
         c5:ca:9d:81:f2:27:95:da:ef:bf:0c:7c:be:2c:1e:2a:1f:ea:
         bd:34:29:ad:49:a4:d5:5f:d8:e4:b0:dd:fd:8c:4b:0c:3a:e4:
         a7:e0:b9:a6:33:36:89:b5:f2:f9:43:ad:80:c2:82:e8:2d:f3:
         bb:06:07:40:29:5d:12:67:3a:a5:42:7f:2d:6e:a4:f4:cb:ba:
         1d:61:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:51 2024 by rpki-client on console-fra.rpki-client.org