Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa
File:                     3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          PWKhHfvHi5fduP8LQllLvdwoCxcQGV1n+po1/WbuEJc=
Subject key identifier:   F8:9C:9D:91:CE:F7:6D:08:23:0E:68:17:6A:1F:0E:3C:E7:86:81:D3
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       3E5982300283B745DC460A33D75D2B177335596C
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa
Signing time:             Tue 19 Mar 2024 00:00:00 +0000
ROA not before:           Mon 18 Mar 2024 23:55:00 +0000
ROA not after:            Tue 18 Mar 2025 00:00:00 +0000
asID:                     139449
IP address blocks:        103.145.35.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
                          rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:59:82:30:02:83:b7:45:dc:46:0a:33:d7:5d:2b:17:73:35:59:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Mar 18 23:55:00 2024 GMT
            Not After : Mar 18 00:00:00 2025 GMT
        Subject: CN=F89C9D91CEF76D08230E68176A1F0E3CE78681D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:e3:62:b3:7a:f7:c1:1e:c5:4f:9e:38:57:
                    3c:67:97:38:2f:df:3d:f6:a6:8b:7b:0f:84:67:e0:
                    0b:c8:c3:8f:85:c2:cf:46:89:8f:25:9e:61:f5:4e:
                    88:ac:8d:62:93:48:2e:f0:7d:4e:e4:f0:f5:68:b4:
                    ee:20:39:5f:18:1e:fc:4a:7b:bf:3b:ad:60:36:56:
                    7b:d5:03:2a:2c:64:be:45:e6:c2:50:61:1c:cc:70:
                    d9:7e:50:96:02:35:ed:65:ef:35:7c:a2:61:e0:40:
                    4b:17:50:95:4d:59:65:2a:1f:a6:13:4c:8e:9c:a9:
                    75:a5:0c:6b:c3:4c:5d:73:be:d5:bf:d2:24:c4:73:
                    b5:6c:13:8f:5f:ca:69:a9:d1:36:9f:6a:d2:93:e7:
                    24:fa:be:d3:e8:20:82:17:1f:25:30:23:2c:ed:1c:
                    78:79:d4:16:42:7e:91:6f:6f:67:26:aa:e6:86:f9:
                    9a:b9:cd:4b:d9:d6:91:9f:22:25:07:d9:b7:c2:3c:
                    7b:36:9f:31:54:b8:d2:0f:ff:9c:89:a9:34:40:e3:
                    25:5c:8d:58:0e:5e:be:1a:27:a5:26:d9:f4:a4:42:
                    fc:db:63:e7:e4:23:3b:cd:60:48:7c:c2:85:4e:f8:
                    f1:0b:f3:47:86:0e:b2:b2:8c:25:0d:a9:47:6e:ac:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:9C:9D:91:CE:F7:6D:08:23:0E:68:17:6A:1F:0E:3C:E7:86:81:D3
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:70:41:9d:fe:f5:42:96:51:2a:73:68:c0:6d:54:a8:47:
         e3:70:57:db:fc:62:d5:17:82:21:03:f6:4c:84:c9:b2:07:b0:
         76:30:4d:e5:13:0c:1b:4f:ee:ea:56:c9:56:31:7d:5a:60:9c:
         8c:bd:2e:0c:34:71:ea:a4:f1:5d:4a:cd:db:16:f3:08:96:f5:
         94:6e:89:e7:b6:ae:b8:4b:66:63:a8:73:47:a5:07:75:87:7f:
         98:a1:13:d4:1b:49:e7:29:3b:b8:63:22:f1:d9:5e:19:90:7a:
         b5:82:1c:a1:ab:fe:07:ef:5c:dd:31:7c:85:25:65:cf:7d:f9:
         a3:35:0e:ff:10:96:55:77:8a:62:ed:31:67:66:41:71:78:00:
         5c:d1:bc:cb:c6:dd:ed:87:90:d6:cc:35:e1:af:f9:8d:7c:a1:
         a3:c1:b3:99:8e:60:ae:a1:51:fb:5e:f5:da:bd:24:28:b4:7a:
         75:e6:75:c8:1e:c7:ca:00:8b:7b:be:e6:52:6c:c4:ca:0e:ea:
         50:39:4f:1d:62:bb:74:82:bc:a9:fd:c0:17:38:7c:3b:d6:2f:
         bd:5d:42:c2:7f:fc:d2:07:f0:0c:60:08:76:87:d7:7f:04:21:
         08:9c:a4:21:ba:85:47:df:be:07:55:ed:dc:6f:a5:02:94:8a:
         76:de:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:50:24 2024 by rpki-client on console-fra.rpki-client.org