Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          IculMMps6zs0Rg1NCQVRWNc0Yu/mAlVofENYAOnE9yw=
Subject key identifier:   2B:FA:56:83:37:66:05:B1:4E:18:6E:5A:9D:2C:9A:76:41:78:1E:83
Certificate issuer:       /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial:       7B433029194670371715C525012291F0A550F383
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa
Signing time:             Thu 15 Feb 2024 08:01:02 +0000
ROA not before:           Thu 15 Feb 2024 07:56:02 +0000
ROA not after:            Thu 13 Feb 2025 08:01:02 +0000
asID:                     131769
IP address blocks:        103.102.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
                          rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:43:30:29:19:46:70:37:17:15:c5:25:01:22:91:f0:a5:50:f3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
        Validity
            Not Before: Feb 15 07:56:02 2024 GMT
            Not After : Feb 13 08:01:02 2025 GMT
        Subject: CN=2BFA5683376605B14E186E5A9D2C9A7641781E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4d:61:47:7c:11:3e:ef:03:8b:7d:97:47:4d:
                    cc:d9:3c:f4:d0:b8:4d:63:b7:fe:7b:d7:3c:cb:63:
                    ac:b9:7b:d9:0b:1d:2d:33:e3:65:6e:4c:76:b2:89:
                    42:04:d4:c6:37:52:c7:05:12:be:b7:ba:58:72:70:
                    b1:7e:d4:8a:7d:51:68:75:a3:eb:c1:66:b7:99:a3:
                    d7:fd:2d:1f:d3:97:ab:7c:9f:d5:62:7a:9a:7d:ad:
                    77:f2:87:78:f3:c0:26:cb:10:d3:0d:3a:5e:1b:ed:
                    35:93:8a:d2:a9:04:46:ee:34:53:49:a0:89:68:21:
                    ec:38:89:7d:aa:ac:58:9f:ef:9a:a6:d2:35:0f:13:
                    b1:d3:9c:8b:4b:5e:ae:84:46:6c:87:77:10:2c:eb:
                    6d:d2:1d:2d:ab:4e:cb:0c:d3:5c:08:c7:5c:0f:e2:
                    ae:22:6c:82:f4:ee:21:b1:76:d0:67:37:2b:24:3c:
                    cf:55:42:31:9a:22:b8:cb:1b:70:71:b9:a6:47:7a:
                    c8:5a:c0:ab:c4:e3:f9:94:af:80:61:61:b0:6c:86:
                    29:ba:c1:b8:78:0f:a5:4f:ff:4b:a6:43:38:72:bd:
                    f7:48:cf:e2:89:5d:0a:52:d1:8e:05:89:2a:b7:4f:
                    c3:9a:ea:9c:8c:c6:bd:5e:82:d1:e1:ed:7e:5c:e2:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:56:83:37:66:05:B1:4E:18:6E:5A:9D:2C:9A:76:41:78:1E:83
            X509v3 Authority Key Identifier:
                keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3130322e3234382e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7c:40:55:ea:0c:02:f2:1c:da:b2:63:4e:ed:f6:f9:a5:51:
         7e:b3:0d:93:87:99:64:e7:cf:e2:0f:98:56:a6:0e:60:2b:48:
         00:54:e6:dc:87:2e:e7:f1:d8:08:08:0a:02:6a:12:59:19:4f:
         9c:03:3a:4b:f4:d9:e1:7a:ae:ac:4b:b8:ae:1f:6d:00:76:6f:
         23:80:d0:3c:ec:25:aa:4b:88:71:6e:b0:0b:95:5b:a0:c1:4e:
         66:14:50:7a:63:72:d0:15:61:77:4b:3d:1a:98:58:1d:1a:54:
         0d:4a:78:0c:7a:b3:ed:89:63:44:3f:aa:90:4e:ab:cf:38:09:
         0e:80:46:45:b8:7c:ef:4b:d0:e0:e5:04:c4:91:b7:1b:1a:5f:
         af:f5:3c:35:da:a9:24:f3:f2:62:e0:3f:8c:9f:5d:88:4d:f3:
         54:50:19:f4:34:cb:50:b1:f9:59:a2:ae:66:6c:44:af:ef:36:
         18:ba:42:c1:02:6c:33:bb:3b:3a:8f:3d:84:91:34:c3:c1:63:
         57:0c:48:bd:6f:91:30:6a:4b:61:38:51:e5:19:2f:84:07:51:
         be:73:94:1e:5a:f8:33:d7:d1:94:76:6d:71:46:46:90:f9:19:
         9a:b3:31:33:1c:4b:03:96:ef:14:e7:a9:59:37:2a:c7:77:5a:
         8f:b6:e0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:01:04 2024 by rpki-client on console-fra.rpki-client.org