Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa
File:                     3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa (raw, json)
Hash identifier:          UjeN5fw/1m10SCXn+GY7wWvzEEELLNa3lmsJjvP9m2o=
Subject key identifier:   B5:90:25:E0:0D:87:61:59:E8:B3:32:9C:75:62:4E:DE:6F:80:E0:18
Certificate issuer:       /CN=35369AC685201508541197F86A8FDAC2375BE30A
Certificate serial:       72DA8F587E504E43533D7139B2432DF534823409
Authority key identifier: 35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa
Signing time:             Thu 15 Feb 2024 08:01:02 +0000
ROA not before:           Thu 15 Feb 2024 07:56:02 +0000
ROA not after:            Thu 13 Feb 2025 08:01:02 +0000
asID:                     131769
IP address blocks:        103.116.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl
                          rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:da:8f:58:7e:50:4e:43:53:3d:71:39:b2:43:2d:f5:34:82:34:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35369AC685201508541197F86A8FDAC2375BE30A
        Validity
            Not Before: Feb 15 07:56:02 2024 GMT
            Not After : Feb 13 08:01:02 2025 GMT
        Subject: CN=B59025E00D876159E8B3329C75624EDE6F80E018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:16:66:9a:4f:3f:69:29:dc:e8:84:55:b6:
                    4b:48:f0:68:3c:44:f9:6c:ce:c7:98:13:85:50:48:
                    e6:33:f0:f2:97:38:15:59:78:16:e0:d6:28:2a:19:
                    dd:ad:5c:93:8d:78:47:51:90:52:e3:4d:5f:85:0b:
                    dc:3c:5e:77:b5:f2:54:a0:ec:c1:e0:69:de:af:c6:
                    58:ea:eb:9d:1e:5a:46:38:cd:ad:73:a6:a0:8c:a0:
                    bb:e7:8d:4c:6f:3e:8c:c7:e8:47:4a:5d:cc:e2:b3:
                    72:92:d8:b8:ea:ae:56:4e:b7:f3:81:15:a5:ca:84:
                    8e:85:c2:2b:06:8a:1f:4a:7f:39:ef:a3:2d:5a:e6:
                    0b:b2:ee:ec:9f:e3:6a:60:6e:8f:4e:8d:04:49:d1:
                    d8:73:14:e5:9a:ef:86:bd:89:fb:59:15:56:12:8b:
                    cd:c7:89:19:dd:98:2f:5d:67:14:a6:81:5e:65:c5:
                    77:0d:03:37:b6:8e:6c:11:de:8c:9b:93:b6:59:b7:
                    eb:24:0d:d2:04:2c:87:41:ed:66:ed:fc:02:35:07:
                    d4:54:5f:86:74:db:58:09:09:3b:0c:59:42:05:ce:
                    fd:6e:d4:af:0f:14:60:14:09:3c:6f:e9:83:52:44:
                    bc:c9:d1:aa:51:27:2d:10:6d:35:f3:89:e9:6e:e0:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:90:25:E0:0D:87:61:59:E8:B3:32:9C:75:62:4E:DE:6F:80:E0:18
            X509v3 Authority Key Identifier:
                keyid:35:36:9A:C6:85:20:15:08:54:11:97:F8:6A:8F:DA:C2:37:5B:E3:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/35369AC685201508541197F86A8FDAC2375BE30A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35369AC685201508541197F86A8FDAC2375BE30A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e4aca3c-63dc-4c1b-a7e8-acbae821cde5/0/3130332e3131362e31332e302f32342d3234203d3e20313331373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:40:2f:4e:c7:d2:78:81:41:2b:ff:c3:c1:46:00:d6:7c:fd:
         2c:f9:dd:f3:2f:b1:0a:d5:81:1b:04:75:e5:cd:a8:89:13:7a:
         48:34:48:52:f1:16:d6:58:7a:e8:03:50:c3:5f:97:8d:fb:62:
         78:4d:30:30:15:8c:63:0a:21:2f:02:bf:1b:62:33:47:fc:13:
         40:15:64:bd:03:fc:07:37:04:b9:2d:a8:f1:c3:88:1e:1f:6f:
         eb:66:a4:e8:76:30:96:20:cd:0b:e5:f3:06:b8:fc:10:b3:ee:
         03:33:03:1a:19:83:ff:0f:09:ea:87:ba:5e:59:22:e5:ff:b5:
         fb:67:dc:cb:b2:9f:25:df:1c:cd:3e:b8:47:c8:d4:74:ce:23:
         19:78:cb:1e:9a:92:0e:95:f1:1f:4a:0d:3f:47:46:db:98:8f:
         e4:72:5d:57:30:4f:05:ed:b3:70:91:f7:0e:0d:4c:31:8e:a0:
         7e:82:9a:fa:54:b3:cc:7f:59:86:c3:45:c2:ab:a1:9d:c3:82:
         ad:a4:98:83:76:e4:f2:16:58:13:87:52:99:d8:d6:1c:30:77:
         49:e9:b6:e5:58:0c:fe:86:ac:8f:5d:1a:7b:19:56:90:aa:43:
         39:66:c9:35:ce:81:e2:8c:e1:c5:07:db:f2:07:b5:0b:11:31:
         d0:36:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org