Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa
File:                     3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (raw, json)
Hash identifier:          nt+NFSr6szLyHYGILwVwvkW31SXQGA1m1TiFhW68YG0=
Subject key identifier:   4E:01:F2:31:02:07:C1:F2:C9:99:45:C3:CC:9B:51:D2:76:5C:F7:86
Certificate issuer:       /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial:       4A8969868180F477EC8181C0EE29CE79E02872A8
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa
Signing time:             Thu 14 Nov 2024 11:00:00 +0000
ROA not before:           Thu 14 Nov 2024 10:55:00 +0000
ROA not after:            Thu 13 Nov 2025 11:00:00 +0000
asID:                     55666
IP address blocks:        103.140.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
                          rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:89:69:86:81:80:f4:77:ec:81:81:c0:ee:29:ce:79:e0:28:72:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
        Validity
            Not Before: Nov 14 10:55:00 2024 GMT
            Not After : Nov 13 11:00:00 2025 GMT
        Subject: CN=4E01F2310207C1F2C99945C3CC9B51D2765CF786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:6b:49:62:85:ed:9b:ff:d2:49:cc:78:f8:
                    e3:4e:9d:e8:a8:f4:78:3d:4b:18:81:c0:46:20:ad:
                    96:af:36:b5:df:cc:dd:38:d1:10:48:85:c1:83:b5:
                    14:3e:2c:a9:f3:20:eb:88:b3:0b:0d:5f:32:d6:1c:
                    e1:88:b3:0c:13:4e:6b:9d:9b:5b:03:35:43:2f:70:
                    44:5a:64:36:61:02:d9:87:97:7b:09:6f:0f:24:8a:
                    c6:52:45:e1:58:c0:8b:9d:d7:56:ff:80:95:48:20:
                    e3:e9:13:b0:46:b2:85:2d:89:2f:d3:79:f7:46:aa:
                    da:d8:83:e2:03:b8:af:ee:b3:3c:58:df:ce:08:9f:
                    57:1f:93:dd:3b:96:ac:bc:72:86:a8:7e:9b:dd:82:
                    82:8d:55:32:96:dd:99:dd:ab:5c:e8:da:d8:3a:c7:
                    e6:af:2f:ba:d0:2a:ec:6c:90:51:8f:11:60:51:fd:
                    08:02:c8:3c:b8:2d:11:6d:9e:f1:71:c2:de:f5:cf:
                    3b:9b:30:8a:55:7f:66:b9:df:1d:f9:9c:4d:0d:13:
                    35:9d:ef:64:d9:bb:d2:dc:3f:3f:50:53:e8:22:24:
                    94:46:68:42:03:a9:ca:31:cb:7f:8a:7b:69:78:f9:
                    8a:99:36:f9:80:f7:e1:16:cd:0c:b8:42:6c:82:08:
                    15:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:F2:31:02:07:C1:F2:C9:99:45:C3:CC:9B:51:D2:76:5C:F7:86
            X509v3 Authority Key Identifier:
                keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37362e302f32342d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e1:9d:7a:8a:9f:3e:7b:79:22:b1:10:22:6a:70:53:80:e9:3a:
         44:03:91:e0:ba:e8:93:90:99:3b:bb:d1:cf:04:e3:ce:e0:5b:
         31:a6:47:f5:87:72:06:4e:05:d9:53:75:15:ab:a0:cd:dc:8a:
         e2:63:0f:d3:9c:4d:95:a2:d4:eb:b3:05:67:ed:e1:d6:fa:22:
         66:d8:23:f5:67:5a:7e:69:76:88:bf:6b:b4:74:f3:6a:5f:20:
         26:1a:66:41:e6:04:24:c2:71:a9:6f:e1:49:86:91:f2:06:1e:
         9b:b1:56:7e:bb:35:a7:1f:ab:21:c1:9e:b2:a1:ba:90:a0:8b:
         e8:09:46:ba:62:a4:c0:29:90:c5:61:f7:97:4f:03:c8:36:46:
         5c:b6:44:42:1f:fc:c4:6d:bc:d4:f3:48:2a:78:1b:34:2e:88:
         e7:ce:79:9d:c2:55:50:7a:2a:4f:f7:18:46:01:00:ed:db:c3:
         a2:04:f2:0b:c7:1a:05:fb:31:2a:2c:5d:79:96:b3:ce:25:78:
         f2:aa:cf:30:67:53:32:d4:41:ac:6a:74:0d:9e:00:f0:30:99:
         4b:ed:a2:28:4c:d9:97:82:dc:10:64:b9:09:ba:dc:43:ca:50:
         05:93:51:4d:11:83:ef:8f:c3:65:6f:6e:4e:ba:74:b1:9d:e1:
         8a:29:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org