Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa
File:                     3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (raw, json)
Hash identifier:          k7Ees2MuDZL3isOrDBSm9fm5rw/2tfy3j8q75632Vk8=
Subject key identifier:   15:BD:27:E6:B9:63:4E:6F:6B:A6:DE:68:50:62:C8:FC:D0:4E:82:22
Certificate issuer:       /CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
Certificate serial:       3C90BF4E5D3FFD639EDB482FB52BDF6280912CB5
Authority key identifier: 35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa
Signing time:             Thu 14 Nov 2024 10:00:00 +0000
ROA not before:           Thu 14 Nov 2024 09:55:00 +0000
ROA not after:            Thu 13 Nov 2025 10:00:00 +0000
asID:                     55666
IP address blocks:        103.140.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl
                          rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:90:bf:4e:5d:3f:fd:63:9e:db:48:2f:b5:2b:df:62:80:91:2c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35E6B2357C98B974C14BA8A5DE46B519083666C6
        Validity
            Not Before: Nov 14 09:55:00 2024 GMT
            Not After : Nov 13 10:00:00 2025 GMT
        Subject: CN=15BD27E6B9634E6F6BA6DE685062C8FCD04E8222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:d3:7a:da:cc:a0:03:3e:f2:ad:d4:70:8a:
                    01:ed:42:cd:ef:35:c5:15:d8:25:1a:e8:89:88:05:
                    8b:bd:a5:80:54:ef:1f:fd:b2:fc:f2:06:55:15:e4:
                    7d:39:2e:a6:2f:94:0b:1b:34:8d:92:ff:0a:70:fd:
                    2e:31:de:7d:e2:57:c6:6f:91:3f:e1:c3:e0:f0:2d:
                    cc:c1:04:6a:54:a3:7b:3e:47:26:48:59:2c:3e:10:
                    f2:38:0a:ae:5a:94:58:21:b9:45:38:67:73:f9:8f:
                    db:18:60:44:ef:0f:55:af:4d:4b:47:4a:ff:01:89:
                    9a:3d:53:98:6e:b0:ec:ed:3b:2d:f6:5a:a7:ea:db:
                    35:c7:c5:2c:1b:a4:c8:c9:33:27:f4:ee:99:f9:f6:
                    81:de:98:c5:37:62:f3:7e:13:68:05:7e:6a:94:56:
                    e9:f6:d9:c1:e9:0c:71:07:1a:9e:d7:cd:91:e5:fd:
                    60:d5:b6:94:4e:f0:3b:3d:d0:77:b5:5d:78:f8:06:
                    2d:b8:94:7c:da:72:8d:c2:53:75:26:7a:31:c5:e5:
                    6b:01:19:33:47:3c:b3:20:4d:97:3e:df:f4:ed:f0:
                    fe:bb:01:82:f2:5b:31:b7:56:83:e6:6e:44:68:a9:
                    10:78:03:e5:7a:7f:8c:0a:b3:51:00:04:43:7a:1a:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BD:27:E6:B9:63:4E:6F:6B:A6:DE:68:50:62:C8:FC:D0:4E:82:22
            X509v3 Authority Key Identifier:
                keyid:35:E6:B2:35:7C:98:B9:74:C1:4B:A8:A5:DE:46:B5:19:08:36:66:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/35E6B2357C98B974C14BA8A5DE46B519083666C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/35E6B2357C98B974C14BA8A5DE46B519083666C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:36:b5:fd:df:f4:9d:3d:d6:13:6c:c2:27:a8:d4:e0:21:dc:
         5e:b7:a5:c0:99:f2:d2:49:8e:39:c1:9d:21:23:b5:55:c6:dc:
         b0:59:e3:89:3c:6e:89:98:5d:19:f6:41:90:3e:6d:95:b9:2d:
         9d:fb:99:df:6e:02:e4:c5:58:6a:5a:8f:60:6a:8b:10:a1:3f:
         6b:e6:bd:b7:4f:35:af:24:4b:dd:db:dc:4f:6d:92:ec:e5:9c:
         c2:d4:ae:f0:7a:f0:f1:ac:08:6b:9a:4f:4c:54:31:bb:13:a1:
         ec:95:08:f3:03:45:ac:20:30:64:f5:07:89:3c:cd:97:f6:55:
         eb:2b:51:3d:76:ad:d3:df:85:80:b8:86:37:1f:2d:ea:99:13:
         2b:7c:e9:0b:98:24:e0:53:16:ca:19:6d:a8:1f:cc:84:7b:72:
         aa:e6:24:c4:37:6f:cf:5f:a6:ff:47:88:ef:08:f9:83:ae:b6:
         c8:c0:f7:36:70:7f:e6:71:c0:ca:8c:8d:bd:c8:18:ce:09:3e:
         c8:48:a6:a7:cc:7b:9c:5c:02:86:85:27:da:72:3c:d1:91:9b:
         4c:cd:3d:ea:0b:6b:4c:60:46:7d:b8:af:6e:27:a8:ef:e4:29:
         33:12:3e:dd:5a:6f:a6:9a:30:97:1b:b1:14:64:62:8f:0c:b7:
         59:b7:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org