Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa
File:                     3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          vIoYf95zFnxr19xLZuf1zv5afNxdRkpaZHw47Y8rMsw=
Subject key identifier:   27:F9:84:44:9C:36:2F:08:E0:38:C6:33:70:F6:A4:F2:AB:21:4B:D9
Certificate issuer:       /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
Certificate serial:       0A5858DD3546D0E2B7B66B3BBBA86ED380527925
Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa
Signing time:             Thu 13 Jul 2023 10:00:01 +0000
ROA not before:           Thu 13 Jul 2023 09:55:01 +0000
ROA not after:            Thu 11 Jul 2024 10:00:01 +0000
asID:                     131736
IP address blocks:        103.132.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl
                          rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:58:58:dd:35:46:d0:e2:b7:b6:6b:3b:bb:a8:6e:d3:80:52:79:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A
        Validity
            Not Before: Jul 13 09:55:01 2023 GMT
            Not After : Jul 11 10:00:01 2024 GMT
        Subject: CN=27F984449C362F08E038C63370F6A4F2AB214BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:e1:e6:ff:40:db:3c:d5:2e:80:54:07:ef:
                    74:17:99:2f:53:60:92:b1:f1:fb:8e:27:32:74:15:
                    86:db:6c:b4:c8:21:06:ed:4c:39:0c:8c:40:ed:cc:
                    33:73:76:8c:e6:24:7d:cc:8d:36:4b:39:a5:7f:af:
                    6e:9c:00:89:a7:f2:bb:07:73:d1:b8:06:2b:ed:20:
                    df:c8:52:59:28:a1:d5:54:37:cc:5a:4c:84:ea:00:
                    9c:b3:e9:03:1c:eb:8f:3c:87:f9:97:52:9b:a1:e3:
                    41:76:b7:5b:c5:c8:4b:8f:2c:c2:98:40:49:48:37:
                    2c:24:83:18:10:c0:4f:5a:42:62:32:39:81:ff:fb:
                    7f:50:41:f2:a3:60:c8:27:3f:b3:0d:3f:a4:02:e6:
                    80:76:2f:f8:d8:c5:2c:9a:90:97:d7:8b:3a:15:ed:
                    0f:fd:f8:c7:5c:75:e2:47:14:56:37:ad:17:aa:dd:
                    fc:51:b7:72:b5:f8:00:24:31:fc:07:33:6c:7d:ab:
                    04:58:ab:70:d9:aa:8a:fc:b6:8d:e2:e5:d1:82:a0:
                    e7:4f:4e:d2:5d:87:a0:e0:88:d1:2d:42:6d:88:3e:
                    9c:70:7e:92:52:a4:23:d9:b6:fa:1a:82:3c:e4:8a:
                    77:7d:6d:f8:09:f8:9d:4e:a3:82:a9:58:e7:4e:ab:
                    80:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F9:84:44:9C:36:2F:08:E0:38:C6:33:70:F6:A4:F2:AB:21:4B:D9
            X509v3 Authority Key Identifier:
                keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:80:a2:56:44:bc:26:4f:c7:26:45:2d:88:c3:9d:13:3c:
         19:5c:d0:cc:40:e1:e9:98:5c:19:ee:60:f8:79:4e:8e:00:d6:
         d1:d8:06:55:13:0c:46:64:9b:e6:63:93:fc:2a:55:60:cc:38:
         15:ed:c1:22:02:bf:f7:0a:77:6c:f7:da:28:49:2d:20:20:ab:
         a1:bf:5e:66:28:e8:34:82:23:7e:80:94:ff:08:d0:ec:52:2e:
         fa:c8:96:c7:51:69:59:17:9a:06:0f:41:58:14:7d:be:1e:12:
         78:f3:a6:9c:52:30:7f:2e:de:02:6b:81:88:28:1f:5a:09:d8:
         ac:29:46:0a:80:a9:94:36:17:fc:61:d4:7e:7a:67:f7:f9:77:
         5b:c8:7d:ac:f7:8e:29:c1:b4:bc:fa:24:3c:4b:68:4b:eb:89:
         9f:88:d9:46:71:0f:c6:09:48:ae:00:1e:17:25:73:e3:0b:89:
         87:cc:be:27:31:b3:05:ce:75:54:07:6e:f4:bc:dd:04:79:70:
         42:16:1b:13:6b:21:8d:4b:6d:1b:f1:fe:e3:ad:62:33:a7:57:
         5e:43:1f:8e:d1:31:92:f1:f8:62:f3:3e:0f:ce:ed:3f:d2:8b:
         17:2a:13:66:6b:3e:d1:43:c1:f0:0e:83:8e:c7:c8:98:ec:f0:
         1d:cb:94:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:43 2024 by rpki-client on console-fra.rpki-client.org