Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa
File:                     3130332e35322e36342e302f32322d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          RhnAglA8QyYd31K+JdMyBn324yBkuZx/AeG3PD6PGWw=
Subject key identifier:   36:54:5B:9A:BB:42:53:6E:B1:FB:A8:D3:17:7D:1B:AD:11:3D:C7:D4
Certificate issuer:       /CN=91982855FD8C4C119B32F9D536B640804091001C
Certificate serial:       654B1104C80F6F40D32020810798314F8CDB5725
Authority key identifier: 91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa
Signing time:             Sun 19 May 2024 04:00:01 +0000
ROA not before:           Sun 19 May 2024 03:55:01 +0000
ROA not after:            Sun 18 May 2025 04:00:01 +0000
asID:                     131735
IP address blocks:        103.52.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl
                          rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:11:04:c8:0f:6f:40:d3:20:20:81:07:98:31:4f:8c:db:57:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91982855FD8C4C119B32F9D536B640804091001C
        Validity
            Not Before: May 19 03:55:01 2024 GMT
            Not After : May 18 04:00:01 2025 GMT
        Subject: CN=36545B9ABB42536EB1FBA8D3177D1BAD113DC7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:11:ba:5b:4a:28:7c:a8:d6:b6:e3:09:92:
                    e9:84:3e:49:a4:a6:1c:8c:42:77:5c:33:95:88:65:
                    02:0c:26:c6:ba:5c:7b:c6:33:91:ed:77:77:e1:0c:
                    6f:11:09:5a:5b:b3:af:f4:5f:16:40:0a:36:0f:06:
                    7b:bf:d7:b4:8c:82:9c:b2:a1:3c:7b:44:d0:30:bb:
                    22:02:8c:ec:4d:4b:86:c0:6e:0d:34:f2:8d:3f:0a:
                    1c:37:0c:47:81:6e:b2:e0:58:40:be:58:20:80:b6:
                    1a:b5:5d:a6:f6:6c:54:f7:42:8f:c5:6f:ca:70:ea:
                    6b:86:15:80:e5:3a:a9:81:16:ca:8f:cd:21:39:65:
                    58:e9:9a:43:ba:b5:85:d3:9b:5d:e1:a5:01:d3:fd:
                    f3:9f:ec:2a:e2:ca:f2:20:62:ce:48:78:72:cc:41:
                    96:b9:ac:ca:fa:29:f5:47:ee:a5:88:f0:cc:8d:45:
                    48:02:78:53:6a:6c:16:12:ef:e6:f5:9d:1c:53:3e:
                    f7:06:40:37:2f:24:58:9c:6c:ea:69:c5:a5:cd:a1:
                    72:04:8b:c8:ac:7d:44:76:97:65:f7:b6:a3:23:ea:
                    63:e8:6a:83:ae:42:64:a7:d6:f7:a9:7b:ad:8a:81:
                    a5:17:a5:61:96:69:bd:ab:0b:52:21:24:aa:b1:0b:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:5B:9A:BB:42:53:6E:B1:FB:A8:D3:17:7D:1B:AD:11:3D:C7:D4
            X509v3 Authority Key Identifier:
                keyid:91:98:28:55:FD:8C:4C:11:9B:32:F9:D5:36:B6:40:80:40:91:00:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/91982855FD8C4C119B32F9D536B640804091001C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91982855FD8C4C119B32F9D536B640804091001C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c2c4948-687b-4020-87f4-28ee4b63aa47/0/3130332e35322e36342e302f32322d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:d1:f1:c4:11:4c:77:f3:1a:fb:96:3b:29:21:24:aa:d3:64:
         4d:e1:c8:fa:ef:d2:1e:e5:fa:af:c9:a7:ed:d3:59:18:85:76:
         04:db:74:4c:a8:80:65:6e:e1:b9:2a:d2:82:f1:b2:85:5c:ba:
         3c:d2:8b:3f:ab:cc:37:60:f8:56:0d:67:74:84:ac:45:5b:c3:
         cf:c3:c0:ef:f8:0a:46:2d:45:0c:0c:cd:ae:55:7a:a5:a8:14:
         ca:b1:fe:17:09:ec:8f:03:f7:5a:65:68:21:c1:37:c8:4c:43:
         0d:e7:3d:c7:6a:2b:1b:bc:94:bd:f6:cf:bd:24:18:3f:5b:8b:
         75:d5:b6:1c:7a:13:ea:66:49:de:e2:df:0b:4b:f4:bc:d6:99:
         a0:d7:d7:11:76:07:ad:50:cf:d8:47:94:5e:78:f4:a2:b8:e4:
         e9:66:59:f4:a4:2e:ec:de:e8:1a:66:47:36:74:ce:04:04:c9:
         91:1a:32:c1:d3:4b:b0:d7:2f:69:39:ab:0e:c5:ae:b6:1a:84:
         70:af:33:31:b1:99:95:25:fe:39:62:55:b2:1b:00:74:d3:b4:
         82:88:63:7d:08:a7:b5:16:69:f7:9a:66:e0:0a:c5:9d:47:d3:
         b2:bf:fa:6b:8f:6c:41:19:a4:59:7e:91:5b:08:94:99:43:33:
         43:a5:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:12 2024 by rpki-client on console-fra.rpki-client.org