Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135479.roa
File:                     AS135479.roa (raw, json)
Hash identifier:          588AAC3voNhKus2BoDPhO4D+81JwDVt2lTtCvwFUU/M=
Subject key identifier:   44:51:24:5D:B2:E7:34:22:42:23:B5:49:40:C4:8D:CC:68:82:B2:E6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       26A022F2104973CA76D2011176D399250729E880
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135479.roa
Signing time:             Tue 10 Dec 2024 05:00:19 +0000
ROA not before:           Tue 10 Dec 2024 04:55:19 +0000
ROA not after:            Tue 09 Dec 2025 05:00:19 +0000
asID:                     135479
IP address blocks:        103.75.232.0/24 maxlen: 24
                          103.75.233.0/24 maxlen: 24
                          103.75.234.0/24 maxlen: 24
                          103.75.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a0:22:f2:10:49:73:ca:76:d2:01:11:76:d3:99:25:07:29:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 04:55:19 2024 GMT
            Not After : Dec  9 05:00:19 2025 GMT
        Subject: CN=4451245DB2E734224223B54940C48DCC6882B2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:0e:6b:33:76:69:9e:c1:27:c0:80:dd:06:
                    27:39:ae:0b:02:61:34:23:4f:24:21:91:bb:64:61:
                    ed:d4:1e:c9:27:71:e9:82:77:95:54:0e:f1:d0:14:
                    77:fc:e1:a6:7d:7d:33:29:bd:dd:ca:cb:f2:42:b4:
                    cf:b8:6a:5c:21:4d:02:cc:b5:91:09:02:68:54:f8:
                    6e:6e:af:64:ef:6b:a6:fc:c7:39:8c:dd:d5:6f:a4:
                    53:03:6b:43:cd:59:76:53:08:87:43:c3:34:ed:05:
                    93:31:13:ee:cf:28:4b:22:56:a4:53:c4:8f:95:de:
                    7c:b8:8f:58:6c:03:ab:20:11:2d:20:c2:9a:4e:f3:
                    e2:42:d0:90:ee:22:43:f7:db:0b:c5:2e:54:b8:84:
                    0d:24:45:9b:07:c4:ae:70:94:91:e3:f6:9b:95:38:
                    b9:c2:6d:be:d4:75:7b:cc:50:01:79:c5:74:9f:c1:
                    60:f1:94:bc:0d:5f:e8:e0:c3:47:f4:10:cb:f6:9a:
                    4e:de:57:11:df:a7:b1:e6:b1:87:0d:6c:7a:2e:73:
                    96:ba:b5:94:73:c7:12:c3:b0:37:2c:6b:af:eb:2a:
                    37:b5:4d:45:09:1f:12:e2:95:dc:56:7b:92:c4:9d:
                    a0:24:58:10:d4:3e:84:cf:04:9b:ed:61:de:32:4d:
                    a0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:51:24:5D:B2:E7:34:22:42:23:B5:49:40:C4:8D:CC:68:82:B2:E6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS135479.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:40:73:54:5e:15:4c:34:dd:cb:d0:9d:7f:c8:50:ab:a7:0e:
         f5:98:73:a1:8c:11:a8:15:38:a6:b2:38:2a:c6:bb:01:58:c9:
         25:49:db:e5:2f:42:39:2f:d3:29:30:0b:2e:1e:fa:d7:57:b7:
         a6:1f:55:f4:8c:9c:90:37:95:97:0e:de:33:f2:0b:c7:2a:64:
         55:56:f9:7d:9a:05:59:b5:75:65:d0:ac:6d:e1:99:a6:3d:52:
         cd:0b:45:d2:5b:d6:eb:af:f1:52:50:31:28:4a:7e:8f:57:49:
         e7:6a:e1:fe:1e:ad:6b:29:fa:d3:50:71:79:31:0a:2c:ca:c5:
         88:18:ca:62:23:aa:f2:b7:3f:09:18:65:91:3d:10:1a:b6:27:
         a6:bb:8a:93:94:0e:1e:db:1a:cb:48:e3:d6:58:dd:95:cc:7d:
         99:6e:0b:7d:1c:d4:c0:16:58:be:78:94:9e:8d:5e:b3:52:63:
         68:30:83:27:2e:ac:94:8c:36:4b:dd:e6:59:d9:52:f8:e0:06:
         15:51:a9:33:05:97:3f:7f:a3:df:19:fb:f6:4a:36:97:30:b1:
         54:f5:9d:42:64:e2:36:db:df:c1:5b:0a:3b:21:91:33:4b:4c:
         82:79:34:d1:ec:ad:ab:11:92:36:12:63:d5:90:29:8a:40:0b:
         17:79:c5:b8
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUJqAi8hBJc8p20gERdtOZJQcp6IAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDA0NTUxOVoX
DTI1MTIwOTA1MDAxOVowMzExMC8GA1UEAxMoNDQ1MTI0NURCMkU3MzQyMjQyMjNC
NTQ5NDBDNDhEQ0M2ODgyQjJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsMDmszdmmewSfAgN0GJzmuCwJhNCNPJCGRu2Rh7dQeySdx6YJ3lVQO8dAU
d/zhpn19Mym93crL8kK0z7hqXCFNAsy1kQkCaFT4bm6vZO9rpvzHOYzd1W+kUwNr
Q81ZdlMIh0PDNO0FkzET7s8oSyJWpFPEj5XefLiPWGwDqyARLSDCmk7z4kLQkO4i
Q/fbC8UuVLiEDSRFmwfErnCUkeP2m5U4ucJtvtR1e8xQAXnFdJ/BYPGUvA1f6ODD
R/QQy/aaTt5XEd+nseaxhw1sei5zlrq1lHPHEsOwNyxrr+sqN7VNRQkfEuKV3FZ7
ksSdoCRYENQ+hM8Em+1h3jJNoEkCAwEAAaOCAdAwggHMMB0GA1UdDgQWBBREUSRd
suc0IkIjtUlAxI3MaIKy5jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNTQ3OS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAmdL6DANBgkqhkiG9w0BAQsFAAOCAQEAAkBzVF4VTDTdy9Cdf8hQ
q6cO9ZhzoYwRqBU4prI4Ksa7AVjJJUnb5S9COS/TKTALLh7611e3ph9V9IyckDeV
lw7eM/ILxypkVVb5fZoFWbV1ZdCsbeGZpj1SzQtF0lvW66/xUlAxKEp+j1dJ52rh
/h6tayn601BxeTEKLMrFiBjKYiOq8rc/CRhlkT0QGrYnpruKk5QOHtsay0jj1ljd
lcx9mW4LfRzUwBZYvniUno1es1JjaDCDJy6slIw2S93mWdlS+OAGFVGpMwWXP3+j
3xn79ko2lzCxVPWdQmTiNtvfwVsKOyGRM0tMgnk00eytqxGSNhJj1ZApikALF3nF
uA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:02 2025 by rpki-client