Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa
File:                     3130332e39352e382e302f32322d3232203d3e20313335343838.roa (raw, json)
Hash identifier:          EeTeCI0Kq1pjAV5T/goPwQvLXbaYvglVFmHWdRixvt4=
Subject key identifier:   C8:31:88:8F:22:A4:A8:65:4E:A2:AB:BD:C1:E4:3D:F2:5B:23:45:24
Certificate issuer:       /CN=415543D423E0BD035D612DEA9BF060290E5552D2
Certificate serial:       686C583755AF51F57645CBB7F63EB6D52F3E21DF
Authority key identifier: 41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa
Signing time:             Mon 25 Mar 2024 04:00:00 +0000
ROA not before:           Mon 25 Mar 2024 03:55:00 +0000
ROA not after:            Mon 24 Mar 2025 04:00:00 +0000
asID:                     135488
IP address blocks:        103.95.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl
                          rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6c:58:37:55:af:51:f5:76:45:cb:b7:f6:3e:b6:d5:2f:3e:21:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415543D423E0BD035D612DEA9BF060290E5552D2
        Validity
            Not Before: Mar 25 03:55:00 2024 GMT
            Not After : Mar 24 04:00:00 2025 GMT
        Subject: CN=C831888F22A4A8654EA2ABBDC1E43DF25B234524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:f6:41:89:6c:f1:56:2f:6e:d0:0b:99:59:
                    84:25:cb:a0:ef:66:4a:51:07:63:98:07:7b:5c:0f:
                    a2:57:63:e8:4c:57:7d:5e:aa:bb:72:ab:f1:33:33:
                    06:ff:c5:d1:da:d2:25:ae:75:fd:71:dd:29:1e:98:
                    b0:49:e7:1c:85:28:ef:3f:d4:d7:3c:66:c8:ee:4f:
                    bf:a0:c1:ef:34:86:bf:cc:80:bb:cc:73:ad:a5:d2:
                    55:64:72:4a:d3:e5:13:56:f4:0d:79:6d:5c:de:ea:
                    c3:63:97:ae:8a:56:02:9d:4d:a5:7f:07:dc:c6:3c:
                    9f:8f:e6:29:7e:05:95:19:4d:ff:1a:05:fb:ef:a3:
                    9f:2e:2c:38:8d:95:0b:2e:be:ff:72:6f:e6:cc:50:
                    98:c9:51:0d:ee:7f:90:78:6c:45:d6:43:c5:80:00:
                    d6:be:5d:8d:75:81:74:17:c7:b5:df:37:d0:03:43:
                    c0:fc:08:68:5b:41:09:41:78:03:4a:12:39:66:e0:
                    b2:b5:77:79:59:ce:ad:ea:16:94:c4:da:df:61:84:
                    ef:f8:c7:7c:c7:39:11:c7:b8:d1:6a:79:f1:1e:0a:
                    e6:8d:ce:d1:ac:29:ea:54:50:27:3b:40:01:7a:4b:
                    92:ba:f4:2a:09:8c:ac:1e:a3:22:2e:13:29:cc:80:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:31:88:8F:22:A4:A8:65:4E:A2:AB:BD:C1:E4:3D:F2:5B:23:45:24
            X509v3 Authority Key Identifier:
                keyid:41:55:43:D4:23:E0:BD:03:5D:61:2D:EA:9B:F0:60:29:0E:55:52:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/415543D423E0BD035D612DEA9BF060290E5552D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/415543D423E0BD035D612DEA9BF060290E5552D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a36465ec-9160-459b-8d11-948fc26da1c0/0/3130332e39352e382e302f32322d3232203d3e20313335343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:43:b9:ac:be:62:2c:ef:45:b8:67:80:17:9c:1c:af:55:6f:
         32:a8:ab:22:b6:a0:fb:c2:91:6e:50:c2:0b:31:8c:17:be:f2:
         1d:b9:cd:a2:dc:71:11:3b:85:2c:2d:1b:07:bd:98:48:61:fa:
         b5:a0:88:57:fb:dd:f2:87:f7:f7:63:0c:19:a9:d5:f0:c6:d4:
         4b:fb:c5:de:49:b1:3c:23:58:ef:4f:11:a8:e6:e0:4b:37:7b:
         cc:3a:cd:86:f5:ee:d6:e1:8a:cc:fd:f5:c4:81:49:43:99:76:
         45:2a:b0:5b:e1:24:f5:ca:00:91:62:b5:a6:1f:b4:4b:b1:67:
         53:d6:f4:bf:e5:76:7e:3c:f1:5e:50:96:a8:b2:33:87:90:78:
         46:da:e8:08:2c:fe:df:65:af:09:f4:87:c0:8e:6e:8a:32:24:
         59:cf:b4:41:a6:09:25:c3:08:e6:5a:cf:54:61:92:f8:24:ca:
         be:b1:f1:9d:75:3b:93:a3:1d:bc:dd:b2:36:2d:66:0a:07:cb:
         aa:40:c8:05:57:bf:13:17:e3:3a:ae:4e:ba:59:a0:96:89:ba:
         f1:59:1f:c1:b5:62:d5:9b:c1:f0:e9:70:15:57:ed:58:98:53:
         fc:2b:1f:e7:89:0b:c0:a9:1c:83:0b:e0:fb:b9:7b:d1:4e:ed:
         08:87:74:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org