Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa
File:                     3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (raw, json)
Hash identifier:          c0lEeym7RdSsZ9PVuI0xHhhN0iADI7UVsii/DrQAQBY=
Subject key identifier:   4A:B7:B6:C2:18:69:10:4B:94:AF:F6:57:00:27:0F:F7:EE:27:A2:EC
Certificate issuer:       /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
Certificate serial:       132F61D8B8B197F9B212029B8ED64BA4ACF0BBEF
Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa
Signing time:             Mon 01 Jul 2024 01:05:14 +0000
ROA not before:           Mon 01 Jul 2024 01:00:14 +0000
ROA not after:            Mon 30 Jun 2025 01:05:14 +0000
asID:                     136856
IP address blocks:        103.102.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl
                          rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Feb 2025 12:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:61:d8:b8:b1:97:f9:b2:12:02:9b:8e:d6:4b:a4:ac:f0:bb:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63
        Validity
            Not Before: Jul  1 01:00:14 2024 GMT
            Not After : Jun 30 01:05:14 2025 GMT
        Subject: CN=4AB7B6C21869104B94AFF65700270FF7EE27A2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:f3:f4:7f:30:3f:25:d1:d7:eb:40:77:9e:
                    4d:83:30:79:0e:8f:fa:e2:bf:99:57:32:b2:1f:72:
                    70:0e:bb:de:e8:e6:22:1c:3c:ec:65:ae:05:e6:9b:
                    74:07:e3:af:e1:1c:d7:48:53:82:8c:0a:fc:fa:d2:
                    10:4b:67:66:72:8b:79:c2:03:32:6a:f6:85:2a:01:
                    b6:c2:f1:94:8b:97:a1:ae:f2:7f:43:7d:5d:55:17:
                    e9:b1:0f:22:0d:75:d8:54:60:43:86:d9:e0:a4:1a:
                    4c:0d:26:de:cb:f0:f2:3f:81:be:b5:93:51:3c:c2:
                    50:f0:95:53:0c:40:93:42:05:98:1d:e0:7d:ff:c8:
                    29:69:b5:18:11:0d:c6:d7:69:36:65:53:da:2c:f6:
                    bd:1c:7d:f7:10:06:80:ed:fe:e7:c1:6f:b4:42:61:
                    15:41:a7:0a:e4:12:4e:e1:92:b2:7f:a8:9c:f8:2c:
                    3b:29:b0:a5:8b:42:fe:e6:6d:f2:5a:6a:83:12:a9:
                    57:06:f8:fc:bf:00:e1:f9:b3:02:1a:90:4b:3e:78:
                    b9:f5:3b:87:ab:c9:90:22:47:36:46:f5:74:bd:fa:
                    30:3a:9a:75:18:f3:fc:af:b0:09:08:ec:12:f9:27:
                    ae:a3:bd:6b:f6:50:c1:9e:64:2e:f7:2e:f6:26:9c:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B7:B6:C2:18:69:10:4B:94:AF:F6:57:00:27:0F:F7:EE:27:A2:EC
            X509v3 Authority Key Identifier:
                keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:d1:c7:7f:67:dc:56:28:40:f6:0b:9d:7f:61:a9:c2:78:a8:
         b8:aa:8f:37:73:84:f5:0e:a8:98:26:d2:36:80:a6:fe:90:40:
         d1:b9:fb:e0:5e:0f:aa:46:ab:fe:4c:0b:37:18:0b:a1:dc:01:
         17:0b:34:22:b4:d2:38:4e:34:f9:0e:12:5b:b5:aa:81:c3:4c:
         17:fa:e3:3d:a5:7c:53:17:f2:78:76:29:fd:9e:df:41:5a:50:
         d2:d5:d8:37:92:f2:44:98:c2:0b:5c:7b:5e:ba:5b:91:84:dd:
         b0:f1:35:02:40:31:db:b7:9c:e8:43:2c:3a:81:36:77:e4:15:
         a3:d0:a8:33:23:d9:fa:c6:6f:04:53:8e:9a:12:a3:07:15:9a:
         0e:11:bd:96:94:a0:88:3b:09:b1:c4:e2:7c:86:7d:04:77:e2:
         fd:66:c4:55:fd:35:82:5a:58:e8:a2:4f:a1:da:29:f0:5c:90:
         a0:a9:3a:84:5a:ba:b9:44:a5:74:27:30:4b:1f:cf:f5:c5:52:
         36:6a:fe:88:59:94:f5:c2:36:bb:61:a6:b4:ee:cc:bd:8d:68:
         db:fe:a1:61:94:03:c2:fa:77:d3:7f:bc:38:a8:36:49:a8:51:
         65:86:10:36:bd:87:2f:18:5d:b2:18:e2:b2:53:fd:3e:8b:0a:
         51:e9:79:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:18:51 2025 by rpki-client