Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa
File:                     3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (raw, json)
Hash identifier:          iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=
Subject key identifier:   5E:9E:FA:62:19:24:24:49:0E:DC:41:11:4A:E2:53:71:BF:ED:BD:7B
Certificate issuer:       /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
Certificate serial:       7221A6EF8C0A80A3DABCA453DE5ED05807C6F646
Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa
Signing time:             Wed 23 Oct 2024 08:00:01 +0000
ROA not before:           Wed 23 Oct 2024 07:55:01 +0000
ROA not after:            Wed 22 Oct 2025 08:00:01 +0000
asID:                     135450
IP address blocks:        103.65.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl
                          rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:21:a6:ef:8c:0a:80:a3:da:bc:a4:53:de:5e:d0:58:07:c6:f6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86
        Validity
            Not Before: Oct 23 07:55:01 2024 GMT
            Not After : Oct 22 08:00:01 2025 GMT
        Subject: CN=5E9EFA62192424490EDC41114AE25371BFEDBD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b7:d2:20:53:99:fa:3d:a7:4c:0e:39:28:ba:
                    ab:75:a8:99:48:bc:81:1d:d3:e9:41:f5:53:63:c0:
                    f1:25:6b:55:3d:b6:a5:1a:c3:70:44:6b:76:12:4f:
                    14:a5:3e:04:ae:dc:2c:16:e5:bd:f9:be:b9:f5:c9:
                    cb:2f:e0:2c:1e:2f:98:22:e7:f6:79:31:03:83:4c:
                    0a:c8:dd:2e:8c:63:93:fa:b2:4e:bf:18:69:ec:c8:
                    81:ce:31:83:bf:69:9f:d4:6a:e8:2c:6c:a2:d9:58:
                    f3:1c:e6:10:48:aa:53:6e:b2:41:62:d7:a1:d2:5c:
                    94:71:7c:f2:db:2b:a5:16:ee:10:7f:31:ee:b6:71:
                    53:3a:43:b8:5a:1f:cf:98:37:05:26:18:c4:4d:a0:
                    dd:e4:97:a8:ba:92:9e:5d:2e:8b:fb:56:e2:df:72:
                    f9:48:59:d0:1e:10:91:e2:4d:f5:ed:a7:e8:bb:92:
                    43:fc:14:fb:79:9b:fc:1c:e5:41:a3:36:1f:82:86:
                    a0:7f:30:27:50:b1:5f:a3:2e:ad:57:36:2b:70:68:
                    78:cb:ad:c0:d7:ad:65:6c:76:56:74:11:50:0f:0d:
                    38:c2:6a:35:31:03:a5:6a:20:5a:9d:98:5a:f7:b1:
                    92:1d:c4:cb:26:1c:8a:d6:e2:a4:08:15:f2:44:ab:
                    36:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9E:FA:62:19:24:24:49:0E:DC:41:11:4A:E2:53:71:BF:ED:BD:7B
            X509v3 Authority Key Identifier:
                keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:78:70:ba:bf:60:6b:87:1d:ba:3c:95:66:57:b9:63:87:
         41:25:2b:36:b6:36:a1:71:4d:7d:e5:11:85:7b:70:9f:c5:c0:
         1c:c4:f8:f2:b0:02:be:53:e8:7b:b5:52:04:02:2a:47:c1:14:
         7c:05:30:21:53:f9:80:8b:81:b0:6e:8f:cf:ed:e8:d1:4e:2f:
         77:32:f1:7a:68:e1:11:db:00:22:32:8b:6a:5f:7c:ee:47:e5:
         a5:bd:cf:e9:ac:a6:8f:b5:a3:02:a4:93:b0:d7:08:8a:06:2f:
         3e:03:c6:37:f6:e2:b7:0a:af:7a:2a:7b:86:ae:4d:6f:c3:d3:
         4f:b1:dc:eb:ec:22:cf:19:56:df:55:2b:1a:a8:d8:5c:af:bb:
         57:1a:99:fc:fe:51:2f:d1:ef:c0:10:c6:ea:70:45:76:2e:4a:
         4d:57:96:16:87:e0:87:33:ff:76:0b:0d:43:82:90:0d:a4:83:
         aa:95:b1:e4:5a:d4:31:3d:73:16:73:3b:07:3c:57:6f:91:4b:
         e0:13:9a:03:2a:e3:0e:8a:9d:16:89:3c:44:66:59:f3:51:a6:
         31:a5:71:6b:90:eb:d1:d2:6b:07:8c:46:26:09:44:dd:f6:8b:
         21:75:2c:a6:29:54:ec:9c:46:48:d2:74:a5:93:a9:7c:40:a9:
         01:f0:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org