Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          xqSeg2IKk1bhIqDJq/ppeMqqDdTbglDK57PkVnYRRns=
Subject key identifier:   17:47:B8:E3:A3:1F:8F:FF:2B:76:48:2C:7D:6C:61:05:D2:C8:CA:F7
Certificate issuer:       /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
Certificate serial:       3C3EFD755634DA65639E4D5E7C893E40C0F05621
Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa
Signing time:             Wed 15 May 2024 06:00:56 +0000
ROA not before:           Wed 15 May 2024 05:55:56 +0000
ROA not after:            Wed 14 May 2025 06:00:56 +0000
asID:                     38320
IP address blocks:        103.135.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl
                          rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3e:fd:75:56:34:da:65:63:9e:4d:5e:7c:89:3e:40:c0:f0:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401
        Validity
            Not Before: May 15 05:55:56 2024 GMT
            Not After : May 14 06:00:56 2025 GMT
        Subject: CN=1747B8E3A31F8FFF2B76482C7D6C6105D2C8CAF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:a0:73:6a:ef:48:16:e8:06:e4:04:0f:cc:
                    d7:b9:58:18:0a:2e:9d:98:6a:1f:a1:89:50:3b:d8:
                    48:da:c0:30:9e:c8:7e:31:7d:fa:56:b1:df:ae:59:
                    40:38:81:0b:26:57:ef:e1:44:3d:64:a8:63:73:e5:
                    b2:49:74:47:17:a9:26:cd:6d:ed:d9:d5:76:6d:46:
                    24:02:85:f6:16:ff:da:ad:15:a3:d3:ff:e4:ef:d6:
                    51:50:16:00:8f:e8:13:9e:ff:d2:31:98:bd:bf:d8:
                    3f:0c:33:0e:6b:13:10:70:15:80:33:e6:17:f6:46:
                    1c:41:3e:a0:b6:ac:e7:d8:c0:bf:79:ba:c3:ee:96:
                    20:01:6c:78:20:f5:36:00:22:f4:49:eb:67:71:7d:
                    80:13:7e:14:e8:ac:24:9b:21:74:4a:d5:e2:02:1e:
                    5e:e3:4e:df:e2:86:8c:97:11:b3:f4:47:6d:74:ef:
                    6e:aa:3f:20:06:4c:54:79:39:69:2a:46:18:2f:c2:
                    1f:6e:f9:4b:f2:44:c8:e5:b7:06:fa:98:60:1b:7a:
                    c6:c3:d4:00:80:1d:b7:e1:4d:a6:8f:a7:81:bf:eb:
                    f8:62:b7:c8:d0:2b:47:45:41:b3:75:b1:0f:bf:b2:
                    47:50:93:dd:db:20:11:ab:90:0d:5b:62:43:be:4c:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:B8:E3:A3:1F:8F:FF:2B:76:48:2C:7D:6C:61:05:D2:C8:CA:F7
            X509v3 Authority Key Identifier:
                keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/3130332e3133352e32342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:8b:bd:58:b5:b0:88:28:e8:96:0e:c4:6a:56:f7:8b:5e:
         78:f8:1d:56:4e:c8:28:75:3a:d5:f1:2d:46:c4:e0:3a:ee:eb:
         c5:37:14:7e:ab:82:ed:0e:02:93:33:c2:e3:51:5a:e8:33:2a:
         43:bb:5e:ca:7e:4d:44:df:be:96:7d:ea:a2:ff:74:2a:d4:e6:
         f8:b7:fe:95:40:24:05:f7:3f:33:50:ff:13:0a:5f:1e:8d:7a:
         b3:54:c6:90:48:ad:a9:c5:91:fa:8f:4f:56:97:df:69:df:d1:
         f9:0c:82:ad:36:95:49:4d:a7:56:11:4e:34:15:30:f9:3a:59:
         19:69:b6:2a:46:f3:b2:43:fa:e2:5b:a0:e6:4e:95:fa:3a:b3:
         c1:76:aa:1a:e9:a9:89:56:6e:22:d2:7e:d6:4e:f6:ff:8a:c1:
         f7:7b:57:94:0b:56:2f:84:b7:0d:fc:e3:56:3b:ed:a2:23:52:
         c6:fb:c5:67:ba:3b:dd:59:d8:8b:97:e3:27:a5:9b:77:b8:87:
         b4:46:a4:ae:26:75:75:3f:0e:cc:4d:f3:20:84:bb:3f:eb:12:
         a0:fe:9e:34:21:17:85:34:fa:fb:19:8c:cc:41:33:5e:6c:b0:
         e4:6e:75:6c:32:db:38:38:29:29:90:25:f7:fe:2e:d6:cb:8e:
         59:04:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org