Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa
File:                     3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier:          5PHXxkNOBzAUrSVCdEsqnvcRVTWOc5OwbXElHb2k9BU=
Subject key identifier:   E2:D5:28:25:14:B1:7E:FF:49:EB:F4:2A:2D:D6:7C:0E:15:72:04:DB
Certificate issuer:       /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial:       62DB02422304B8AA98380839EBF260383400EE5C
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa
Signing time:             Mon 31 Jul 2023 00:00:00 +0000
ROA not before:           Sun 30 Jul 2023 23:55:00 +0000
ROA not after:            Mon 29 Jul 2024 00:00:00 +0000
asID:                     135444
IP address blocks:        103.235.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
                          rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Jun 2024 08:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:db:02:42:23:04:b8:aa:98:38:08:39:eb:f2:60:38:34:00:ee:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
        Validity
            Not Before: Jul 30 23:55:00 2023 GMT
            Not After : Jul 29 00:00:00 2024 GMT
        Subject: CN=E2D5282514B17EFF49EBF42A2DD67C0E157204DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:1b:56:ef:24:d4:eb:21:13:15:78:8b:ae:
                    13:fa:90:aa:ca:86:23:ea:2d:ff:97:b8:e9:11:f7:
                    f5:0a:e5:41:47:88:9b:f7:be:8b:37:79:ef:17:1f:
                    24:10:36:c6:df:b0:0a:65:f8:01:ae:e7:75:02:0f:
                    f7:0d:86:a5:14:e0:06:91:88:99:27:03:76:e8:ce:
                    c4:cb:59:8f:e6:41:48:25:be:9d:e1:97:e2:a5:1c:
                    d0:c5:60:57:ee:c1:ab:8c:e0:07:9e:60:c0:9c:26:
                    b3:3a:85:9e:49:24:8a:cb:2e:f0:c3:c8:cf:d6:24:
                    a6:90:a8:60:6a:62:c7:5c:69:a9:13:52:f0:c3:0a:
                    26:ea:af:cb:0f:ce:1b:24:b8:16:64:66:6c:19:50:
                    65:c3:8f:f0:3e:ec:a6:26:82:12:33:0b:05:49:ea:
                    a9:ec:cc:30:d3:18:bb:e3:80:21:96:8f:b2:60:72:
                    0d:0c:f0:92:8d:24:cb:63:51:a9:87:f9:81:b7:80:
                    8b:d9:c6:3d:6b:de:9b:a7:e8:4f:f1:2d:c3:2d:4a:
                    c3:7d:57:2e:88:19:72:65:0b:b9:05:ab:6f:18:92:
                    9e:67:5a:46:6b:8b:88:b7:dc:5e:87:a4:60:0e:b0:
                    ed:48:33:3c:a2:c9:01:51:2e:e3:49:26:bf:7e:0e:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D5:28:25:14:B1:7E:FF:49:EB:F4:2A:2D:D6:7C:0E:15:72:04:DB
            X509v3 Authority Key Identifier:
                keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37322e302f32342d3234203d3e20313335343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:ac:aa:a0:69:95:97:85:9d:17:36:77:f5:c9:27:d6:13:
         92:52:56:9d:56:c2:3e:fd:34:7f:13:0b:29:aa:25:86:17:e1:
         3e:dd:e4:1d:c9:d0:d4:9e:77:20:62:0d:de:09:89:b3:1b:54:
         b5:82:62:df:21:f6:26:33:3f:5a:26:80:3f:e3:46:7e:2b:22:
         8a:71:f9:4f:e6:90:9b:9e:e8:73:52:60:a5:51:c6:9e:12:10:
         e4:e3:5f:e1:db:06:71:7d:5d:e1:07:09:e4:9d:d3:be:20:09:
         ea:17:7b:01:f4:6b:a5:52:21:c6:d5:f0:2a:48:1c:5b:ad:26:
         b1:14:48:a5:be:cf:da:a6:dd:6c:d9:b8:ed:1b:41:dd:b9:04:
         77:0d:8d:61:f7:c7:8b:16:dd:c3:36:8a:78:ff:ac:ea:54:8b:
         85:16:76:d1:be:21:86:b1:5e:29:e3:e4:60:73:fc:12:fa:41:
         99:81:02:b1:b5:e7:7d:4c:5f:57:56:94:fb:7f:36:8d:1e:2d:
         d8:90:15:40:12:eb:00:78:45:73:49:5f:df:b0:26:e9:68:05:
         b0:3d:f9:65:d6:94:c9:64:02:5a:7c:fe:ae:2a:ba:06:cd:17:
         24:c5:b3:74:d6:1f:f7:a5:a2:6b:40:37:f4:3c:ba:7d:30:d5:
         a0:c3:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 06:15:39 2024 by rpki-client on console-fra.rpki-client.org