Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa
File:                     3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier:          ngQAnXClgSB5QjJcQgS8jYjCfldqavE1VdARG5KiIeU=
Subject key identifier:   C4:27:B3:87:DA:2C:00:0B:3B:E3:58:25:C0:5B:0E:E1:4B:44:A1:F9
Certificate issuer:       /CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
Certificate serial:       65833078442AC953133CE4584FD9243CFDD977B5
Authority key identifier: D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa
Signing time:             Thu 29 Feb 2024 02:35:52 +0000
ROA not before:           Thu 29 Feb 2024 02:30:52 +0000
ROA not after:            Thu 27 Feb 2025 02:35:52 +0000
asID:                     135444
IP address blocks:        103.235.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl
                          rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Jun 2024 08:14:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:83:30:78:44:2a:c9:53:13:3c:e4:58:4f:d9:24:3c:fd:d9:77:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CD40474BDD0C0707766CEDBAF0B6A186CF582F
        Validity
            Not Before: Feb 29 02:30:52 2024 GMT
            Not After : Feb 27 02:35:52 2025 GMT
        Subject: CN=C427B387DA2C000B3BE35825C05B0EE14B44A1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:75:08:68:2e:31:4b:82:95:04:b6:a3:16:
                    a0:bf:be:df:ba:48:92:58:9a:64:8e:6a:07:b3:8e:
                    4a:f5:ac:14:02:e2:91:5c:9e:d3:26:7d:48:36:bf:
                    b2:e3:bd:31:ab:88:11:a4:5c:57:a0:cb:1a:fd:1d:
                    20:5b:3f:18:8d:3f:1a:84:b5:f0:30:95:c7:69:28:
                    1a:ba:bb:e2:23:6f:89:8d:86:01:81:12:6f:4d:15:
                    ab:0a:b8:e2:ca:ec:ec:a8:a9:db:e9:3a:5b:09:a5:
                    e0:ce:ca:f5:27:77:8b:cb:d7:ce:26:de:88:91:61:
                    d7:f5:a9:4e:c3:57:b8:16:7e:14:99:0f:4f:2b:96:
                    ad:15:21:b5:e0:a7:b0:e8:69:f4:59:d1:3c:87:7e:
                    25:8a:15:a2:dd:12:c9:e5:47:69:dd:cc:52:b9:38:
                    19:e1:0e:64:96:24:93:4f:e3:ea:71:6b:5a:f9:ef:
                    fd:03:96:47:3e:6d:93:6a:46:4d:55:22:0e:d5:e1:
                    6a:a0:50:4f:b0:a3:a2:35:86:65:74:c4:ee:67:17:
                    f0:06:23:f6:cc:62:bb:1b:4a:d7:00:4c:16:ea:30:
                    48:eb:0b:c7:bd:f4:38:f6:25:32:92:e2:c2:72:56:
                    29:58:e7:e1:56:3d:e0:ab:9f:ea:ad:d2:ab:10:f4:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:27:B3:87:DA:2C:00:0B:3B:E3:58:25:C0:5B:0E:E1:4B:44:A1:F9
            X509v3 Authority Key Identifier:
                keyid:D9:CD:40:47:4B:DD:0C:07:07:76:6C:ED:BA:F0:B6:A1:86:CF:58:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9CD40474BDD0C0707766CEDBAF0B6A186CF582F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37352e302f32342d3234203d3e20313335343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:19:81:9a:bb:ec:cb:29:90:df:84:e0:75:cf:02:60:ca:
         e7:a6:c8:04:a1:a3:8b:df:d4:08:42:dc:08:7a:ed:6b:f5:b4:
         ea:ba:6d:dd:46:6a:6f:eb:e6:ab:4a:64:ee:c2:31:a8:e9:0d:
         f3:bf:69:3c:9d:4c:0f:d0:18:40:36:4f:e8:e6:70:27:d6:8a:
         06:ff:b3:e7:05:e5:94:42:3e:f3:9a:16:84:9e:b2:14:8e:0b:
         cb:99:5c:94:2e:90:12:bd:a2:9d:b2:ac:28:d7:ff:f0:ce:9d:
         d3:4e:91:9a:53:7a:b1:92:f1:79:f0:13:1c:9d:6f:46:3e:0e:
         55:36:05:76:d9:02:0e:93:fb:46:a4:a0:89:61:cd:9b:bb:90:
         80:c1:12:72:a6:c5:2d:6c:1a:a9:6e:e1:bc:ce:9b:9c:82:0f:
         8d:94:38:cd:aa:e9:a6:be:11:85:7c:9a:36:5e:55:15:a1:c9:
         21:0f:7b:85:40:1b:15:2b:fe:07:7f:66:2f:9f:10:38:02:15:
         24:36:54:d0:49:af:b8:d1:58:81:c1:62:ca:e6:49:64:96:f0:
         01:25:79:b5:46:0a:3e:c3:f7:1f:16:62:49:ea:cb:f3:18:e8:
         55:c4:9a:6d:32:f6:ff:77:a1:35:3d:63:37:da:e4:41:fb:73:
         a2:f7:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 06:15:39 2024 by rpki-client on console-fra.rpki-client.org