Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
File:                     3130332e35342e3133342e302f32342d3234203d3e203633383736.roa (raw, json)
Hash identifier:          0CbQfTPeAnBrUAt9K7mbtAEOAg4jYj6TSyAclEWNyE4=
Subject key identifier:   6D:27:29:DC:69:00:F6:50:B3:C8:F8:49:F4:02:5B:27:91:13:FF:F3
Certificate issuer:       /CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
Certificate serial:       5CA7DC731F306B27EC930D2AB348A755D1C330C5
Authority key identifier: EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa
Signing time:             Mon 01 Jul 2024 01:02:48 +0000
ROA not before:           Mon 01 Jul 2024 00:57:48 +0000
ROA not after:            Mon 30 Jun 2025 01:02:48 +0000
asID:                     63876
IP address blocks:        103.54.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl
                          rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a7:dc:73:1f:30:6b:27:ec:93:0d:2a:b3:48:a7:55:d1:c3:30:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF4C4D45351DBB35C40C58769D718931B1AAD47D
        Validity
            Not Before: Jul  1 00:57:48 2024 GMT
            Not After : Jun 30 01:02:48 2025 GMT
        Subject: CN=6D2729DC6900F650B3C8F849F4025B279113FFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:48:3a:9a:19:30:2d:25:66:d3:3e:32:a3:
                    21:76:94:9d:0d:25:d7:dd:8e:10:33:9f:49:dc:1d:
                    97:f1:22:be:ab:c5:be:eb:9e:a7:72:a8:59:0b:8f:
                    98:5f:4e:1a:f8:84:1e:42:b9:6a:ff:38:02:d4:b1:
                    1f:2d:c2:ea:c3:41:ea:bb:90:ed:d6:3e:b1:da:d7:
                    77:1f:50:c5:d0:8b:53:1b:3a:9a:cd:08:87:a1:56:
                    91:dc:e2:fd:ca:fc:3a:ed:d1:81:ff:07:bf:71:b5:
                    0a:c3:53:c7:8b:74:68:e7:34:45:39:8d:1a:2e:ca:
                    88:8d:aa:c3:9a:d8:a8:77:1b:30:08:e9:49:ce:a5:
                    80:5e:ac:04:3a:95:62:de:48:05:cf:76:53:56:b8:
                    a0:d0:9a:57:62:b5:5f:dc:b9:83:e1:b7:2c:f8:a0:
                    c5:2e:6a:c6:7d:69:b2:25:ae:73:60:fc:d6:f2:4a:
                    10:0b:e9:e1:0e:61:36:74:e7:d4:36:bb:c0:85:f4:
                    dd:16:9b:78:1b:87:a4:08:33:58:2a:79:50:bd:cb:
                    83:ce:8e:97:29:59:22:6c:e6:95:e1:4e:54:9f:09:
                    5a:4b:37:08:df:09:47:2d:ff:cd:96:5f:e8:74:bd:
                    35:04:5c:87:e7:0b:3f:93:94:ae:d8:3c:3a:cc:93:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:27:29:DC:69:00:F6:50:B3:C8:F8:49:F4:02:5B:27:91:13:FF:F3
            X509v3 Authority Key Identifier:
                keyid:EF:4C:4D:45:35:1D:BB:35:C4:0C:58:76:9D:71:89:31:B1:AA:D4:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/EF4C4D45351DBB35C40C58769D718931B1AAD47D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF4C4D45351DBB35C40C58769D718931B1AAD47D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c70282ef-2500-4ffb-8d7d-1f505435227d/0/3130332e35342e3133342e302f32342d3234203d3e203633383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:0e:f7:3b:b1:02:10:84:b4:35:1c:ff:e3:9d:3f:4f:5c:23:
         47:f5:45:69:94:f7:f8:09:9b:0d:58:58:67:4d:69:15:7b:20:
         0a:fc:23:aa:5f:85:28:0f:4c:08:e6:fd:03:b3:c1:4e:f2:3d:
         15:07:63:4a:7d:7a:53:8d:11:d0:18:09:21:54:17:4e:9a:99:
         7d:8c:bb:42:63:e6:14:b8:ed:15:a1:cb:ae:3a:99:f5:4e:17:
         6e:46:b8:c3:57:ab:af:13:f0:c1:81:51:1b:86:ca:8f:ac:ec:
         0a:95:cf:ef:46:90:98:e8:97:b7:8b:d4:72:36:c9:1a:3c:68:
         be:05:55:fd:de:30:1f:13:eb:ec:49:ea:ca:1e:36:f1:ff:0a:
         cc:ee:21:42:7d:a4:18:34:a1:86:32:36:1b:f5:52:69:9e:41:
         0c:f5:c5:e3:eb:96:ac:2a:48:c9:38:0b:c4:90:67:79:c0:58:
         93:d9:a6:ac:dd:e4:e4:68:be:2e:94:62:46:30:76:58:7f:90:
         34:81:2e:5a:63:e7:d5:89:92:fd:41:d6:a4:37:f9:c5:63:26:
         c0:b3:d9:70:69:00:8c:41:c8:87:34:b8:6d:ee:da:82:a6:b5:
         d1:c4:6e:b6:fe:b8:59:c8:f6:f8:ff:3e:be:34:1d:58:6d:91:
         06:56:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:52:35 2024 by rpki-client on console-fra.rpki-client.org