Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
File:                     3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (raw, json)
Hash identifier:          h1vVrZcs0STgdnetvlgxi6VzhzUuZjwdEHDyww26Ed8=
Subject key identifier:   12:DA:93:17:7D:29:C5:A2:68:27:5D:A5:C6:33:8E:3E:BD:E0:AD:F7
Certificate issuer:       /CN=A75550C54400A670523A712A4C8782FA740B4F07
Certificate serial:       4834976288C171EF79199680F60D76E1D2A43740
Authority key identifier: A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
Signing time:             Mon 01 Jul 2024 01:04:28 +0000
ROA not before:           Mon 01 Jul 2024 00:59:28 +0000
ROA not after:            Mon 30 Jun 2025 01:04:28 +0000
asID:                     132653
IP address blocks:        103.25.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl
                          rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:34:97:62:88:c1:71:ef:79:19:96:80:f6:0d:76:e1:d2:a4:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A75550C54400A670523A712A4C8782FA740B4F07
        Validity
            Not Before: Jul  1 00:59:28 2024 GMT
            Not After : Jun 30 01:04:28 2025 GMT
        Subject: CN=12DA93177D29C5A268275DA5C6338E3EBDE0ADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:da:83:5f:83:5c:73:e2:d9:b1:5c:f6:d5:
                    c1:6a:52:b4:cd:d1:79:9d:31:29:c4:81:4d:c8:fb:
                    39:69:43:d0:2c:b6:c7:2b:5d:3b:90:6f:6b:88:36:
                    ce:e7:02:14:71:37:3b:34:d7:73:a9:a4:7d:1f:f1:
                    77:39:6a:40:82:c3:6f:c5:a7:4b:92:52:82:7f:7c:
                    6a:c6:e6:22:46:55:cb:62:29:42:96:29:31:d0:ed:
                    a4:c9:bb:50:41:b5:62:13:e5:7e:79:69:ad:d5:cf:
                    16:a6:71:02:62:8d:fd:77:91:c8:d6:15:ca:6c:05:
                    46:e0:75:ef:e5:00:aa:b3:14:c7:db:24:f7:ee:69:
                    e5:cb:fd:ea:8a:32:e1:a2:2c:ed:36:c2:46:4a:d5:
                    2d:bb:25:f8:1e:34:54:c3:9c:1b:2d:23:f9:20:b8:
                    b1:95:a9:41:f0:f7:1c:d5:98:29:af:58:db:dc:34:
                    ed:e8:13:45:49:33:f8:93:08:7a:ae:18:a9:71:33:
                    60:16:e2:36:0f:1a:12:33:35:9c:d4:0b:4a:d4:0c:
                    97:dc:e5:ff:d4:3a:d2:aa:ef:3e:d3:4a:c9:8c:e8:
                    f2:df:51:38:46:7d:a6:92:3a:b3:db:83:36:5c:33:
                    77:f2:8c:e6:1a:3a:39:62:fd:a4:07:f2:36:27:2f:
                    67:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DA:93:17:7D:29:C5:A2:68:27:5D:A5:C6:33:8E:3E:BD:E0:AD:F7
            X509v3 Authority Key Identifier:
                keyid:A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:df:83:5c:c8:b3:dd:1b:ff:ad:2f:f1:91:a1:d3:5d:44:
         b2:d2:53:19:7c:ec:d9:35:bc:b8:92:7b:d3:62:98:8d:87:6b:
         02:6b:a9:1a:da:ed:eb:57:0b:e0:3b:f1:78:2a:88:2e:ad:ad:
         f1:a1:7b:1e:b4:10:40:5a:1f:fe:13:44:ed:0e:55:63:81:b8:
         c3:a5:03:99:84:13:73:b0:da:c3:5b:7f:b5:49:21:b9:1f:19:
         56:03:d0:8a:0c:f0:07:c4:0b:dc:5b:6f:2f:9c:5b:3e:ee:8c:
         fc:b6:c4:48:36:1b:f5:45:36:6d:5a:3d:a2:ab:22:db:ac:73:
         16:8e:01:64:80:85:85:4b:4e:77:7e:34:3d:cb:a5:cb:29:00:
         6e:33:cb:ee:e7:12:9f:ea:7b:af:ce:bf:b5:54:69:13:be:ac:
         dc:71:16:6f:b3:6f:e1:e8:91:75:c7:69:b2:74:40:d8:b5:f7:
         a4:73:0b:b7:90:12:46:c9:f7:db:34:a3:5d:5a:80:3d:f1:99:
         67:82:6f:ca:64:b8:d4:ed:6a:ab:fd:31:1d:64:99:b4:9b:1c:
         d1:02:d3:c7:eb:0f:db:96:24:9a:d2:9a:14:57:c8:66:0c:f5:
         26:57:2d:95:ab:b2:1b:5a:fd:ed:e5:1f:7f:2b:f1:22:e4:fc:
         8f:5f:26:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org