Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa
File:                     3130332e39352e32322e302f32342d3234203d3e20313530353537.roa (raw, json)
Hash identifier:          WLfKscMyGMc40boEWdbQdnlHjNZj/oBFnEX9yWncEQQ=
Subject key identifier:   70:4E:C1:02:F0:2C:9B:E6:62:F6:04:CF:F3:23:8C:3F:A2:82:E7:C6
Certificate issuer:       /CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910
Certificate serial:       374093EA65CF1644BEDFA79822D854ABA93EAC51
Authority key identifier: B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa
Signing time:             Tue 15 Oct 2024 16:00:01 +0000
ROA not before:           Tue 15 Oct 2024 15:55:01 +0000
ROA not after:            Tue 14 Oct 2025 16:00:01 +0000
asID:                     150557
IP address blocks:        103.95.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl
                          rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 04:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:93:ea:65:cf:16:44:be:df:a7:98:22:d8:54:ab:a9:3e:ac:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B70CD666995822F32C04E09AFF01B2D4CBAA9910
        Validity
            Not Before: Oct 15 15:55:01 2024 GMT
            Not After : Oct 14 16:00:01 2025 GMT
        Subject: CN=704EC102F02C9BE662F604CFF3238C3FA282E7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f2:a8:e9:b3:6c:74:bd:2b:56:f8:f1:a5:45:
                    84:24:b8:9a:fe:f4:3b:a4:18:e6:66:1f:9e:c4:8e:
                    4c:17:d9:69:45:bb:4c:c6:a2:30:43:84:9f:68:84:
                    a6:00:c7:1a:52:22:a8:13:dc:04:b3:11:3d:f7:0a:
                    ae:08:8d:16:f2:1f:13:30:7f:e6:2d:6c:85:30:30:
                    fe:44:24:65:35:80:60:6e:e3:52:0e:ac:af:cc:0f:
                    30:15:65:09:d9:77:c6:47:b9:ce:30:b6:a8:c3:d6:
                    5d:a8:8b:1b:a9:f3:13:95:f2:01:93:5c:2f:05:f0:
                    5e:10:8f:71:53:72:ec:86:ae:cb:70:3a:76:32:dd:
                    ed:8e:2a:e7:35:ef:2c:b1:7f:17:74:68:6d:39:54:
                    fd:8c:2b:b9:78:a9:28:20:ca:7f:14:7f:95:f3:91:
                    06:dd:18:60:74:9c:7c:34:07:4a:18:0b:fe:b0:c7:
                    3f:e0:88:21:8e:3e:0e:2b:4c:d0:a3:32:9c:74:16:
                    70:e5:06:60:24:c8:2a:e2:d3:d6:94:94:ae:eb:f6:
                    b6:65:89:06:52:b1:84:52:3f:22:88:42:1e:06:a2:
                    f4:c6:2d:5e:41:51:e9:b2:de:a2:01:ba:c9:ed:ff:
                    9e:cb:ff:26:c4:d7:68:54:3e:b9:54:b6:a6:f3:a5:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4E:C1:02:F0:2C:9B:E6:62:F6:04:CF:F3:23:8C:3F:A2:82:E7:C6
            X509v3 Authority Key Identifier:
                keyid:B7:0C:D6:66:99:58:22:F3:2C:04:E0:9A:FF:01:B2:D4:CB:AA:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/B70CD666995822F32C04E09AFF01B2D4CBAA9910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B70CD666995822F32C04E09AFF01B2D4CBAA9910.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfd4f869-4db6-4b0a-aab6-cde47b447d77/0/3130332e39352e32322e302f32342d3234203d3e20313530353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:a2:e0:7b:f1:b0:14:69:af:a3:d0:c6:00:6d:33:6b:4c:cf:
         9a:47:cf:99:42:c5:89:68:7d:0f:21:24:74:54:34:31:53:af:
         a3:23:42:c2:51:cf:73:a5:16:aa:1d:f4:bd:d7:fb:02:3f:3a:
         63:c2:7c:f0:a9:e1:22:e2:03:af:15:b7:ff:6b:ae:fb:1e:cc:
         9d:96:b4:bf:2b:e1:ff:f2:7e:e8:41:67:c2:83:f9:1e:2f:42:
         62:9c:e6:de:52:1a:4c:22:73:ea:6e:d2:3d:11:db:c8:8f:3b:
         1e:8a:8f:33:b9:3d:17:60:70:c5:cd:ff:07:a7:8a:79:d5:7a:
         82:b5:5a:0f:37:70:e9:03:25:48:9e:5a:76:e5:ed:3c:49:30:
         d7:67:c7:95:37:35:af:28:d7:dc:38:f2:2a:0a:55:86:a3:0b:
         e2:0d:39:d2:00:33:6c:83:00:cc:6a:5d:ff:92:c8:ea:07:7b:
         18:1b:da:bf:15:81:d8:96:3d:f6:71:3a:16:b0:fd:a7:84:ac:
         72:eb:91:02:d5:92:83:45:35:b7:a4:f3:4d:b3:93:a3:c4:15:
         9f:57:1d:4a:77:78:90:4c:8a:7d:50:57:56:9f:eb:7c:d6:9a:
         eb:b4:5c:f8:91:64:df:8a:81:84:fc:d4:ec:f5:fe:df:d9:34:
         b4:8e:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:21 2024 by rpki-client on console-fra.rpki-client.org