Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa
File:                     3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          Oz3no7yKpa1GxXEXVBInv0tnqEhNgjyzNKZ0eGG/VIg=
Subject key identifier:   A5:ED:7C:B3:8D:64:3D:26:27:C1:9C:DA:0E:57:02:0C:91:68:CD:4D
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       7590154994A9FE93A2F1620342E58AF8FAE2F915
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa
Signing time:             Tue 30 Jul 2024 01:52:59 +0000
ROA not before:           Tue 30 Jul 2024 01:47:59 +0000
ROA not after:            Tue 29 Jul 2025 01:52:59 +0000
asID:                     135478
IP address blocks:        101.128.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:90:15:49:94:a9:fe:93:a2:f1:62:03:42:e5:8a:f8:fa:e2:f9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 01:47:59 2024 GMT
            Not After : Jul 29 01:52:59 2025 GMT
        Subject: CN=A5ED7CB38D643D2627C19CDA0E57020C9168CD4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:53:6d:76:aa:e8:c3:19:da:ca:4b:2e:a7:
                    4b:55:ed:06:0f:00:76:c3:cc:9c:e4:14:86:9a:9f:
                    c9:75:64:28:11:ef:f8:a5:56:fa:53:0a:d0:8a:46:
                    2a:30:fe:4b:6b:33:43:66:ec:bb:39:ec:e7:b9:0d:
                    e2:58:8f:97:61:2a:a3:01:48:7e:81:bb:37:70:16:
                    ed:14:07:f8:db:6f:94:c9:41:0b:79:5e:0b:2e:96:
                    24:96:3f:ea:a7:ff:86:43:0d:55:9e:86:7b:93:2d:
                    fe:62:6b:88:77:a8:67:88:80:c9:53:c4:ec:48:64:
                    db:c8:b8:71:79:9a:7d:a0:ab:a1:ce:6d:14:c4:65:
                    4d:3a:8b:9c:97:0b:1a:ed:6d:6f:1e:24:49:df:09:
                    88:cd:91:b8:c4:bd:70:18:61:66:86:a3:41:c6:0a:
                    ac:ff:ec:ed:4a:27:46:a0:97:1c:d6:48:50:58:5e:
                    bc:ef:54:19:12:56:a7:77:10:a1:6d:d6:e0:ba:0b:
                    fc:9b:ab:b0:5f:f8:6c:7f:79:43:d0:fa:e1:9f:16:
                    43:9b:18:d7:4b:08:07:7e:68:81:aa:8e:93:2e:d4:
                    c9:36:cc:c7:bf:80:fc:6c:25:a3:18:f2:2c:36:90:
                    30:c0:ba:92:92:be:cf:34:dd:63:76:b0:f3:da:fe:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:ED:7C:B3:8D:64:3D:26:27:C1:9C:DA:0E:57:02:0C:91:68:CD:4D
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e36342e302f31382d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:a2:4c:a5:4f:ad:41:36:2e:12:4e:4d:47:13:e5:35:54:ea:
         80:e0:cf:4d:5b:05:8b:92:20:06:e9:d5:d5:a0:58:56:ba:d4:
         70:ba:ad:29:a2:29:15:50:7e:70:78:4b:61:7e:d3:9c:62:2f:
         c9:60:6e:d9:eb:3b:7e:4b:b5:ad:25:45:92:04:34:64:b9:a2:
         7f:5d:3a:8c:02:0a:54:88:4b:12:7a:9d:52:03:25:e4:33:3d:
         56:1b:98:80:02:9c:dc:fb:31:c5:02:b5:a0:a0:1c:cd:11:00:
         f8:b9:5f:1d:db:95:46:01:e6:5c:59:bf:d0:58:79:93:93:df:
         4b:e1:be:34:bc:e9:8c:8d:f7:04:63:a2:0e:1f:8c:c3:89:ae:
         d7:8a:ac:43:40:c5:64:0b:ef:5b:72:f2:42:18:e9:15:14:0f:
         d4:a8:ff:1f:3f:0a:ea:fc:20:32:a7:85:ad:6d:c1:3e:e2:38:
         98:00:df:84:46:47:d6:6e:78:c1:5c:eb:19:f2:1d:ed:df:d9:
         b5:99:78:59:7b:d0:33:15:f3:ee:d1:27:ee:cd:04:cc:21:28:
         7a:76:4b:45:42:22:06:b7:6e:3f:7e:9f:76:7b:0d:c3:f5:18:
         21:a3:53:3c:51:bc:4a:ad:c3:68:4f:74:93:80:eb:fe:63:74:
         dc:af:01:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org