Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa
File:                     3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          PYXmT2AbRVHOPFMBlrwUnI8Gxq1s1tx3hDWQuXdAMq4=
Subject key identifier:   98:62:B7:36:8D:81:C2:BF:AF:E4:6E:76:95:88:0B:7E:0F:8C:E0:FD
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       4CF82ECE916E0047FB3B18417BCF38EC58C0B9BB
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 22 Jul 2024 16:46:40 +0000
ROA not before:           Mon 22 Jul 2024 16:41:40 +0000
ROA not after:            Mon 21 Jul 2025 16:46:40 +0000
asID:                     135478
IP address blocks:        103.61.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f8:2e:ce:91:6e:00:47:fb:3b:18:41:7b:cf:38:ec:58:c0:b9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 22 16:41:40 2024 GMT
            Not After : Jul 21 16:46:40 2025 GMT
        Subject: CN=9862B7368D81C2BFAFE46E7695880B7E0F8CE0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:e7:12:4b:29:16:1a:3d:df:a7:67:2a:18:
                    da:64:dd:e7:19:e9:e4:41:32:47:f8:a6:81:35:06:
                    ab:0b:d4:60:db:c8:9e:8f:9d:31:be:e0:ef:f7:55:
                    8b:44:b0:d9:a9:ce:bd:23:d0:b6:5d:51:13:e0:16:
                    1a:9a:81:d0:58:34:3c:86:37:9a:99:f5:bb:ef:ce:
                    cc:f3:80:6a:2d:28:78:44:48:55:a1:58:04:2c:18:
                    4d:99:ec:fc:cb:5e:01:3a:de:44:1a:c7:34:9c:60:
                    19:0e:1c:e8:b3:39:7a:5e:16:54:77:e1:90:f9:17:
                    61:bf:22:64:3e:c2:35:02:89:3a:7b:fb:c6:ba:1a:
                    4f:c8:64:00:c4:bb:ad:e9:12:62:7e:17:41:82:0c:
                    c4:a8:4c:de:2b:15:a4:bb:24:d7:e1:c5:c0:e3:43:
                    b9:5b:b9:5c:ad:9d:c7:c4:4e:d2:1a:19:f7:e5:75:
                    9d:62:cc:e8:27:15:08:83:de:92:a1:00:fb:07:02:
                    8d:92:2d:a8:a8:cc:b7:e2:3b:0d:45:18:a6:72:e6:
                    03:b1:17:ba:a2:94:88:f7:52:d1:50:55:51:12:41:
                    27:3a:5a:53:b6:f1:59:55:a6:ba:a4:e4:b0:3b:53:
                    34:cf:f3:20:f6:ca:c8:5a:e2:97:05:fe:81:6b:b4:
                    31:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:62:B7:36:8D:81:C2:BF:AF:E4:6E:76:95:88:0B:7E:0F:8C:E0:FD
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130332e36312e3234382e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:59:3e:2b:ea:bb:44:41:3e:31:4d:65:5e:86:92:17:56:
         41:8f:d6:2c:71:56:94:71:7b:3b:4b:af:38:f1:5d:a9:e3:ae:
         7c:08:48:3b:2f:a8:ae:c1:52:34:87:34:8b:7a:c8:8c:27:2c:
         05:8c:45:e5:0f:24:56:2a:c2:07:35:ae:e6:90:73:ca:f0:d8:
         d7:5d:4c:a9:65:bb:18:23:59:e6:a9:a7:cf:93:b7:36:87:a1:
         46:e6:83:45:0e:bf:6d:40:7f:f0:77:0d:e8:09:16:f7:fe:f8:
         09:7c:21:54:e8:0d:74:2a:68:d5:7b:d4:da:f8:39:9f:bf:d6:
         1e:a9:c2:cc:52:80:c3:71:15:85:ad:b2:57:03:04:87:aa:49:
         db:de:35:5b:d3:73:5f:28:52:2e:77:0c:90:cc:d1:4e:5d:43:
         f0:83:c0:36:2c:f8:d5:3b:e2:86:eb:54:f6:dd:1b:11:c7:cd:
         05:a6:50:8a:d7:d6:3b:ba:77:b7:f8:d8:10:a4:5a:f2:f9:34:
         57:13:5c:e7:a7:f9:1e:74:20:7c:5f:24:a7:a4:53:b4:e6:99:
         34:f1:18:0f:f6:0d:e0:31:31:b7:d9:38:88:9f:81:da:05:6b:
         ac:f7:f3:a4:47:86:37:53:cd:b5:0e:23:0f:06:a6:18:8d:37:
         80:e0:25:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org