Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
File:                     3130332e37392e39362e302f32342d3234203d3e203634333038.roa (raw, json)
Hash identifier:          272gsAydR/23SVaEINOvzfxl8fS+BuYL3Ub3tnJRcB8=
Subject key identifier:   B4:FE:66:3B:90:56:60:65:74:60:E6:F2:0D:F8:57:5E:EC:24:4F:4B
Certificate issuer:       /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Certificate serial:       6844C73CDE3A9BA382A9D8D23E98982D4B8AD521
Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
Signing time:             Mon 31 Jul 2023 00:08:08 +0000
ROA not before:           Mon 31 Jul 2023 00:03:08 +0000
ROA not after:            Mon 29 Jul 2024 00:08:08 +0000
asID:                     64308
IP address blocks:        103.79.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
                          rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 15:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:c7:3c:de:3a:9b:a3:82:a9:d8:d2:3e:98:98:2d:4b:8a:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
        Validity
            Not Before: Jul 31 00:03:08 2023 GMT
            Not After : Jul 29 00:08:08 2024 GMT
        Subject: CN=B4FE663B905660657460E6F20DF8575EEC244F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:63:8d:fa:55:af:13:18:47:a4:28:18:74:
                    78:39:db:60:84:2c:d3:48:10:38:1d:bb:04:a1:28:
                    70:17:2a:48:89:99:d3:b9:24:ad:17:79:7b:a2:63:
                    2f:4d:8f:44:73:32:ab:68:72:91:db:43:6f:c9:c7:
                    d0:fd:a3:9f:3e:f4:97:84:b4:b2:34:28:3b:06:e7:
                    a0:eb:c9:33:b3:85:cf:2c:37:f3:ef:c4:5f:c5:2e:
                    49:b6:35:95:a5:33:95:3c:8d:96:ff:79:18:ac:97:
                    e9:55:b5:3d:96:62:54:f2:a4:99:b0:c9:b8:33:f5:
                    f2:d5:de:12:ef:78:e6:09:74:53:4f:6c:cf:62:a4:
                    0a:24:15:59:24:7e:38:70:c1:51:f8:7c:57:f1:a1:
                    07:79:8d:ca:60:3f:da:e8:dd:bd:e1:55:8a:c2:ab:
                    d0:94:50:d6:5f:23:69:46:13:75:b1:1c:0d:00:0d:
                    4d:a9:7b:f5:16:76:62:4e:44:f7:7d:60:a2:09:d3:
                    e8:c5:83:ae:a2:53:af:1f:32:53:b1:e1:86:8d:bc:
                    3e:d8:75:f7:4d:c5:a0:78:e9:e2:c2:f2:2d:75:59:
                    fa:c5:a5:fe:9f:04:35:49:e3:8f:2a:88:e5:3f:c6:
                    6a:b3:18:39:b8:3e:9b:a9:d2:62:47:03:9d:e1:fa:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FE:66:3B:90:56:60:65:74:60:E6:F2:0D:F8:57:5E:EC:24:4F:4B
            X509v3 Authority Key Identifier:
                keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:d5:32:fe:c9:85:f2:9c:22:60:88:ff:ea:08:5a:0f:e8:
         da:0e:4f:ea:33:b1:3f:5b:24:0e:ed:32:91:5d:75:fe:e2:f4:
         a3:f0:cf:64:2d:f6:16:bd:ac:48:4f:73:51:f9:5c:50:d2:19:
         cc:f5:d4:78:18:6b:a9:87:9b:f4:ca:1c:a9:d5:45:fe:08:65:
         ff:13:6a:38:46:2a:e0:e4:a4:fe:55:63:0f:20:5a:0f:64:b8:
         b6:bc:fc:1e:52:20:07:85:7e:62:f4:4c:52:32:72:ce:93:e5:
         0c:e3:d6:ee:15:7e:a3:87:fc:f6:ae:2e:55:5a:c8:08:3c:cc:
         15:4f:0c:df:0f:83:c6:ae:58:58:65:03:e6:e9:4b:88:84:93:
         5c:21:f2:6d:ae:0c:21:ac:43:08:54:cc:04:b0:4a:4f:92:d9:
         61:79:c3:31:4c:c7:f6:e7:80:83:4b:a2:b8:64:2b:ec:c1:0c:
         36:22:a5:54:bd:9b:04:ea:c5:7c:db:f4:c1:96:81:73:5d:a1:
         e7:a1:0d:21:13:db:4d:2f:69:b1:15:85:f0:f3:45:eb:01:98:
         ba:85:18:3e:4e:73:25:5a:a4:6e:90:ae:05:28:d7:16:44:6c:
         3e:87:a0:f4:f2:3a:c7:82:54:bf:72:13:bb:ad:4c:b6:02:6e:
         ff:3f:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:52 2024 by rpki-client on console-fra.rpki-client.org