Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa
File:                     3130332e37392e39312e302f32342d3234203d3e203634333035.roa (raw, json)
Hash identifier:          pUJV5yCGP+nkjFYBs/c4/KEoASG4YWaevcDo/0CHI3I=
Subject key identifier:   08:74:D7:63:27:A6:B5:40:6A:88:B0:A8:8D:CA:5B:D6:76:CD:8F:39
Certificate issuer:       /CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
Certificate serial:       732131698666833EA22DC0F03A85D2EE30FC3D12
Authority key identifier: EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa
Signing time:             Mon 31 Jul 2023 00:02:32 +0000
ROA not before:           Sun 30 Jul 2023 23:57:32 +0000
ROA not after:            Mon 29 Jul 2024 00:02:32 +0000
asID:                     64305
IP address blocks:        103.79.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl
                          rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:21:31:69:86:66:83:3e:a2:2d:c0:f0:3a:85:d2:ee:30:fc:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EED8A9475E4020DA0F2BEF589D15102EB06B658F
        Validity
            Not Before: Jul 30 23:57:32 2023 GMT
            Not After : Jul 29 00:02:32 2024 GMT
        Subject: CN=0874D76327A6B5406A88B0A88DCA5BD676CD8F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:95:e6:08:5c:42:96:f6:3f:6b:19:32:cf:
                    bc:c2:a6:4f:8d:3e:4e:5f:b2:61:c0:b3:cc:52:54:
                    35:0e:1e:be:5a:3f:dc:e6:a5:35:40:18:16:c4:ed:
                    d9:24:50:e8:66:07:c1:b3:f0:18:8c:89:95:99:07:
                    d7:d4:df:4a:ea:27:d5:14:58:1a:a9:89:3d:bd:3d:
                    34:55:60:9c:92:2e:cf:fc:34:88:fc:cf:a7:ba:5e:
                    1e:0f:97:0c:0e:b5:a1:95:51:57:15:02:be:db:cf:
                    55:e2:c7:c1:19:1f:f4:bb:12:43:7a:45:92:98:3b:
                    80:6b:bc:8e:53:21:2d:08:cf:31:be:22:52:eb:cd:
                    80:b6:25:90:64:26:5b:6d:98:fb:aa:ee:e4:3f:11:
                    e5:36:cb:59:56:1d:57:7d:2a:94:01:62:3a:a9:a9:
                    dd:e8:54:0f:c6:ad:6e:d6:05:0e:40:8b:91:90:00:
                    ab:dc:48:4c:9b:a9:38:69:9e:49:a6:17:f3:1b:08:
                    89:4d:6b:d9:7c:18:a0:4f:a0:0b:92:00:8c:7b:aa:
                    64:8e:e4:26:51:a5:0f:cd:90:37:8f:2c:e1:3a:77:
                    0e:a5:3a:9b:5f:db:b8:a5:50:b0:1f:28:17:bd:b1:
                    d4:61:11:cd:06:0b:67:b0:a1:4b:38:e5:05:29:c5:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:74:D7:63:27:A6:B5:40:6A:88:B0:A8:8D:CA:5B:D6:76:CD:8F:39
            X509v3 Authority Key Identifier:
                keyid:EE:D8:A9:47:5E:40:20:DA:0F:2B:EF:58:9D:15:10:2E:B0:6B:65:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/EED8A9475E4020DA0F2BEF589D15102EB06B658F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EED8A9475E4020DA0F2BEF589D15102EB06B658F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56031fd0-5840-4ac1-bfb1-35f71fd2404c/0/3130332e37392e39312e302f32342d3234203d3e203634333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:db:7f:62:f1:f2:73:5f:cc:a0:d3:1c:44:2c:fa:84:25:91:
         53:54:cc:1f:88:ca:93:0d:90:4f:3c:6e:2f:ec:e9:2b:75:f7:
         4b:eb:98:91:45:1b:3b:0e:1d:de:73:ae:3e:0f:23:67:67:33:
         69:dc:9a:cd:ed:f0:49:8d:9b:99:f7:99:8d:4b:2d:3b:20:bb:
         e2:fb:98:a1:44:d5:2d:35:7d:1f:1e:ce:e5:b9:d7:44:d2:d7:
         e3:5c:0b:fd:83:de:87:72:f3:d2:ef:b2:8e:60:54:e6:4b:d1:
         31:9f:99:9a:33:85:51:a0:60:9d:e7:49:08:56:49:9b:1e:dd:
         ef:dc:fc:84:e7:c9:93:34:5d:35:fd:27:81:67:15:67:a3:bd:
         17:25:92:d8:26:35:eb:32:a3:2c:58:63:19:b8:0f:63:0e:23:
         8c:11:28:0e:b8:ae:96:15:e3:2c:43:dc:c9:eb:73:d8:0d:1f:
         38:bc:52:e4:50:85:70:a8:7f:92:55:e3:0a:91:66:50:41:5e:
         fd:70:0e:15:32:e4:df:53:27:19:0e:cc:a5:90:86:0c:bb:3d:
         c2:af:55:f5:74:5f:52:ed:60:31:22:51:c0:96:c4:a1:46:75:
         a6:20:b6:a6:48:c6:c0:2e:ad:48:80:38:18:27:2e:11:b8:de:
         5a:21:04:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org