Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
File:                     3130332e3131342e37372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          4iF2DAYXca0PwyRa6I/9oqnyxS2Bxw4WunP3ufbDqb0=
Subject key identifier:   20:57:C1:45:7B:66:33:7A:C6:DD:AB:BC:79:4D:B6:EB:C5:40:09:57
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       16499C7F621AA25DF2594516414BE36CF6CED690
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
Signing time:             Sat 23 Sep 2023 11:00:01 +0000
ROA not before:           Sat 23 Sep 2023 10:55:01 +0000
ROA not after:            Sat 21 Sep 2024 11:00:01 +0000
asID:                     23679
IP address blocks:        103.114.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:49:9c:7f:62:1a:a2:5d:f2:59:45:16:41:4b:e3:6c:f6:ce:d6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Sep 23 10:55:01 2023 GMT
            Not After : Sep 21 11:00:01 2024 GMT
        Subject: CN=2057C1457B66337AC6DDABBC794DB6EBC5400957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:ed:6c:4d:02:5e:19:e1:c8:ab:c2:68:28:
                    9c:67:9f:43:21:bd:a7:b3:eb:ac:f8:bd:99:4f:d9:
                    c2:1c:bb:fa:ba:30:c8:4f:6f:a7:53:fa:9d:3b:f5:
                    15:fb:c8:07:2c:f0:7b:42:0c:d9:72:3d:1a:04:19:
                    b3:6a:48:22:85:48:45:97:f5:e7:85:63:70:1b:35:
                    de:0f:24:f7:09:50:db:e9:a4:57:1e:b2:de:8b:63:
                    c9:65:12:6d:3b:eb:a3:ed:b6:fb:71:ba:2e:d8:f2:
                    bc:a2:48:2a:3c:8d:16:44:26:35:37:64:ec:52:d1:
                    65:f0:df:45:8c:55:eb:ee:3a:0e:bd:84:17:ba:1b:
                    2f:f1:cf:23:63:45:c8:b3:df:d2:31:0d:d3:02:1d:
                    34:17:80:7e:98:61:df:f8:6a:0b:35:c7:59:71:69:
                    54:a5:5c:4a:a2:6f:6b:84:9f:79:61:cc:89:50:d0:
                    e7:09:d6:a1:5b:15:75:a5:e2:82:35:c6:24:6e:bb:
                    06:cb:23:96:6c:5d:2c:59:7a:65:4c:68:34:64:22:
                    cd:ee:56:cf:32:50:88:df:bf:89:36:a9:69:a6:bb:
                    3c:0d:6c:c0:b1:0b:23:30:c7:b4:18:b4:76:95:0f:
                    5c:90:1e:a8:6a:4c:2b:d1:47:da:a9:64:e4:af:50:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:C1:45:7B:66:33:7A:C6:DD:AB:BC:79:4D:B6:EB:C5:40:09:57
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:13:6b:9b:47:50:73:d3:a4:96:61:0c:06:ad:6e:c3:ec:fc:
         98:b0:ce:90:7e:96:39:81:16:2e:cb:b7:f8:c6:d4:f0:2e:90:
         2b:70:d9:ee:aa:c4:61:d7:e1:3b:2d:52:9e:89:b5:73:ea:24:
         10:8f:27:da:c6:3a:22:72:95:5d:0e:61:68:a3:21:2e:b9:78:
         e3:ef:0e:5e:fa:a3:15:91:1a:53:8b:32:b2:95:ba:ce:04:8c:
         6c:62:24:69:bf:fd:7b:3e:66:0b:9b:3a:b9:1b:cf:03:0a:db:
         94:a0:42:fe:47:14:fe:88:70:13:fc:01:d6:b5:f4:d4:e7:3d:
         97:b5:8d:e1:24:3c:8f:a5:5b:6c:db:25:49:16:c5:ea:51:59:
         85:06:75:9c:8e:5b:a7:a1:b4:3b:c6:cd:fe:a7:79:2c:4b:79:
         65:92:16:17:1e:33:a9:70:c8:46:15:cd:35:ec:84:bf:02:e5:
         df:a9:44:a0:2c:33:87:4c:b1:31:e5:a3:a7:37:fb:cf:43:c3:
         af:04:b4:f1:a8:c8:56:f9:aa:36:5a:77:53:36:25:99:4d:98:
         2d:8b:43:a6:18:70:83:07:d1:3f:5c:e8:8c:76:a5:62:20:1d:
         0a:c2:e3:b2:e4:c3:15:63:de:22:8b:92:c7:fd:75:65:7c:67:
         d0:0a:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:17 2024 by rpki-client on console-fra.rpki-client.org