Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e203233363739.roa
File:                     3130332e3131342e37382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          z4JufMAAhm6RIwM2MCEN5dNOyrlVB1ETMbcKAAyjeIE=
Subject key identifier:   7B:F4:DC:DE:AD:3F:FF:1F:F5:0C:9F:14:39:67:CD:D4:5F:DC:26:63
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       3301DD49012B0CB6C57A87E585DAD2663A505698
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e203233363739.roa
Signing time:             Sat 23 Sep 2023 11:00:02 +0000
ROA not before:           Sat 23 Sep 2023 10:55:02 +0000
ROA not after:            Sat 21 Sep 2024 11:00:02 +0000
asID:                     23679
IP address blocks:        103.114.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:01:dd:49:01:2b:0c:b6:c5:7a:87:e5:85:da:d2:66:3a:50:56:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Sep 23 10:55:02 2023 GMT
            Not After : Sep 21 11:00:02 2024 GMT
        Subject: CN=7BF4DCDEAD3FFF1FF50C9F143967CDD45FDC2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:5c:a7:50:52:9f:02:bd:dc:2f:87:e2:0e:
                    cd:17:e9:58:f7:b0:2d:7c:31:aa:3b:ad:35:16:5a:
                    c8:74:47:7e:7f:13:09:9f:a4:b1:82:87:9b:da:12:
                    e4:c1:9e:f3:9e:d7:0d:b4:e5:9f:8a:a8:ed:2e:76:
                    7d:d8:b0:7f:ab:f5:4f:99:8d:40:e9:81:b9:70:5c:
                    13:c1:c5:0f:cb:a0:36:49:a7:83:16:a4:79:df:6b:
                    0c:0a:0c:b0:d3:d0:dc:2f:81:4f:62:1a:7b:f7:ff:
                    fb:d8:95:8c:13:82:cf:7e:db:d5:ee:4e:60:79:8b:
                    78:48:53:7a:b3:fa:f4:97:c1:28:81:0b:84:d7:ec:
                    13:6e:22:38:78:ab:18:55:ed:db:a0:a6:ff:99:bd:
                    e6:06:4d:e0:4f:61:de:b6:3b:fa:c3:7d:0f:40:01:
                    dc:22:24:a7:a0:64:92:93:4a:22:69:a6:18:91:cc:
                    5f:7f:2e:f9:c9:1d:78:a3:a5:b3:c2:45:61:fc:28:
                    91:83:c3:e7:71:d1:86:d6:26:33:60:46:ba:6c:61:
                    ab:d4:37:86:d4:95:6c:11:71:62:b0:97:b5:63:eb:
                    53:01:92:85:57:dc:f7:3f:fb:8c:2a:20:17:78:07:
                    8e:a6:55:44:d3:9c:73:12:10:8d:0c:35:d4:1f:30:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F4:DC:DE:AD:3F:FF:1F:F5:0C:9F:14:39:67:CD:D4:5F:DC:26:63
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37382e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:27:26:9b:83:22:bd:6c:dd:67:2b:a1:05:ba:52:64:83:f8:
         49:93:2f:cf:64:40:74:15:89:3d:84:6e:99:b2:b2:ff:67:85:
         a1:bd:63:20:b3:74:be:f0:36:18:9d:99:a2:e1:7c:69:54:80:
         38:f7:1f:64:56:4a:65:18:69:c9:85:09:ac:b1:5f:90:9f:b5:
         65:4a:53:51:91:5d:f9:8b:b0:4d:7d:f7:4d:cf:f0:65:56:7d:
         ec:c3:eb:96:f3:c6:18:66:c5:13:25:19:29:d4:b8:df:92:e8:
         7a:cf:15:27:77:8f:ea:45:2a:8c:c6:0b:c8:d3:86:ef:54:b1:
         18:f4:3f:3c:a3:e6:e7:0b:73:cc:c3:4f:9b:f1:c3:e8:85:a1:
         1c:5f:3a:74:81:88:c7:cf:fb:ec:83:15:eb:30:4f:62:f5:9d:
         75:21:0f:c0:4c:16:23:70:0c:25:8e:66:05:ab:b0:be:85:3f:
         3f:9a:b8:80:95:4b:52:fc:28:a3:64:7e:6b:42:e3:40:f4:06:
         00:d2:39:51:40:45:07:9a:98:d8:18:02:e7:f2:ce:7d:b9:0c:
         a1:7e:d1:c6:73:b2:ae:3e:15:34:5e:67:7d:98:ef:64:83:96:
         d7:cd:b8:13:2d:67:49:46:45:db:c7:f9:6a:26:a9:44:26:93:
         11:80:42:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:17 2024 by rpki-client on console-fra.rpki-client.org