Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa
File:                     3130332e3131342e37392e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          xE/Hu5o7m5DVPp5T2r5JizSYZQshzPQj7i70LmxRLwg=
Subject key identifier:   95:F8:66:46:48:BB:56:2F:DF:89:6F:A8:92:BE:28:29:F1:2E:FF:6D
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       0935D81D828280BC1A58CB8AB4CEF641430B09F1
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa
Signing time:             Sat 23 Sep 2023 11:00:02 +0000
ROA not before:           Sat 23 Sep 2023 10:55:02 +0000
ROA not after:            Sat 21 Sep 2024 11:00:02 +0000
asID:                     23679
IP address blocks:        103.114.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:d8:1d:82:82:80:bc:1a:58:cb:8a:b4:ce:f6:41:43:0b:09:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Sep 23 10:55:02 2023 GMT
            Not After : Sep 21 11:00:02 2024 GMT
        Subject: CN=95F8664648BB562FDF896FA892BE2829F12EFF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:f8:77:a3:ea:db:4b:68:c2:03:a2:ba:f0:
                    dd:50:50:ae:b0:4d:7d:b9:23:8f:f4:1e:f4:39:17:
                    32:22:2f:aa:68:c1:b9:05:31:01:65:ca:f1:1a:29:
                    cf:f1:6b:f3:60:bb:ec:21:fb:fe:ab:e9:41:27:5a:
                    e4:e5:52:eb:57:1d:19:e5:65:98:b0:aa:79:98:7a:
                    f4:e6:53:d6:94:0d:57:58:30:ef:31:50:48:2d:a5:
                    04:14:78:11:22:eb:2e:a0:b9:fb:9d:10:b2:c1:83:
                    2e:85:5a:e7:1e:bf:39:c2:7d:1f:d0:7b:b5:8c:78:
                    66:cb:90:cf:06:73:75:6f:30:19:f2:03:b0:d8:f7:
                    76:26:01:6b:20:0a:91:44:71:bb:b1:8d:90:f6:31:
                    4a:a9:bb:63:d2:97:06:cf:40:a1:09:68:77:f9:e0:
                    99:ea:e1:b0:d6:14:bd:82:33:c0:06:73:9a:69:0f:
                    ee:c3:d1:ab:a8:25:9b:2f:a3:a1:0c:8f:fe:2a:c6:
                    06:6b:da:a4:60:8d:3b:b2:ca:a2:23:f1:62:a4:98:
                    4a:b6:d9:4c:82:d3:5f:6d:e9:58:04:73:bd:a0:3b:
                    12:0b:d9:c5:37:74:d0:f7:a0:ee:b3:ea:53:db:c1:
                    99:c4:6a:ad:ab:d7:c9:ec:6a:cb:af:9a:a4:bc:19:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:66:46:48:BB:56:2F:DF:89:6F:A8:92:BE:28:29:F1:2E:FF:6D
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f5:ce:72:80:e9:db:ae:8a:1f:34:c0:52:ed:ef:8a:46:ad:
         dd:25:b9:6f:f0:4a:a9:87:39:45:e6:fb:1d:fd:a6:be:95:80:
         57:f4:f3:44:48:21:b3:18:f6:53:de:7e:85:30:05:28:98:ee:
         c7:09:91:b8:51:cd:ec:2d:ed:c0:df:54:8b:80:31:c8:2a:08:
         2b:ee:90:5f:2b:1b:8a:77:9e:b1:3c:80:13:cb:b4:22:97:9e:
         12:8d:05:5c:4a:81:e6:9c:a3:7f:55:35:14:7f:ba:4d:6b:4f:
         ba:86:82:ba:a4:4f:c5:8c:b6:18:70:fa:b7:c6:08:fa:ea:5f:
         ab:fe:71:45:cd:a3:2e:96:46:0f:10:39:55:15:02:ca:ed:3d:
         26:71:fb:3b:ea:3c:62:06:a2:ce:e5:b2:05:18:e6:0e:8d:c7:
         b2:6c:45:54:ed:e7:2b:dc:0b:46:a3:b1:cb:1e:c1:cd:75:65:
         cb:1f:21:27:29:87:24:a4:b0:85:fe:aa:ae:de:69:a7:1e:e2:
         be:89:89:e6:a2:80:4f:51:2c:95:21:fd:78:c0:8f:21:f2:fe:
         2d:da:2c:f8:5f:76:08:27:5a:1d:7e:0b:8c:0d:9b:21:d6:c2:
         1d:ab:ab:ce:19:52:60:a6:66:c5:18:33:8a:be:c6:6f:cf:5a:
         1f:28:9b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:36:17 2024 by rpki-client on console-fra.rpki-client.org