Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa
File:                     3130332e38392e37382e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier:          yjkQvhl3lWhDuwGVVQghf0hSHRRy4Xjnuo/O5QntUbY=
Subject key identifier:   75:3F:33:9A:F6:11:E2:45:8F:E4:E4:EB:20:20:A0:75:4B:3A:E4:CD
Certificate issuer:       /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Certificate serial:       787C0B01071E500BD1F6EBBA139960767AE35A83
Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa
Signing time:             Thu 16 Nov 2023 06:00:01 +0000
ROA not before:           Thu 16 Nov 2023 05:55:01 +0000
ROA not after:            Thu 14 Nov 2024 06:00:01 +0000
asID:                     45701
IP address blocks:        103.89.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl
                          rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7c:0b:01:07:1e:50:0b:d1:f6:eb:ba:13:99:60:76:7a:e3:5a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
        Validity
            Not Before: Nov 16 05:55:01 2023 GMT
            Not After : Nov 14 06:00:01 2024 GMT
        Subject: CN=753F339AF611E2458FE4E4EB2020A0754B3AE4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:e6:65:0b:18:a2:d7:e5:2a:14:85:79:16:
                    93:1c:93:77:09:e7:9c:b9:c8:e7:d5:35:6d:05:68:
                    35:83:92:5d:c2:04:25:a5:5b:1a:5d:d5:e0:c4:d1:
                    a9:79:54:c1:f2:52:7d:a9:ae:59:d0:9f:8d:d2:ad:
                    8c:df:a2:5b:4d:cc:58:05:b6:e9:44:d6:d1:f4:f8:
                    ff:a8:df:34:68:d1:a3:d5:30:bd:86:99:a6:ff:b5:
                    53:55:86:56:22:14:79:58:eb:83:99:2c:a8:57:7f:
                    62:85:22:8a:0c:f1:f8:71:f4:b3:e7:1a:d6:bf:d8:
                    4e:0f:15:90:92:19:43:1c:be:5f:ee:95:85:83:f8:
                    50:98:ec:00:64:b5:13:4c:47:de:b1:3b:7a:5f:c7:
                    e8:1c:1f:1d:88:45:c4:5a:ae:6a:16:9d:d1:d4:f3:
                    5d:f9:9e:33:67:96:53:e5:91:eb:2d:b1:b7:ee:83:
                    75:7b:52:4f:6a:29:70:6f:c9:48:37:1e:3c:27:20:
                    0f:f9:f4:13:1e:b0:77:ae:bd:04:0d:9c:e4:87:87:
                    8c:4f:ab:63:66:e9:cf:ed:26:2e:35:28:94:59:de:
                    88:84:50:5c:32:ca:be:78:bc:75:bf:ee:6d:60:5e:
                    51:ab:d6:b5:5f:72:d9:b4:9c:3e:0e:e7:be:34:e4:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:33:9A:F6:11:E2:45:8F:E4:E4:EB:20:20:A0:75:4B:3A:E4:CD
            X509v3 Authority Key Identifier:
                keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37382e302f32342d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:6b:6e:52:9f:14:9c:9d:89:05:c1:ff:8e:6d:73:94:88:
         1e:cc:8f:6a:bc:cf:13:85:8a:16:d5:16:97:03:26:e1:e8:33:
         16:be:e6:c2:ab:0d:32:61:3b:9b:31:e7:e3:c3:cc:ae:58:dd:
         7f:e1:42:b1:61:ac:e8:fe:70:d1:64:1e:11:a1:74:3d:b1:c3:
         1c:86:0f:77:e4:7a:45:64:4c:14:f1:35:84:57:d9:aa:a2:5a:
         59:52:2e:a9:14:41:10:3a:e1:f3:1a:08:9a:91:d0:b0:a0:77:
         a4:df:33:3e:ef:4c:fe:d7:b6:f3:b6:34:32:69:b2:b2:f7:99:
         e5:09:eb:b1:16:1d:a9:79:1a:f3:b6:63:82:da:34:bc:11:ce:
         2a:1d:d6:ed:85:27:93:a1:f9:8f:43:bc:7d:6e:8f:8c:f4:d2:
         2e:19:bc:21:48:f8:87:c5:78:d4:35:4f:85:14:05:8e:3c:ab:
         8f:53:56:fc:46:2e:b4:10:42:df:12:61:37:7b:1f:74:19:59:
         0f:0c:1e:21:76:93:54:38:f9:0a:26:7c:25:05:97:1b:37:ed:
         d3:0d:f8:41:3c:04:6a:1a:d1:84:a4:34:e5:e1:43:07:d8:7b:
         e4:d9:01:56:21:7b:33:d9:ba:29:4b:6c:24:1a:04:0a:23:44:
         87:19:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:40:25 2024 by rpki-client on console-ams.rpki-client.org