Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          9uZP0oTC8IVk0l4FZkOXo+5HBJCWyKSN41smNyhrSN0=
Subject key identifier:   73:76:98:E2:40:88:46:E9:4F:29:4D:DF:B2:5A:D7:82:5E:20:DA:31
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       F942344F1523C581A9637EE1EC8C997223CA20
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
Signing time:             Thu 28 Mar 2024 03:00:56 +0000
ROA not before:           Thu 28 Mar 2024 02:55:56 +0000
ROA not after:            Thu 27 Mar 2025 03:00:56 +0000
asID:                     141933
IP address blocks:        103.166.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f9:42:34:4f:15:23:c5:81:a9:63:7e:e1:ec:8c:99:72:23:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Mar 28 02:55:56 2024 GMT
            Not After : Mar 27 03:00:56 2025 GMT
        Subject: CN=737698E2408846E94F294DDFB25AD7825E20DA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:52:2b:ae:76:a4:e0:43:0e:1b:bd:4a:42:
                    4f:1f:8f:ca:27:2b:58:3c:4b:42:f2:c9:7b:cd:51:
                    2a:41:b1:09:2f:23:41:5a:04:c2:fc:94:24:8c:99:
                    a4:41:65:3d:d2:1d:aa:84:ee:81:a7:af:c7:1d:e0:
                    fa:d9:c8:4b:45:76:c7:62:f5:3f:29:c6:de:4c:bc:
                    d4:78:b2:04:ab:36:5a:c0:bf:c5:3c:7a:3d:a1:dc:
                    a3:ea:e8:f0:25:d8:72:a5:05:23:f6:74:80:93:35:
                    ec:7b:8e:c1:55:6a:1c:69:37:30:5e:6d:da:21:9d:
                    29:01:1c:c1:e1:b3:c4:88:e7:25:83:35:03:0a:8c:
                    86:cb:7c:b4:d9:3b:20:b9:72:d8:9d:1f:59:70:93:
                    55:cb:f2:b7:d9:b9:82:2e:75:f9:e7:86:82:89:c1:
                    8d:40:40:f7:c7:c2:aa:69:4a:1c:7b:00:7e:e5:5d:
                    70:84:93:6b:b1:20:e5:1f:08:94:43:75:c6:69:d7:
                    1d:c2:4e:ce:8e:61:bd:6b:89:c4:ed:57:1b:38:36:
                    67:c0:df:1e:6e:45:9a:08:6a:d4:11:7f:3d:cb:d2:
                    6f:b4:ed:56:09:89:bb:1f:f3:4f:5c:3b:33:5d:e6:
                    ed:41:af:d1:69:6c:84:f5:b3:9b:f7:b3:82:a9:82:
                    c5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:76:98:E2:40:88:46:E9:4F:29:4D:DF:B2:5A:D7:82:5E:20:DA:31
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:5a:50:01:b2:2e:04:d2:00:83:dd:63:8c:bb:1b:c0:a9:e8:
         ac:f3:25:68:c6:ed:c3:03:a3:57:d4:87:df:1c:03:83:6f:f6:
         4a:03:2f:3b:e4:e0:f1:f3:74:42:b1:ac:3e:c7:96:e7:24:0f:
         47:a7:c4:b1:1b:d3:7d:45:75:98:62:47:b8:5c:93:97:a0:d0:
         62:2e:18:b5:76:33:56:b7:41:16:b7:fc:7c:cc:e4:b5:cf:48:
         d0:4b:d5:25:4c:87:08:c7:25:37:40:a9:70:7a:7e:03:46:0c:
         a0:29:d5:c6:ff:ac:a2:a6:13:91:79:f0:8e:b3:ad:03:56:d2:
         8e:c4:8a:cf:4a:1f:52:45:b0:af:1f:68:d0:14:54:2b:8a:03:
         7c:02:ed:55:bd:af:21:90:30:37:cf:b2:76:a5:5b:c9:c5:82:
         2e:93:e6:1c:50:46:3e:61:ae:04:c8:31:8e:4b:6c:04:b9:46:
         f1:a7:7e:46:fa:14:60:69:0f:2c:2c:c4:17:0c:b1:18:97:8f:
         1f:ca:f1:c1:e4:6a:fe:a0:89:3f:fc:22:88:8d:b4:ae:83:51:
         31:13:2c:3f:f7:14:01:49:67:f8:36:22:f3:a2:95:d8:6d:db:
         4d:05:28:ef:29:d6:dc:f6:97:eb:4a:44:48:0b:02:fe:f1:3d:
         50:1e:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org