Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          i4JuNBljOHxGociye75dcZ/aT6oCOjNeRU54ZabqIcY=
Subject key identifier:   0A:D6:78:F5:CD:AE:53:7F:1B:A4:B7:15:D3:8F:72:0D:EF:5D:4D:37
Certificate issuer:       /CN=79FE7055A022B9483725E25688019B44DD3B94A7
Certificate serial:       3ADFBBADA4A715BE589C6CCC6391E9F032DE1905
Authority key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa
Signing time:             Thu 28 Mar 2024 03:00:56 +0000
ROA not before:           Thu 28 Mar 2024 02:55:56 +0000
ROA not after:            Thu 27 Mar 2025 03:00:56 +0000
asID:                     141933
IP address blocks:        103.166.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl
                          rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:bb:ad:a4:a7:15:be:58:9c:6c:cc:63:91:e9:f0:32:de:19:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FE7055A022B9483725E25688019B44DD3B94A7
        Validity
            Not Before: Mar 28 02:55:56 2024 GMT
            Not After : Mar 27 03:00:56 2025 GMT
        Subject: CN=0AD678F5CDAE537F1BA4B715D38F720DEF5D4D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:d4:2b:6c:63:44:0d:9f:c3:8a:a4:fc:ef:
                    d6:46:4c:a2:26:07:57:84:91:68:e6:a6:1d:58:58:
                    be:d6:90:23:8a:90:8d:ae:12:e9:16:b6:bf:57:7f:
                    2e:30:35:e9:4c:2c:09:3a:6a:3b:55:fe:fb:49:8d:
                    64:96:b4:62:88:e4:6c:92:4d:f9:47:a6:9b:04:98:
                    56:9c:bf:59:46:b9:d3:c6:74:5b:ba:61:be:07:fd:
                    87:bd:6c:73:1a:14:28:c8:e6:6d:59:d7:c6:7a:91:
                    a9:58:7a:7f:8d:97:a0:f3:fa:80:f2:11:94:80:10:
                    56:47:a3:42:91:2a:de:cd:bc:92:14:79:fb:ed:09:
                    60:31:51:62:f7:d3:7c:15:4c:02:d9:e0:e9:54:ac:
                    c8:a6:79:f4:c7:7a:7f:46:b9:c9:01:74:75:a6:7a:
                    6d:e1:c2:ed:5e:51:e5:06:73:fd:95:e9:95:71:76:
                    4c:92:fe:63:6f:14:fd:02:6b:e4:55:87:6f:c4:3f:
                    12:67:a4:36:f4:18:3d:a1:72:c8:fc:e0:7a:22:61:
                    52:09:42:ca:aa:12:a9:88:f4:a9:11:ea:01:28:d4:
                    8d:5e:a2:8f:8a:ab:a0:22:da:b5:ae:16:8e:54:b0:
                    2e:d4:67:fe:51:8a:fd:7d:c2:dd:5f:85:94:9f:a1:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D6:78:F5:CD:AE:53:7F:1B:A4:B7:15:D3:8F:72:0D:EF:5D:4D:37
            X509v3 Authority Key Identifier:
                keyid:79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36352e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:13:4e:62:a4:d8:5c:52:55:c1:4d:d2:20:5c:36:cf:bf:
         5e:b7:d3:f0:c3:35:f0:12:6e:87:21:d9:4b:da:90:32:e4:12:
         01:73:a7:1f:32:e7:ee:f6:7e:8e:4f:54:91:7b:2b:93:79:d2:
         33:1c:13:26:dc:9c:d0:68:1c:51:67:75:90:77:d9:bb:cf:b0:
         88:b3:a4:9f:c8:8c:40:c7:e1:79:33:3e:eb:40:05:6b:b0:cf:
         99:1c:cf:4a:38:09:87:83:e7:c5:c8:dc:5a:5d:c4:7c:32:fc:
         e5:28:53:77:3f:ef:d8:a0:c7:ef:a0:44:2a:c4:4d:e3:ef:2e:
         a0:dc:f4:f1:57:5f:18:20:a7:96:80:a0:b2:be:a7:5d:ca:7c:
         6f:c2:0c:88:e7:36:c2:b7:b2:5a:95:bb:6b:17:bc:65:05:5c:
         57:e9:24:c0:db:23:ea:00:d8:12:78:87:ef:26:ab:68:97:47:
         e5:d4:fd:c8:aa:ea:30:b0:43:1f:6c:32:7e:4b:a9:ec:c1:35:
         9e:a0:16:9d:91:6e:be:4a:e6:c7:e8:58:0b:69:c3:d4:2c:4c:
         67:e3:e2:61:51:30:03:59:bb:40:16:81:db:8c:c3:4e:4b:b2:
         80:f2:c8:8c:08:ed:af:c2:92:f1:23:d8:02:50:03:03:17:52:
         86:9f:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org