Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa
File:                     3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa (raw, json)
Hash identifier:          iT1qC3JGo7rmqQb6ji3KcUc2W/wQlBARQFtQz42wezY=
Subject key identifier:   8F:61:B2:28:E6:4E:63:4F:48:52:99:48:BE:E3:4B:C2:5F:1E:DA:11
Certificate issuer:       /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
Certificate serial:       64A361D260DCC43A2CDEFB9938A42C5830D69404
Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa
Signing time:             Tue 06 Feb 2024 12:30:29 +0000
ROA not before:           Tue 06 Feb 2024 12:25:29 +0000
ROA not after:            Tue 04 Feb 2025 12:30:29 +0000
asID:                     147165
IP address blocks:        103.178.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl
                          rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a3:61:d2:60:dc:c4:3a:2c:de:fb:99:38:a4:2c:58:30:d6:94:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
        Validity
            Not Before: Feb  6 12:25:29 2024 GMT
            Not After : Feb  4 12:30:29 2025 GMT
        Subject: CN=8F61B228E64E634F48529948BEE34BC25F1EDA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:69:23:62:e7:ce:8b:23:ef:3e:52:d0:e8:
                    c4:c2:e0:99:2a:5f:fc:6e:9e:aa:64:2d:7b:88:b6:
                    22:7d:3a:eb:07:2a:33:81:09:16:48:a4:26:d9:cd:
                    00:99:20:ae:53:95:81:d6:0f:8e:15:1e:c1:1d:f0:
                    aa:e1:2c:d7:ef:a1:83:7e:e4:b6:7c:f8:78:15:2d:
                    36:fe:a1:41:fd:ef:73:99:c6:82:74:7d:29:d2:62:
                    4f:ec:38:7e:76:c7:c7:4c:a1:1a:29:3c:6a:be:8a:
                    e7:20:32:6e:78:7d:c9:08:b4:ae:bf:08:4e:0a:2c:
                    47:f4:ba:5f:93:1b:15:7e:84:cb:5b:90:ff:12:87:
                    11:ca:ae:02:46:4f:b2:be:75:43:f0:44:4a:ee:33:
                    4e:60:de:f1:18:63:46:fd:a8:dd:59:31:94:ca:d3:
                    ac:97:e3:fa:5c:75:08:c5:ca:ee:2f:ed:5b:25:bf:
                    61:8a:fb:c5:64:ab:c8:f4:58:92:d2:bd:13:6c:e5:
                    68:7b:3f:c1:b7:b7:1a:ac:d7:38:d7:f3:4e:04:ad:
                    18:a6:14:0d:07:9f:af:18:1a:3f:44:65:2c:68:98:
                    bd:31:d6:b6:cc:43:70:04:b4:08:4c:84:7c:d7:76:
                    d7:b9:57:50:ba:13:c5:a1:2d:f3:17:ec:68:61:16:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:61:B2:28:E6:4E:63:4F:48:52:99:48:BE:E3:4B:C2:5F:1E:DA:11
            X509v3 Authority Key Identifier:
                keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32332d3233203d3e20313437313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:fd:85:62:27:e4:48:f8:13:17:7d:a5:c8:4a:ba:fa:af:
         b6:2d:7d:1d:67:2c:27:88:2e:e2:dc:88:b5:ed:c1:60:f0:77:
         c9:f9:73:aa:85:43:00:86:82:8d:32:96:6b:24:18:11:46:71:
         ac:c9:41:de:6e:a2:e1:b2:82:70:e4:c1:ad:e7:7b:4d:1d:20:
         47:d3:bb:0b:66:9e:d3:d4:49:94:6b:53:09:1a:5e:ac:75:c1:
         4d:a7:dd:f5:65:7a:ee:06:08:dd:13:6a:fd:03:ae:f2:cb:14:
         39:35:fd:f9:8c:73:ae:6b:61:12:86:4b:c2:6f:4b:b3:60:0c:
         9d:a4:22:30:67:64:98:d6:de:ac:ed:ec:e3:a4:ba:c9:4d:34:
         b0:61:2e:5c:e5:65:1f:35:48:f3:64:0d:af:90:5b:22:42:dc:
         d3:1d:a5:f4:6c:2a:4b:0c:9b:b7:75:8c:cd:26:20:12:a6:75:
         99:b0:8c:1b:bb:7b:af:57:d1:63:94:5c:18:79:e8:1d:c2:61:
         49:a0:5e:6c:fe:30:b5:f3:58:f9:00:fa:8b:47:3a:cb:d7:ec:
         f4:41:81:60:ea:45:94:56:41:9a:d7:1f:8b:67:0e:b6:5b:bb:
         a1:02:b1:30:0e:04:fa:c6:7c:92:c6:d7:77:a7:b6:6b:ac:70:
         28:0a:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org