Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
File:                     3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa (raw, json)
Hash identifier:          zZBJFp+c6iu3SZb52Go40Raz7VAXreiWV6JgXrEh7kg=
Subject key identifier:   AB:EA:71:E1:68:33:56:BD:C7:4B:DB:E1:F0:D9:E4:6C:59:27:24:39
Certificate issuer:       /CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
Certificate serial:       2DD3A87A99C675C80BF9B90613D35C28B5B33A72
Authority key identifier: 03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa
Signing time:             Sat 10 Feb 2024 18:07:18 +0000
ROA not before:           Sat 10 Feb 2024 18:02:18 +0000
ROA not after:            Sat 08 Feb 2025 18:07:18 +0000
asID:                     147165
IP address blocks:        103.178.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl
                          rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d3:a8:7a:99:c6:75:c8:0b:f9:b9:06:13:d3:5c:28:b5:b3:3a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8
        Validity
            Not Before: Feb 10 18:02:18 2024 GMT
            Not After : Feb  8 18:07:18 2025 GMT
        Subject: CN=ABEA71E1683356BDC74BDBE1F0D9E46C59272439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:6b:6b:90:38:ab:84:67:8c:0d:4b:26:a8:
                    37:a2:b7:25:76:27:df:a1:20:f2:4e:fd:73:c1:4c:
                    0f:8c:aa:49:90:d3:8b:14:57:36:d6:17:f7:07:44:
                    c1:28:db:3d:dd:81:6c:4d:19:2b:a8:07:bf:da:94:
                    61:46:ac:6a:65:29:c2:8a:e2:42:1b:8a:97:63:54:
                    38:92:d7:86:a4:3e:55:a8:3e:bf:50:a3:82:46:1e:
                    68:b7:4d:10:b5:9f:cc:3d:d4:bd:d4:54:b1:62:d0:
                    4a:be:90:9e:6c:a4:29:fc:bd:45:e8:0e:10:06:39:
                    7e:bd:92:a4:ed:63:7d:86:5b:07:36:f2:8f:2a:d3:
                    18:ad:fc:da:a0:97:10:d0:e6:7d:4a:ae:66:25:01:
                    6f:fb:e0:5d:bf:04:3d:c5:d1:d5:ac:f5:9a:6b:e2:
                    b5:02:05:f1:d8:02:e7:77:63:00:4c:c8:c9:b6:b7:
                    fa:75:97:cf:f1:7c:73:59:85:5c:96:30:2a:74:6b:
                    9f:2c:b8:fa:cb:5d:bc:94:9b:bf:86:75:c4:66:e4:
                    be:05:91:12:c4:5c:2c:19:07:85:fc:2b:9a:7c:44:
                    36:d7:c5:3d:1f:60:a0:42:95:cd:44:25:18:e7:95:
                    c3:2d:07:42:b6:3a:76:83:7c:e2:dd:76:9d:55:0d:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EA:71:E1:68:33:56:BD:C7:4B:DB:E1:F0:D9:E4:6C:59:27:24:39
            X509v3 Authority Key Identifier:
                keyid:03:2F:A8:F0:C6:C7:0F:4D:27:6E:F4:A2:E9:C8:5F:6A:AE:92:5A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032FA8F0C6C70F4D276EF4A2E9C85F6AAE925AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03a79d95-64a9-4809-94b2-62de24192245/0/3130332e3137382e31322e302f32342d3234203d3e20313437313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:d3:c3:aa:22:2e:26:a4:a1:5d:b3:01:57:6c:28:e1:03:
         db:3d:9c:3e:38:94:33:bf:9d:34:2b:76:77:89:d6:94:21:f5:
         2d:11:84:67:ed:68:8c:79:26:e1:24:25:74:7b:51:4f:08:d1:
         aa:cf:c0:66:0a:ab:99:9f:d8:05:d7:89:cf:16:c3:6e:1a:ed:
         71:ab:28:06:eb:43:fc:b5:57:da:51:6b:1b:43:fb:89:35:2b:
         3b:c2:6a:b0:a0:62:bf:2a:78:4f:f8:23:6e:3a:a0:99:ab:eb:
         99:f9:bb:71:51:e2:1b:8d:80:6c:0a:a5:1a:a4:32:88:62:44:
         9d:d0:e6:ec:9c:85:85:5e:15:0e:15:9f:1a:68:51:a3:fe:2c:
         b5:01:ad:78:30:54:98:30:bb:97:1b:7d:d9:03:53:d1:b7:2d:
         c4:85:13:d5:50:d3:a4:e1:60:a3:e5:45:74:c1:5d:c5:6d:fb:
         44:55:81:96:19:4a:9b:6d:e2:5a:e0:24:72:f0:bc:ba:a9:46:
         1a:d0:85:56:b2:d1:21:f2:65:5d:3c:74:c9:16:d5:02:69:8c:
         93:d8:70:1b:b3:6d:47:e2:96:7c:ba:9b:b9:3a:be:e5:e2:9e:
         04:c1:aa:39:ed:5f:30:66:40:b1:09:2e:96:ba:05:ad:c5:75:
         9b:bb:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:18 2024 by rpki-client on console-ams.rpki-client.org