Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          jKU5gtVU219lnceaTucZefwhfrwPqEuRsJNHBd5zgSY=
Subject key identifier:   37:8D:9F:94:23:25:43:35:5F:3F:98:1F:9D:B3:39:7D:42:4F:E5:BC
Certificate issuer:       /CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
Certificate serial:       78F09C5E6A3BAA373D4FC162A8BFE692C9DB5E7A
Authority key identifier: 6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 15 May 2024 08:00:01 +0000
ROA not before:           Wed 15 May 2024 07:55:01 +0000
ROA not after:            Wed 14 May 2025 08:00:01 +0000
asID:                     9341
IP address blocks:        103.189.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl
                          rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f0:9c:5e:6a:3b:aa:37:3d:4f:c1:62:a8:bf:e6:92:c9:db:5e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC0C93340FF73593434C8EFFCED8EB31DB08FDA
        Validity
            Not Before: May 15 07:55:01 2024 GMT
            Not After : May 14 08:00:01 2025 GMT
        Subject: CN=378D9F94232543355F3F981F9DB3397D424FE5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:67:b1:b6:a2:18:2a:11:fb:b6:79:78:e5:
                    7a:51:b2:5d:b4:79:6b:61:ec:46:60:a6:08:1d:d6:
                    9f:08:86:b0:a9:f9:bb:0e:1d:1f:c5:f0:74:fa:5d:
                    6f:c3:f2:5f:82:8b:a9:5c:11:8f:91:ac:d5:10:90:
                    40:12:c2:5f:9c:5c:8a:e4:4f:79:fb:38:06:5e:7b:
                    8c:44:4b:b8:a7:b9:5e:fb:f0:9c:5d:40:d8:5f:b8:
                    8e:ef:cf:09:ca:63:c9:b8:87:41:5c:66:23:a0:f4:
                    f1:4b:d2:c2:d0:8d:e3:fa:1d:99:c3:8d:9d:ff:b0:
                    b7:48:d0:a5:16:ed:d9:2e:c0:25:97:ab:9e:5e:ab:
                    d4:ba:3e:ab:6b:6a:dc:04:78:2b:92:04:94:6d:46:
                    a9:4f:26:a5:8c:a1:20:25:5e:7a:26:b3:58:67:63:
                    7a:dd:0f:61:cf:76:62:8b:dc:23:94:7b:6d:0a:6a:
                    40:d0:f5:4a:55:1d:8c:3e:eb:f8:a7:15:b0:23:46:
                    37:4e:75:51:c2:ad:3c:62:75:88:e0:23:99:69:7f:
                    4a:86:28:fa:6f:e3:0d:79:17:7c:d2:ae:09:ca:b2:
                    c3:ee:3e:53:7e:c8:10:f8:ea:8b:04:1c:a0:f4:a3:
                    7a:5a:4f:68:f1:6f:92:f2:e7:0e:57:31:7b:4a:bc:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8D:9F:94:23:25:43:35:5F:3F:98:1F:9D:B3:39:7D:42:4F:E5:BC
            X509v3 Authority Key Identifier:
                keyid:6F:C0:C9:33:40:FF:73:59:34:34:C8:EF:FC:ED:8E:B3:1D:B0:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC0C93340FF73593434C8EFFCED8EB31DB08FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f659904-3702-4797-bd1b-447ab8c94e0c/0/3130332e3138392e3136392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:57:bf:28:44:da:05:ab:47:88:72:9f:7e:7b:79:04:7e:95:
         d6:e4:12:f4:36:ad:4a:b6:dd:74:8a:ec:85:30:7a:51:6b:68:
         d2:63:b2:6e:eb:03:7c:60:6e:4c:ce:1a:b2:53:e2:a3:b0:b1:
         f3:e3:a8:32:85:a7:0c:6f:1c:b1:c7:19:48:9e:6b:4a:ff:d8:
         e5:cc:6b:b8:a1:9e:17:df:d2:92:b3:43:79:25:ff:e2:6d:4b:
         28:2d:fe:cc:3a:61:36:1f:e2:03:17:63:b5:8f:74:3f:6c:14:
         e3:04:aa:b6:ba:c6:65:4d:67:bf:0b:87:fe:14:0d:cc:51:cc:
         36:b8:d8:0b:57:f3:c6:f4:4d:5d:77:10:ce:a6:0c:7c:e2:c3:
         a9:a8:d6:2b:76:13:25:9f:4b:56:da:df:e5:22:4a:9b:05:82:
         95:49:31:95:c5:53:25:b4:7c:57:8d:a6:a8:3f:ff:c0:cd:94:
         5e:64:37:7b:1a:f6:8b:bb:8d:dc:4e:6e:a7:b6:61:2c:f6:f3:
         14:0c:5e:17:cc:7a:c0:5c:62:8b:31:3e:cc:a7:26:3d:d8:18:
         d4:53:68:40:77:f3:a2:bd:96:74:71:78:7c:67:c6:bf:52:33:
         74:d0:5a:84:7a:38:52:a8:bd:64:8e:96:fe:40:4b:91:9a:00:
         39:5a:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org