Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (raw, json)
Hash identifier:          Z9IAhIGPSW0D8q8SOrPrTN5/ox6RaXTEZEZk4SdKFWk=
Subject key identifier:   77:9A:37:54:07:93:D4:59:D2:47:7C:9B:93:91:A1:7B:11:4A:F1:79
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       28840555EF4C3D9C1BC3E765F4AF355992259393
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa
Signing time:             Fri 14 Jun 2024 11:00:00 +0000
ROA not before:           Fri 14 Jun 2024 10:55:00 +0000
ROA not after:            Fri 13 Jun 2025 11:00:00 +0000
asID:                     149953
IP address blocks:        103.118.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:05:55:ef:4c:3d:9c:1b:c3:e7:65:f4:af:35:59:92:25:93:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jun 14 10:55:00 2024 GMT
            Not After : Jun 13 11:00:00 2025 GMT
        Subject: CN=779A37540793D459D2477C9B9391A17B114AF179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:40:bc:35:2f:c3:6d:70:ee:38:55:22:ad:87:
                    51:c1:a7:46:71:9c:73:92:1e:f8:b1:99:10:ec:f5:
                    24:a8:15:32:6f:40:e8:bd:ed:87:25:67:c8:8a:50:
                    69:02:ff:e6:a0:da:61:1b:7e:cb:b5:82:c0:77:53:
                    e7:bf:c9:80:9a:1e:ba:4f:77:96:4c:ac:fd:03:00:
                    f5:91:a6:d1:f7:08:ad:9d:11:e4:ac:5c:67:58:64:
                    37:6a:3c:b7:9f:c3:68:71:4e:a3:ba:b4:13:ed:fb:
                    c4:63:92:e9:fc:5a:1e:0b:69:75:3c:f2:12:63:d6:
                    88:3b:19:0a:96:c5:02:60:3b:1b:d9:36:b4:47:35:
                    72:eb:c2:fd:88:a4:dd:5a:f1:10:01:45:94:92:a1:
                    bb:1c:8c:b2:02:ec:8d:d6:c7:7d:c7:ca:88:fa:df:
                    1e:20:46:1b:0a:da:90:5b:b6:a6:79:cd:91:32:c6:
                    bd:95:a1:f2:5f:6f:20:2f:13:e6:c0:67:cb:a3:25:
                    f9:df:cb:9e:aa:8f:2d:0f:40:e7:64:14:ca:10:da:
                    b1:ba:c5:fa:d1:43:7c:f8:f2:a3:3e:e1:fc:14:95:
                    d2:e5:ce:c5:97:04:97:75:a2:38:63:aa:36:34:d6:
                    eb:06:39:94:fd:3a:56:a2:ed:d1:2a:71:eb:a2:ff:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:37:54:07:93:D4:59:D2:47:7C:9B:93:91:A1:7B:11:4A:F1:79
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:0a:85:c2:b2:7e:48:6e:1d:01:57:7b:c2:f5:d6:4e:23:0c:
         1e:5b:e3:5d:21:2e:d6:b2:1d:2f:a0:fd:c8:08:2b:9b:77:fd:
         10:c0:61:ce:04:eb:e1:b2:2b:6a:9d:34:0b:2e:a2:0b:97:d5:
         ff:ed:b0:be:80:ae:8e:3d:28:ba:5d:fe:74:73:5a:56:82:a0:
         be:54:81:6d:06:13:8a:26:a1:bd:12:67:63:63:e5:92:6f:c2:
         f2:5f:f6:56:b6:bb:11:7f:52:d8:cf:a9:77:f1:e2:3a:3e:c4:
         3a:26:ea:31:57:c7:60:40:6e:d2:f3:d8:da:04:da:c7:b2:4f:
         6d:d2:3e:04:b2:e0:84:7b:a0:1d:f7:8e:35:a0:5d:9b:52:98:
         86:66:c8:66:4d:1f:b3:0c:11:52:a1:7e:ef:8d:5a:88:b7:31:
         a7:6b:12:2a:e1:2c:87:d3:c0:d2:88:d3:55:8c:22:6d:98:d2:
         da:43:22:8a:64:1e:8d:ee:07:68:c4:3e:45:2f:d6:e2:4f:c2:
         9d:ef:52:57:37:ed:24:70:2b:1b:e6:83:42:bb:9c:49:f7:c5:
         92:2f:1b:3f:6c:fb:d6:5c:66:57:a4:f4:e1:46:b7:8b:8c:ff:
         6b:38:b3:36:44:51:91:ea:30:68:62:b3:f0:2b:eb:62:00:99:
         96:00:d3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org