Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa
File:                     3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          sic167d6uDgMGkobFwky0f/36JQQxAskztr9NEz1SIc=
Subject key identifier:   7A:BB:78:67:61:FB:D8:A9:6F:97:6B:CE:0C:B5:95:D1:E3:50:37:C3
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       29134D896F8CC91F97C5FE3F372A0CC5912CB134
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa
Signing time:             Thu 13 Jun 2024 15:00:00 +0000
ROA not before:           Thu 13 Jun 2024 14:55:00 +0000
ROA not after:            Thu 12 Jun 2025 15:00:00 +0000
asID:                     210537
IP address blocks:        103.118.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:13:4d:89:6f:8c:c9:1f:97:c5:fe:3f:37:2a:0c:c5:91:2c:b1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Jun 13 14:55:00 2024 GMT
            Not After : Jun 12 15:00:00 2025 GMT
        Subject: CN=7ABB786761FBD8A96F976BCE0CB595D1E35037C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:90:33:e4:29:46:86:60:3b:54:dc:2c:5b:
                    f5:e8:83:ca:06:87:08:f4:ea:bb:6a:f1:dc:7a:7b:
                    3b:09:bb:a4:eb:ff:81:36:4d:0f:88:8c:4f:c0:d6:
                    8e:0f:24:5d:0e:04:a8:cf:f1:95:0e:16:1d:72:86:
                    e9:40:09:c0:06:62:87:12:5a:47:4d:81:05:19:db:
                    ef:b7:53:4d:44:8a:ee:a4:68:38:b1:94:88:16:eb:
                    00:fb:49:28:52:6f:66:60:bd:84:33:8e:0b:68:7b:
                    3c:c8:69:e9:fa:20:49:58:31:14:6b:cf:80:9b:46:
                    c8:9d:b1:55:08:dc:24:34:f8:3a:18:d7:66:7f:41:
                    2f:e8:b3:03:52:82:57:e4:95:f9:bc:af:cd:f2:78:
                    dc:36:42:6a:82:17:41:90:b3:d0:02:41:80:a8:9c:
                    a2:9f:6f:02:38:40:c0:53:47:7a:c0:f3:28:c9:12:
                    d9:ca:13:d2:fa:f1:97:c7:1b:d4:d0:ef:b4:b3:d5:
                    8c:c0:65:02:7c:78:3a:f2:6e:73:19:40:d5:75:19:
                    9f:2d:4d:96:27:9b:2f:a9:4e:9e:e6:86:21:1f:74:
                    83:74:92:8c:f9:0a:9e:e5:e0:8b:25:6a:76:03:c4:
                    32:78:a2:fe:6c:70:63:7c:bc:5e:e1:0a:9a:96:1e:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BB:78:67:61:FB:D8:A9:6F:97:6B:CE:0C:B5:95:D1:E3:50:37:C3
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:0c:63:80:2a:7f:b5:3d:08:c0:aa:08:61:db:0b:7b:59:fb:
         1b:e2:86:74:df:e2:85:1d:68:61:eb:d4:63:80:33:c8:4c:7d:
         5f:17:98:2e:56:a9:8c:07:bb:f0:1f:21:f4:ff:e7:ef:2a:84:
         91:0a:5e:4e:91:df:7a:96:e3:0d:f6:81:3c:91:ab:31:1a:b2:
         86:b6:16:4e:67:f7:10:78:32:65:c5:7b:d8:ba:f6:e2:77:4b:
         81:e0:df:4a:1b:c1:90:1a:ff:d2:7a:0e:03:65:76:a8:f3:17:
         48:3f:2b:60:c9:97:88:6a:dd:cd:f5:9b:d0:de:74:bf:8a:e7:
         7c:91:ac:31:46:f4:28:2d:95:fc:28:2a:8e:fe:9b:63:07:a4:
         18:85:4e:1b:09:48:47:a4:24:2b:cf:45:5f:3a:af:b9:86:b5:
         7e:dc:e0:28:2d:63:75:07:aa:56:b5:72:d8:6d:9d:31:8a:94:
         0a:57:f3:96:01:c5:7d:77:44:52:10:38:7a:63:24:73:85:f0:
         b5:f6:f3:bf:ec:f4:49:26:b4:b3:05:f0:b8:f6:e8:7e:86:49:
         a3:12:7e:bd:e6:72:7c:61:46:05:6f:21:72:81:f6:25:06:d9:
         44:4b:33:30:be:e6:46:9e:58:69:07:0d:19:7e:5f:5c:d9:58:
         b4:af:c7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org