Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa
File:                     3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (raw, json)
Hash identifier:          QOIGz6yKA3/lh5lXv34tumwhgWDUEYdUaO4VQLFGXx0=
Subject key identifier:   07:4D:6A:9C:C4:CC:32:CF:B0:6E:AD:6E:DE:BE:68:E6:C9:6F:FB:2F
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       44007811CB328C97B08476D03EC2CAA050E2D679
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa
Signing time:             Tue 26 Mar 2024 03:00:00 +0000
ROA not before:           Tue 26 Mar 2024 02:55:00 +0000
ROA not after:            Tue 25 Mar 2025 03:00:00 +0000
asID:                     24312
IP address blocks:        103.118.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
                          rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:00:78:11:cb:32:8c:97:b0:84:76:d0:3e:c2:ca:a0:50:e2:d6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Mar 26 02:55:00 2024 GMT
            Not After : Mar 25 03:00:00 2025 GMT
        Subject: CN=074D6A9CC4CC32CFB06EAD6EDEBE68E6C96FFB2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:89:60:bf:e9:2b:09:fc:dd:a8:cb:2f:de:
                    1f:cb:31:2a:1b:cb:d3:03:f5:68:90:dc:07:e2:b1:
                    26:cf:83:ea:a8:b1:bc:12:22:a5:0b:b9:4c:d7:0c:
                    12:fb:f9:1e:3f:ff:1a:f6:e1:0e:54:60:5a:24:d8:
                    6c:fa:a4:13:0f:7a:08:3d:18:b0:92:e6:11:65:cf:
                    00:31:d1:8a:48:5d:41:4d:86:dd:65:c3:49:f6:93:
                    09:ad:ac:73:3c:f6:52:9b:c4:2a:0a:62:51:31:77:
                    83:7b:a9:83:99:9a:24:50:ab:c5:3a:b4:29:1f:76:
                    8a:ad:77:28:26:59:05:4d:a5:1f:d0:e6:70:ae:d2:
                    3a:33:16:0b:fe:fd:37:80:a7:7a:5d:ad:b6:d7:aa:
                    80:f5:0e:d6:18:54:7b:ab:0f:6a:36:20:69:9d:17:
                    4b:06:81:55:9d:ec:26:9e:1a:32:ab:22:d2:ce:f9:
                    80:22:65:fc:e8:86:4b:49:fa:0e:7f:ce:42:95:af:
                    be:3e:01:65:48:1b:d2:fc:a3:39:f2:b2:70:d4:1a:
                    39:f3:d5:bd:5f:69:b1:04:b7:86:a5:1e:49:7b:20:
                    f5:50:f5:33:80:36:1c:04:ec:67:46:42:4f:28:bf:
                    c9:73:2b:65:1f:3d:1a:e5:c8:eb:21:bf:3e:7b:41:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4D:6A:9C:C4:CC:32:CF:B0:6E:AD:6E:DE:BE:68:E6:C9:6F:FB:2F
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:a4:f3:18:fc:7a:69:ba:9b:31:93:db:92:87:54:87:13:80:
         95:fc:c6:05:83:44:60:03:02:92:3c:01:d3:8c:6d:72:7d:b2:
         b2:b5:47:96:07:67:45:0d:34:84:35:ee:eb:ef:e5:e9:ea:20:
         9e:f2:77:e2:b4:25:d5:83:01:eb:97:56:53:ab:92:95:d6:94:
         17:db:71:8b:31:d9:83:1f:8c:d3:10:48:ef:b9:92:1d:03:37:
         9e:12:cb:0e:23:4d:13:67:de:23:6e:5b:0c:16:63:6d:f0:72:
         48:a6:eb:3d:62:dc:aa:84:d1:c8:f7:af:7e:c5:1e:92:3e:65:
         7f:a1:66:c4:c2:e9:c2:0a:43:2f:48:5c:36:1a:cb:d5:b6:3d:
         b4:cc:78:f9:b4:23:9b:b6:e1:60:a3:bd:9d:35:f5:6c:84:53:
         30:2a:74:2b:d6:9f:f4:d0:23:88:e2:e7:84:d1:cc:5c:d1:20:
         18:e8:14:6b:34:90:6d:04:71:66:60:ad:38:ad:a2:07:87:6e:
         ad:54:42:f1:f2:20:d8:21:f8:33:08:67:06:0f:5c:17:31:92:
         f4:41:eb:c9:f6:6a:e4:33:48:b8:15:ac:98:3f:63:6a:31:3c:
         ab:89:cd:d8:05:b3:46:03:72:87:44:5a:c1:5a:07:49:a5:43:
         44:a1:8e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org