Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          Y0t2DRuhwJJ3zavAXvT0AC01oB3n6aGAS9hRGflnuyY=
Subject key identifier:   A2:74:8A:03:15:50:7B:77:7B:90:58:EF:87:A7:A7:17:3B:B1:BA:3C
Certificate issuer:       /CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
Certificate serial:       62F0A1918E39806C08C20F96278D70D814543C3B
Authority key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa
Signing time:             Fri 14 Jun 2024 02:00:00 +0000
ROA not before:           Fri 14 Jun 2024 01:55:00 +0000
ROA not after:            Fri 13 Jun 2025 02:00:00 +0000
asID:                     139952
IP address blocks:        103.178.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl
                          rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:a1:91:8e:39:80:6c:08:c2:0f:96:27:8d:70:d8:14:54:3c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1
        Validity
            Not Before: Jun 14 01:55:00 2024 GMT
            Not After : Jun 13 02:00:00 2025 GMT
        Subject: CN=A2748A0315507B777B9058EF87A7A7173BB1BA3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:93:91:9c:c3:a7:b2:08:72:61:5b:dd:80:
                    95:e2:f4:ff:6a:c9:38:f1:80:c1:22:1e:93:b1:4c:
                    a9:6e:cb:ba:9b:b7:5f:11:d8:57:87:4e:bd:f7:e3:
                    5b:50:83:45:0f:1a:79:a6:81:fe:1d:db:96:07:c9:
                    50:be:fd:9c:9f:c2:d4:9b:d1:0d:4c:00:b9:21:8a:
                    3f:fa:0c:6b:0b:c3:aa:4b:aa:73:5a:bc:0d:a8:83:
                    91:92:2a:9a:81:49:da:72:24:45:67:2f:f1:f8:79:
                    f2:5c:f6:ef:c6:95:ed:85:27:1d:6f:40:d7:d7:14:
                    0d:d4:9b:e8:de:28:63:c3:c5:7d:0a:21:0b:22:83:
                    ce:19:0f:39:73:11:e1:0e:07:37:10:e3:db:1f:4f:
                    cc:60:45:e4:7b:6f:8c:1d:2d:2e:ea:d7:be:42:fc:
                    80:bb:29:2a:ca:ce:f1:30:e1:c2:b8:ce:83:a8:54:
                    77:a9:bc:5a:42:a6:3f:06:18:df:bf:f2:6b:f0:72:
                    5c:c4:86:b0:1d:e5:04:cd:ad:12:c5:cb:c8:8a:33:
                    3d:fe:e4:27:2e:8b:e4:6b:1e:9b:74:86:a3:b6:dd:
                    fa:04:fd:69:d7:1a:a4:fc:9b:3e:b1:a4:42:f3:8e:
                    1f:12:71:af:31:46:cd:95:52:af:64:39:e7:0b:87:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:74:8A:03:15:50:7B:77:7B:90:58:EF:87:A7:A7:17:3B:B1:BA:3C
            X509v3 Authority Key Identifier:
                keyid:E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137312e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:30:ff:d0:b6:9e:6b:eb:42:98:ed:d0:c7:a9:b7:bc:40:
         1c:1d:6f:22:ba:0a:d0:4a:9c:11:ef:92:59:b8:0f:f4:c9:d8:
         0e:f3:8d:58:d7:77:9a:71:d0:5e:86:ba:df:4e:23:fa:41:ab:
         0c:29:4d:d3:34:10:b6:fc:30:79:4f:b3:ba:9a:92:f3:bd:2b:
         81:47:3b:ac:e7:3c:82:e5:4b:32:01:a5:26:4c:f1:56:0b:0d:
         b2:d4:8f:1d:18:29:55:f4:66:73:2e:5e:f3:4b:2b:f0:b2:74:
         4c:ec:da:6a:32:e6:cf:16:c9:18:97:35:7a:cd:05:16:aa:05:
         57:69:44:a2:2e:a1:03:51:e2:78:62:7f:b9:4e:0c:2c:0d:0b:
         1d:ba:eb:ff:9d:d1:e4:45:2d:12:9b:8c:34:4e:5f:fd:18:3a:
         9b:71:5e:11:2c:15:d7:ae:13:2a:03:80:5f:bd:e9:55:34:40:
         29:ba:f1:2a:12:fc:bf:f3:87:43:3c:88:78:f8:cd:89:a2:47:
         96:79:01:62:d0:c9:b1:7f:2f:61:a4:00:ac:d9:c3:2a:c1:90:
         82:58:63:67:8b:8d:e0:fd:90:8a:a8:34:ca:d7:a9:1d:9c:24:
         a7:1c:0d:dc:af:9d:96:d3:b9:63:91:d1:c8:52:91:21:00:4d:
         c6:fe:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org