Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa
File:                     3130332e32342e37322e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier:          x4DDjlfJXD8JPTM+yjgeUkBoc/VsMYv5J2mqGIAVt3k=
Subject key identifier:   7F:C1:A1:BC:54:D6:18:9B:C0:E9:37:80:B0:C3:EA:CE:84:5A:7B:96
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       758C7BC39F74ECCA2EEE89DB64212725848B9347
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa
Signing time:             Wed 02 Oct 2024 15:00:03 +0000
ROA not before:           Wed 02 Oct 2024 14:55:03 +0000
ROA not after:            Wed 01 Oct 2025 15:00:03 +0000
asID:                     46061
IP address blocks:        103.24.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8c:7b:c3:9f:74:ec:ca:2e:ee:89:db:64:21:27:25:84:8b:93:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Oct  2 14:55:03 2024 GMT
            Not After : Oct  1 15:00:03 2025 GMT
        Subject: CN=7FC1A1BC54D6189BC0E93780B0C3EACE845A7B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:13:d0:bc:b9:76:67:9a:4d:96:6b:ec:d9:3b:
                    b1:30:d5:e2:0f:3e:54:1a:75:bc:4e:18:40:8e:12:
                    1b:df:f0:89:02:f8:b1:bd:ab:5a:4a:db:f4:d0:14:
                    3f:d2:57:40:37:e2:ec:d7:15:28:47:42:eb:3e:88:
                    3b:58:26:39:0a:0a:30:53:61:84:78:a0:0d:0d:df:
                    10:30:ee:7e:12:5b:4d:31:6e:d6:8f:50:b5:ed:46:
                    cf:d2:28:fa:7e:cd:15:8d:e4:04:fe:2d:51:13:73:
                    76:94:ec:55:63:48:18:8d:2d:91:2b:e4:3d:aa:bf:
                    0b:82:29:76:45:26:f4:7c:aa:be:89:52:2d:13:db:
                    18:b2:e1:1c:32:96:8f:3a:84:c0:9e:cb:af:06:db:
                    4c:f7:dc:21:99:ac:bb:33:0b:de:b7:a9:f9:01:8a:
                    d7:5c:72:da:3d:9a:1d:04:0f:f5:21:62:e8:3c:4a:
                    ae:07:52:5f:ef:f3:bd:87:8b:df:50:70:aa:0d:e2:
                    2c:a3:76:f5:fc:f7:28:66:45:81:cf:c6:3e:88:93:
                    32:f3:1d:74:2b:26:59:b9:fa:d4:3b:34:95:1c:52:
                    db:8e:e4:2b:70:12:17:82:a3:7c:a6:0c:99:99:ce:
                    05:a1:28:e3:a2:5a:10:6e:7a:d7:34:3c:a5:f0:46:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C1:A1:BC:54:D6:18:9B:C0:E9:37:80:B0:C3:EA:CE:84:5A:7B:96
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32332d3233203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:d2:1b:2f:98:9d:11:81:ee:a2:23:9b:6c:6a:35:5d:15:
         e3:8e:1d:3b:3b:3a:40:7a:63:08:3a:2d:c5:cb:96:92:b4:ce:
         6d:8c:25:1e:d3:d4:c1:bf:15:95:8b:bd:b2:a5:37:ec:e2:34:
         23:7b:68:b9:5a:10:28:27:d7:f3:ef:c4:17:d8:b5:43:51:f0:
         d5:44:5c:d1:be:e2:d1:e3:de:c0:5f:6d:47:34:a5:f9:7c:01:
         8f:a7:61:67:cb:cd:ca:39:71:19:77:47:4f:02:02:30:a4:bc:
         10:c4:28:c0:1f:6b:cb:bb:21:ca:dd:2d:fe:34:3b:ab:f5:9d:
         da:80:a4:99:6a:2e:bf:04:86:f0:ca:20:b8:72:87:ac:e6:cc:
         1d:7c:cf:65:1f:9a:77:42:05:a2:88:4d:16:be:e8:b2:30:7c:
         35:15:8e:0e:5e:a7:48:48:13:8a:c7:ac:4f:88:b7:18:97:73:
         90:a7:7a:9e:20:34:3b:d5:71:3c:4e:55:fb:8a:0d:cd:b0:c1:
         50:e8:ea:fc:45:52:0f:ca:00:85:50:a6:76:96:57:47:be:13:
         1e:5c:82:a3:98:df:c1:08:4d:fe:a2:88:29:c8:fb:65:ad:61:
         fe:34:44:0c:93:d2:b9:32:c0:07:55:65:bb:cc:a2:96:66:b4:
         ef:6f:1e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org