Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37322e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          YyjNmT4+qZeBFgxvosewQoq9D8GIhL2GwF04mRxI1mU=
Subject key identifier:   D1:C2:C7:A9:C2:26:33:E8:96:B3:AD:DB:DA:AD:B2:12:A4:26:29:E1
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       39AEC281E7472F11EE3F01AEEE75B0C2C123C689
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 01 Nov 2023 15:00:02 +0000
ROA not before:           Wed 01 Nov 2023 14:55:02 +0000
ROA not after:            Wed 30 Oct 2024 15:00:02 +0000
asID:                     46061
IP address blocks:        103.24.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 09:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ae:c2:81:e7:47:2f:11:ee:3f:01:ae:ee:75:b0:c2:c1:23:c6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Nov  1 14:55:02 2023 GMT
            Not After : Oct 30 15:00:02 2024 GMT
        Subject: CN=D1C2C7A9C22633E896B3ADDBDAADB212A42629E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:ae:aa:5c:6b:0b:7d:b8:3a:cf:7e:44:19:
                    d1:94:46:ff:be:20:aa:42:e2:b4:bf:d0:16:1b:a6:
                    e1:38:39:46:66:c8:db:44:39:1a:d6:7c:49:0e:3a:
                    3e:9c:8c:4c:83:5f:02:bd:7b:36:92:5f:5f:60:80:
                    89:14:71:ff:a5:d4:57:de:5b:2a:fb:95:2d:41:2f:
                    c8:00:17:f1:6e:97:aa:82:f2:0b:10:d9:ab:ec:f0:
                    50:d7:6e:3d:08:b4:17:27:e7:cb:75:92:29:e2:00:
                    bb:45:c1:36:98:fb:ff:7d:c8:4f:c2:23:2a:bc:8d:
                    43:fb:4c:cc:7e:d7:16:41:2d:3a:ba:dc:fc:ae:fd:
                    5a:d4:c2:fd:0b:d3:eb:f4:b6:4c:f2:63:8d:c2:fc:
                    e6:e9:1a:04:2e:ab:27:1a:cb:1a:9b:cb:5c:d4:fe:
                    8d:95:c8:7e:64:3f:26:b6:fa:01:3a:b4:10:f4:f5:
                    f6:05:91:b9:b4:8c:b1:29:33:10:51:35:f4:51:6f:
                    99:c0:a9:af:b0:9d:03:2e:0e:a6:1d:9a:0c:01:c1:
                    78:6a:e9:7e:d0:94:92:7e:64:e8:9a:25:8e:c2:a9:
                    c2:a0:5e:36:cf:91:ee:69:7b:37:02:26:92:2b:4e:
                    58:75:81:d1:9f:b3:fd:bc:ea:21:d3:15:20:cf:99:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C2:C7:A9:C2:26:33:E8:96:B3:AD:DB:DA:AD:B2:12:A4:26:29:E1
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37322e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:1c:5b:3c:3a:60:98:35:72:3c:04:23:33:ec:3a:43:36:dc:
         ee:8d:3b:02:a2:2d:dc:b3:70:da:15:65:a5:ea:08:c9:2c:ef:
         ff:38:33:60:17:b2:9c:88:23:fd:1f:e5:13:e6:f9:41:1b:50:
         5f:7e:85:c1:3a:46:01:6e:07:3a:4f:43:cf:7c:a5:f6:6b:cb:
         f2:a7:3b:52:9a:77:14:47:84:4a:0b:15:42:de:20:b3:31:35:
         15:08:8e:3d:ed:bd:3d:31:b3:07:e6:48:3f:ce:e3:79:c4:a6:
         c3:69:35:25:5a:57:de:b8:05:7f:4a:a6:61:7e:43:d1:10:72:
         92:ba:ab:3d:c5:bd:b2:65:aa:99:6a:f7:26:ef:36:d2:fb:fa:
         3d:40:4f:71:7f:d6:9c:f9:ca:6a:c8:8b:e2:73:41:1f:b1:6a:
         33:5d:ad:56:13:4a:61:d4:74:18:8c:c7:81:5d:4a:1f:58:d2:
         e3:54:7c:f6:20:09:d0:36:c1:0b:1b:5a:eb:9d:85:0f:9f:46:
         8a:dd:d6:cb:6e:63:fe:fe:36:5c:7e:6e:66:71:c2:23:f8:df:
         f5:cd:1b:ca:0b:65:e1:82:f1:a0:2a:44:b8:6a:8b:da:38:30:
         44:fc:04:16:a7:61:ea:d9:eb:2c:cb:95:17:90:b9:f5:e3:79:
         47:07:f6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:58:00 2024 by rpki-client on console-ams.rpki-client.org