Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37332e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37332e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          f1PpRxL3xmZAFFxFfzO5NNMp7lmH15xQgW21SceJnv4=
Subject key identifier:   8D:03:EE:55:4B:23:D6:29:A6:89:9D:D3:3E:EF:E9:0C:FE:C1:EB:2E
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       67C2F5447595EDFAD0E7A6E57E9300C172EA05FA
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37332e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 02 Oct 2024 15:00:03 +0000
ROA not before:           Wed 02 Oct 2024 14:55:03 +0000
ROA not after:            Wed 01 Oct 2025 15:00:03 +0000
asID:                     46061
IP address blocks:        103.24.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c2:f5:44:75:95:ed:fa:d0:e7:a6:e5:7e:93:00:c1:72:ea:05:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Oct  2 14:55:03 2024 GMT
            Not After : Oct  1 15:00:03 2025 GMT
        Subject: CN=8D03EE554B23D629A6899DD33EEFE90CFEC1EB2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5c:b3:b9:87:33:8a:cb:a0:ae:2c:6a:48:26:
                    53:30:83:f1:7d:e0:fa:08:de:8c:6e:12:12:a4:e6:
                    50:b7:88:96:f5:fd:61:49:90:c7:c4:72:00:14:0b:
                    5f:3a:70:65:fc:c9:28:e7:59:d1:0e:f8:ed:00:b2:
                    c0:3b:da:48:1d:12:57:38:d0:60:16:19:86:0f:3b:
                    bc:fd:99:21:21:db:79:da:b0:43:aa:30:d8:4d:aa:
                    0a:1d:36:07:2c:d3:d6:f0:57:59:d9:88:36:c2:4f:
                    8c:41:35:5c:85:cb:4f:38:e0:d4:e3:48:2e:74:af:
                    5a:4d:39:69:7f:46:f6:9c:20:15:c0:74:15:6a:b4:
                    9e:08:c9:90:da:14:26:12:5d:a4:9d:da:6b:e7:77:
                    ca:92:0c:d9:7e:b9:59:a2:01:b3:c4:39:aa:7a:f5:
                    ed:62:17:7b:4d:0a:d6:27:de:f9:24:37:17:f5:ec:
                    04:78:80:19:59:32:54:d5:7e:9b:3e:00:e1:08:80:
                    43:e2:73:71:31:a4:70:6f:ae:64:ae:9e:77:9c:36:
                    a5:09:47:22:f5:33:5e:7b:46:43:39:c0:14:ed:f4:
                    bc:cf:d2:e0:67:8f:fa:85:a6:65:57:08:32:21:f3:
                    19:e3:42:b9:a9:ab:cc:fd:b0:66:3a:79:29:e7:df:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:03:EE:55:4B:23:D6:29:A6:89:9D:D3:3E:EF:E9:0C:FE:C1:EB:2E
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37332e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:7c:84:0f:ce:3d:5e:ec:6b:e2:6f:64:95:60:90:d6:ee:
         a5:03:44:7b:cf:ce:87:59:f7:cf:b3:4b:f1:83:82:60:e0:44:
         f6:44:c3:50:3c:fd:66:47:53:7f:c0:45:ba:df:85:e7:58:a8:
         47:7b:3d:b2:6b:37:f6:c7:cc:13:5a:65:7b:03:2c:68:a2:20:
         5a:f0:19:f2:66:63:89:6a:d4:65:6e:a7:03:42:d0:36:ed:20:
         cb:0b:bb:d1:9e:d2:c4:b6:f3:a2:36:a4:24:0f:e3:7d:b4:01:
         e6:1b:d0:11:0e:1a:b2:b8:88:53:e8:9f:ac:d7:77:ed:13:7c:
         f7:3a:a8:d5:f1:5d:20:17:73:b4:94:f5:a6:01:50:31:f4:97:
         c0:db:5f:c3:df:40:cf:88:05:b3:06:da:13:d3:bf:26:55:1b:
         f7:0e:18:dd:62:6a:b9:f1:fb:0a:55:e8:0c:c7:d4:a9:02:c3:
         c5:c4:5f:af:6d:d3:c8:26:ae:ac:6e:dd:54:72:2d:8e:11:26:
         53:41:a8:87:9d:a9:ed:39:62:01:63:c1:71:30:dd:40:24:32:
         63:63:e3:2d:05:62:18:ee:ce:22:56:ed:38:ca:20:4f:d4:a8:
         58:88:49:11:58:df:79:8e:48:a4:4e:bb:ed:40:b0:de:3a:4a:
         f0:23:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org