Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa
File:                     3130332e32342e37342e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier:          oIugf7SkpkLh2rA1SUGcdVhDVwaoCqTNTgMKOIhVMMI=
Subject key identifier:   A6:6F:F9:C1:43:3D:B9:F2:BD:C3:A4:A7:27:73:62:79:D1:5C:02:83
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       5A18E75CD553FA5868C9D1A0571E92048A49FDBA
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa
Signing time:             Wed 02 Oct 2024 16:00:02 +0000
ROA not before:           Wed 02 Oct 2024 15:55:02 +0000
ROA not after:            Wed 01 Oct 2025 16:00:02 +0000
asID:                     46061
IP address blocks:        103.24.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:e7:5c:d5:53:fa:58:68:c9:d1:a0:57:1e:92:04:8a:49:fd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Oct  2 15:55:02 2024 GMT
            Not After : Oct  1 16:00:02 2025 GMT
        Subject: CN=A66FF9C1433DB9F2BDC3A4A727736279D15C0283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:97:68:5e:cd:98:d0:3e:00:07:c7:d2:50:8a:
                    78:b0:fc:3e:3d:29:16:1c:b4:f0:9a:12:61:e2:50:
                    34:7a:6c:8a:22:0a:eb:89:00:d5:8d:1e:7e:68:eb:
                    5c:96:a4:1a:73:88:0a:97:49:31:ef:ad:05:cc:5c:
                    e5:1b:1f:92:20:dc:2a:ef:b0:29:9a:2e:ef:cc:97:
                    4f:4c:db:35:c5:bb:46:d3:3d:f7:f9:6b:f3:ce:16:
                    2b:6a:66:15:d2:d6:60:71:df:ec:73:e0:df:40:66:
                    31:ab:bd:2c:7c:e6:82:bf:71:e9:64:ba:75:5a:61:
                    76:84:91:aa:1e:8b:57:b3:06:56:3b:f8:20:3f:97:
                    f3:78:6b:9a:fa:73:2d:0d:ac:06:db:b6:10:25:45:
                    f3:41:91:bc:3d:ce:aa:b7:4f:1d:b5:fc:b3:81:8c:
                    8e:c4:6b:ea:c2:dd:2d:f1:39:9d:a7:50:9d:c0:6a:
                    5d:10:81:d9:db:62:76:1d:47:bf:f0:fe:84:05:7f:
                    82:9d:44:f1:0c:1c:4e:ae:6c:0e:25:e6:0f:30:c8:
                    22:4d:20:2a:86:cb:d2:69:80:06:da:02:af:69:54:
                    ed:de:f1:f8:bd:0d:b1:45:4b:9a:ee:39:bc:f1:94:
                    b7:58:77:8a:82:12:26:94:04:7a:2e:8c:d1:c6:aa:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6F:F9:C1:43:3D:B9:F2:BD:C3:A4:A7:27:73:62:79:D1:5C:02:83
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:f9:5f:f9:65:cc:49:78:3a:74:03:1a:aa:73:23:48:79:97:
         35:19:bb:d4:72:b2:b0:a9:ea:a0:99:42:7d:9e:e9:cc:4c:3c:
         55:a5:d5:77:4f:f7:ae:c2:10:f7:1d:e7:53:ce:7f:84:a8:f0:
         95:2f:59:7a:99:a0:aa:e9:e8:f0:a4:4c:8e:07:01:4a:6c:0b:
         e8:1b:6a:96:aa:60:c2:5d:47:0d:07:65:6e:c1:05:01:5a:f9:
         78:00:44:18:93:dd:2b:b4:be:d1:75:2d:ed:30:c6:a1:df:a1:
         15:ad:51:30:a5:3b:f3:3d:11:7f:ec:47:48:81:0c:7c:4f:fd:
         30:5d:8c:ed:dd:60:8a:e2:9d:30:7d:b4:45:d4:06:a5:28:b6:
         b8:86:de:a5:b1:0b:9f:71:45:ed:b9:11:41:77:8b:3b:6a:76:
         b3:fd:0c:f3:f9:eb:2e:7c:c7:b2:93:fc:e6:6c:77:12:54:e2:
         b1:74:bf:83:42:c7:e4:b3:9f:29:3a:71:36:08:1d:4a:bb:c1:
         22:71:33:9e:75:02:d0:33:dd:9d:25:39:6e:46:e1:74:06:e8:
         57:0f:01:27:4c:0b:07:85:09:83:2e:6f:56:e1:39:d4:8e:76:
         81:50:98:c9:ff:bf:2c:17:10:28:95:12:df:6d:4a:86:a9:07:
         cc:5a:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org