Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa
File:                     3130332e32342e37342e302f32332d3233203d3e203436303631.roa (raw, json)
Hash identifier:          wixNplraWVzLDfBoclPrgN/2KHafsHjyjudkWcQYP58=
Subject key identifier:   0F:D2:13:5C:9F:72:2A:4A:F5:67:80:11:E3:9A:61:E7:F5:FA:B4:E2
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       039EC3D4298166DAF3B0AFA1E1DA011D1711CAEB
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa
Signing time:             Wed 01 Nov 2023 15:00:03 +0000
ROA not before:           Wed 01 Nov 2023 14:55:03 +0000
ROA not after:            Wed 30 Oct 2024 15:00:03 +0000
asID:                     46061
IP address blocks:        103.24.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 09:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9e:c3:d4:29:81:66:da:f3:b0:af:a1:e1:da:01:1d:17:11:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Nov  1 14:55:03 2023 GMT
            Not After : Oct 30 15:00:03 2024 GMT
        Subject: CN=0FD2135C9F722A4AF5678011E39A61E7F5FAB4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:db:b0:cb:75:3e:83:55:cb:6b:e1:9b:2f:
                    29:aa:c1:8f:dc:e5:d6:02:3f:17:48:ad:04:45:76:
                    6e:e9:5c:9d:6a:45:aa:c1:24:86:36:f1:cc:fc:b0:
                    16:35:ec:a4:df:35:5f:5a:4e:e4:3d:8b:99:39:68:
                    09:9d:d6:ea:69:2c:2c:f6:71:29:b4:c5:55:c7:dc:
                    27:39:6f:d7:9b:16:7d:fb:80:01:6d:f6:54:33:c3:
                    a1:ac:79:af:8f:49:62:da:a4:32:bd:e0:dc:aa:2d:
                    e8:6d:ed:0f:a6:c5:7a:3f:b0:fe:de:43:08:39:63:
                    3d:25:7e:59:09:b8:d8:c5:5d:44:a0:92:bc:42:70:
                    53:e5:55:b3:7b:01:03:08:5d:b9:03:01:2e:2d:b3:
                    9b:65:8e:70:76:29:14:a7:3f:97:3d:e6:5a:76:6f:
                    ca:4f:84:64:1f:33:bb:eb:3a:2c:bd:c8:43:20:38:
                    3a:5a:37:6c:94:6f:3a:53:3d:fe:33:cc:4f:a0:fc:
                    8e:c4:a2:2a:d9:28:e1:bf:07:c8:c5:a1:31:b5:1b:
                    4e:31:0f:12:0c:60:e2:f5:d4:1e:13:e8:dd:3f:b5:
                    c4:04:2c:b6:ae:c2:b5:b7:08:66:8d:68:3c:39:6a:
                    84:d8:68:43:b7:c4:1c:68:56:eb:6c:5e:1d:df:8a:
                    be:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D2:13:5C:9F:72:2A:4A:F5:67:80:11:E3:9A:61:E7:F5:FA:B4:E2
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37342e302f32332d3233203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:b2:ec:dd:cc:9c:dc:72:a8:5e:f1:80:d3:a3:d6:c2:b1:70:
         83:ef:d4:68:8e:62:85:b7:be:42:85:42:a4:70:32:b2:5f:a8:
         b8:4c:5c:f7:3f:d7:82:28:1d:37:d3:30:3b:ae:36:76:88:d9:
         49:f9:c4:0d:c2:86:fb:22:de:79:25:bb:16:0e:10:a8:9d:67:
         28:c2:4d:76:4e:69:86:b3:6d:b0:e4:7c:2a:60:06:58:ad:1a:
         4b:60:3d:1b:68:da:0d:0a:79:e7:42:a9:cf:61:82:ac:f2:dc:
         19:65:67:57:ea:1b:2c:e1:db:57:4c:33:86:05:9f:01:64:a4:
         48:c2:bb:0c:66:2b:83:0a:2e:a3:9c:27:12:34:7a:6a:06:0a:
         e2:53:fa:1f:a0:ac:16:c4:d4:f7:4e:2c:9f:a0:dc:5b:a9:72:
         87:c2:34:a3:f5:07:cf:8c:22:e8:fc:ab:df:b8:f4:c6:e0:8f:
         06:82:6d:c1:77:11:df:87:01:05:d4:3f:2b:2e:69:f2:ba:bb:
         55:17:40:02:54:cb:3f:52:94:6d:f1:f4:bc:6a:ac:d1:27:60:
         11:a9:b0:1a:ad:69:76:27:d0:76:23:3c:f8:cf:7e:53:24:49:
         30:ee:4c:83:da:f9:21:e7:f9:02:72:6f:d8:be:0c:b5:58:73:
         0b:66:a0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:40:04 2024 by rpki-client on console-fra.rpki-client.org