Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
File:                     3130332e32342e37352e302f32342d3234203d3e203436303631.roa (raw, json)
Hash identifier:          gzAKun938h8MEEYn2Es4sjxOwM+BBzImFI8E5s6Tryg=
Subject key identifier:   D8:7A:BA:0F:59:95:B9:34:4F:C5:E6:3A:E1:B9:24:5B:66:63:EB:3E
Certificate issuer:       /CN=667078BDA093F84040F3016D179CABA67F68A647
Certificate serial:       56C101C0D5BB7DD4E5921EF1364E3EA2FCFF3968
Authority key identifier: 66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa
Signing time:             Wed 02 Oct 2024 15:00:02 +0000
ROA not before:           Wed 02 Oct 2024 14:55:02 +0000
ROA not after:            Wed 01 Oct 2025 15:00:02 +0000
asID:                     46061
IP address blocks:        103.24.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl
                          rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c1:01:c0:d5:bb:7d:d4:e5:92:1e:f1:36:4e:3e:a2:fc:ff:39:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=667078BDA093F84040F3016D179CABA67F68A647
        Validity
            Not Before: Oct  2 14:55:02 2024 GMT
            Not After : Oct  1 15:00:02 2025 GMT
        Subject: CN=D87ABA0F5995B9344FC5E63AE1B9245B6663EB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4f:d0:a9:ef:7f:aa:bc:b5:8e:6e:31:ea:4d:
                    eb:9e:5a:dc:83:1e:c9:57:4a:ac:ca:ea:a6:a1:51:
                    bc:e0:02:37:91:f7:07:10:ef:a0:b9:4a:7f:94:4c:
                    eb:bb:a3:d2:d4:b6:a9:3d:27:eb:96:7b:b1:1c:08:
                    fb:84:bc:a0:b1:72:f5:8c:d9:eb:c3:ad:d4:9a:23:
                    5e:ed:b9:69:b9:a3:11:a1:3c:41:a7:fc:16:6b:6a:
                    4f:a0:8d:4a:ba:84:10:85:dd:d3:d6:10:c7:7f:57:
                    b8:89:66:e6:39:ac:a9:d0:74:b3:fb:8f:62:6a:4d:
                    e1:f0:1d:4a:22:e1:bb:75:a3:a9:b7:97:37:ae:b8:
                    87:0a:7e:d4:d4:00:b9:a3:1d:2e:4f:6a:fb:51:7f:
                    75:94:94:b3:ff:d2:88:15:7d:cc:f5:3e:56:74:aa:
                    b6:89:83:5e:1a:a0:06:b9:3b:aa:a2:64:c0:41:eb:
                    79:61:67:74:ec:cb:8c:af:2e:0c:a7:66:e7:57:f7:
                    8a:5e:06:97:36:5e:35:01:0e:44:0e:ad:76:38:f2:
                    6d:73:1e:93:b3:58:45:f4:81:6d:0d:b9:60:6a:3f:
                    d4:1c:af:82:e7:b3:7a:9c:48:3d:19:00:40:22:e0:
                    f8:42:e7:52:3f:64:60:2a:3d:22:53:e5:ed:ff:6b:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7A:BA:0F:59:95:B9:34:4F:C5:E6:3A:E1:B9:24:5B:66:63:EB:3E
            X509v3 Authority Key Identifier:
                keyid:66:70:78:BD:A0:93:F8:40:40:F3:01:6D:17:9C:AB:A6:7F:68:A6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/667078BDA093F84040F3016D179CABA67F68A647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/667078BDA093F84040F3016D179CABA67F68A647.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c326f4e-6605-496a-b9f8-d6e77b29bcc6/0/3130332e32342e37352e302f32342d3234203d3e203436303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:96:d4:20:32:cd:cb:2e:ac:bf:b5:56:f9:23:17:7d:db:4d:
         6b:c1:12:31:10:0d:4b:0c:28:32:12:f5:1c:f0:bb:e1:e5:8e:
         68:d4:60:6b:34:3a:c1:ca:21:b7:67:c6:84:65:db:77:19:f3:
         fe:44:b9:01:f5:91:74:ef:1a:d7:7c:e5:a7:1a:8c:78:d3:5f:
         a3:ba:22:48:9a:dc:c4:e1:cd:56:ce:81:42:0c:1b:b5:8c:47:
         3f:a3:a0:68:2a:75:94:91:19:bb:7f:96:94:6b:43:1a:91:cc:
         5d:de:e4:d4:e5:6d:1f:6d:b8:99:c5:08:70:2c:bc:b4:55:17:
         ba:c0:1e:1b:85:d4:2d:ea:52:86:f0:89:bd:4e:59:d8:59:55:
         1d:6e:25:a5:4c:a0:42:ef:1d:a8:7a:02:7a:95:30:bf:e2:35:
         1e:87:2b:02:a5:68:b6:7b:f3:e8:03:9a:d7:9a:39:c7:8b:8e:
         0e:58:f4:dd:e4:05:1d:8e:30:e3:46:ff:af:a8:f2:fa:ac:2d:
         bf:ee:be:b9:98:9b:35:b1:55:04:95:09:97:70:0e:8b:fa:cc:
         76:28:56:95:13:f4:02:27:f9:32:f7:c2:55:d3:ae:b6:49:d0:
         9e:26:f1:a1:e1:21:10:d5:7f:43:e9:31:48:9a:69:ea:8d:ec:
         53:4a:a8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org