Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa
File:                     3130332e37382e34342e302f32332d3233203d3e20313336303536.roa (raw, json)
Hash identifier:          oB1d9yvgfS+HluooOtRbWp6RFCioJruvG1J3R5Z7jjI=
Subject key identifier:   2F:60:EE:15:8B:FB:CF:CE:81:89:DC:16:A5:1F:2E:93:8C:9C:64:8F
Certificate issuer:       /CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
Certificate serial:       61E34874EE6524E36717E191D622EC6B890337E2
Authority key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa
Signing time:             Fri 09 Aug 2024 05:00:00 +0000
ROA not before:           Fri 09 Aug 2024 04:55:00 +0000
ROA not after:            Fri 08 Aug 2025 05:00:00 +0000
asID:                     136056
IP address blocks:        103.78.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl
                          rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e3:48:74:ee:65:24:e3:67:17:e1:91:d6:22:ec:6b:89:03:37:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8
        Validity
            Not Before: Aug  9 04:55:00 2024 GMT
            Not After : Aug  8 05:00:00 2025 GMT
        Subject: CN=2F60EE158BFBCFCE8189DC16A51F2E938C9C648F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:42:78:fc:2a:5b:66:a0:c7:eb:14:f1:b8:77:
                    df:3d:7c:7c:af:36:89:03:9c:a9:a5:7f:65:da:bd:
                    e1:47:ed:94:8e:43:d1:2b:bb:76:da:88:48:ed:78:
                    8d:f9:4b:12:3b:c0:83:d5:66:24:e7:64:48:9b:e6:
                    77:2e:8d:bc:54:81:ad:5c:da:2c:d6:f3:ee:f8:16:
                    e8:f3:5e:95:e2:ff:ca:f0:55:a8:4b:5f:fb:6f:39:
                    5e:f6:84:81:cc:b7:40:28:31:50:fe:7a:b2:61:ec:
                    45:a4:7c:b7:20:0e:b9:6f:a1:30:28:e5:4c:80:54:
                    43:66:56:d7:30:f4:32:30:e2:c4:71:40:58:a2:32:
                    04:34:45:04:f0:cc:64:10:ad:29:f8:c0:bd:d9:6c:
                    30:2c:87:bc:b6:e3:a6:8f:7e:fe:61:92:d6:37:0d:
                    c5:c7:87:b7:1b:67:a3:15:39:65:a7:dc:8e:4d:57:
                    87:01:b7:68:42:97:4b:b6:ff:9c:92:c9:c7:2e:80:
                    00:70:e2:20:d7:a5:5e:c3:b8:7a:15:46:9c:86:ac:
                    14:66:0c:14:8b:62:84:22:66:09:a1:49:d3:1d:33:
                    53:e2:5c:c0:9e:92:fb:2d:25:99:64:74:7a:a6:fa:
                    c7:69:db:fa:86:18:87:c2:78:c0:f1:3e:5a:5a:d5:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:EE:15:8B:FB:CF:CE:81:89:DC:16:A5:1F:2E:93:8C:9C:64:8F
            X509v3 Authority Key Identifier:
                keyid:12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/3130332e37382e34342e302f32332d3233203d3e20313336303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:a4:27:9a:24:01:cf:29:cb:20:5b:e5:cd:7a:bf:ed:e0:
         b6:1e:71:9f:df:c8:44:5d:c3:31:62:ba:43:6f:32:f4:5c:59:
         35:4d:d5:97:97:c4:aa:e5:48:5f:73:f1:bd:74:f0:4d:db:57:
         2f:57:29:c5:92:a7:44:6a:eb:8a:34:c6:ce:64:4a:7e:f2:b7:
         31:bb:6a:a7:f2:23:c4:f1:8e:c9:a4:28:88:ba:08:86:ef:fd:
         6a:4f:63:10:56:9b:70:7a:f8:21:ad:de:78:dc:5e:8e:f0:e6:
         90:8e:a9:b3:9d:1c:ec:7b:c2:d5:16:e4:29:f9:3d:07:31:57:
         ff:20:9a:67:c4:22:a1:62:16:9d:9d:54:5b:36:f5:7e:00:ed:
         5e:05:b2:5a:be:ab:5a:57:da:df:5e:46:c0:fc:7c:6f:25:f7:
         00:52:24:f3:2e:6b:e8:a0:72:10:1a:0c:09:b8:b4:a7:18:af:
         e8:f4:74:63:05:db:0c:ea:a0:bc:3b:90:30:e9:9f:42:e5:78:
         44:ac:02:2d:4b:89:ec:32:d2:e6:f8:69:f2:bb:61:82:59:45:
         3a:f7:f5:08:e4:cc:fd:53:36:d4:33:7e:13:f6:15:b1:62:db:
         fc:18:f2:cd:d3:1c:85:1b:66:dd:15:cc:e2:2b:0d:26:79:3f:
         90:d7:c1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:16 2024 by rpki-client on console-ams.rpki-client.org