Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa
File:                     3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (raw, json)
Hash identifier:          hvITWyuaOSe+WcK+cnHTz44KIlJ1YZHmuFDfIdjnYxE=
Subject key identifier:   7A:DB:06:0E:1F:C5:1E:37:19:82:68:44:4C:AE:88:1C:82:18:72:5E
Certificate issuer:       /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Certificate serial:       230EBBBA9CCE9A7554188A7C2D92E278990B7782
Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa
Signing time:             Sat 21 Dec 2024 14:00:00 +0000
ROA not before:           Sat 21 Dec 2024 13:55:00 +0000
ROA not after:            Sat 20 Dec 2025 14:00:00 +0000
asID:                     151589
IP address blocks:        103.76.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
                          rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 22:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0e:bb:ba:9c:ce:9a:75:54:18:8a:7c:2d:92:e2:78:99:0b:77:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
        Validity
            Not Before: Dec 21 13:55:00 2024 GMT
            Not After : Dec 20 14:00:00 2025 GMT
        Subject: CN=7ADB060E1FC51E37198268444CAE881C8218725E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:20:c7:4f:d8:bc:ce:6e:26:b6:62:c9:07:
                    df:77:17:fd:f0:d9:df:1f:1a:eb:5c:20:91:44:c4:
                    d9:98:ad:d6:f6:89:01:10:1e:28:77:a4:a8:88:d5:
                    bd:96:33:e7:78:a6:c7:0c:89:a7:2c:20:a8:b4:de:
                    4c:1e:26:cf:11:49:8c:f8:81:1c:1c:30:c2:31:c6:
                    6a:91:8d:39:d5:2d:dc:65:02:f3:15:78:b8:9e:7b:
                    c5:30:bc:23:3d:39:f9:1b:ab:fd:c8:a6:c0:d5:51:
                    5b:b2:95:fc:d7:88:4f:ef:7c:4f:d9:45:ee:e2:44:
                    b7:d9:bf:f2:77:20:84:76:85:83:85:d3:80:61:cc:
                    5f:dc:4f:17:36:05:32:7f:47:9c:01:9e:46:d4:15:
                    eb:99:82:87:36:61:9c:74:e6:e5:10:cf:dc:4f:2d:
                    c7:94:5b:b9:c1:e1:4e:ae:76:5a:8a:df:77:12:44:
                    57:25:33:b2:75:04:45:2e:1f:96:b6:0b:ca:a3:27:
                    8b:5a:e3:a8:bf:63:2e:2b:80:a0:6d:f4:a2:cc:75:
                    45:df:16:b3:65:8c:68:67:0d:4e:b7:06:22:cf:ec:
                    64:e4:66:6f:62:be:5f:18:26:38:29:c3:db:bf:1c:
                    de:f3:1c:e9:2c:a3:1d:d7:a0:dc:de:33:83:54:f5:
                    f1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:06:0E:1F:C5:1E:37:19:82:68:44:4C:AE:88:1C:82:18:72:5E
            X509v3 Authority Key Identifier:
                keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f9:f5:59:f9:ec:e9:82:3f:c1:2f:5a:71:c8:1b:59:d5:26:
         9c:ca:7c:eb:04:a0:77:56:6e:0d:3e:74:29:f2:2d:7b:56:8b:
         34:09:14:b8:f8:21:ff:27:5a:76:75:58:2a:9b:35:46:95:33:
         55:ba:b4:69:64:26:b4:07:03:39:2d:6a:07:11:84:a6:44:54:
         15:5d:c4:81:ca:e9:c9:61:af:74:ec:13:0f:10:23:18:55:34:
         34:b2:6a:fd:73:4d:d1:71:57:65:b5:ee:a0:04:25:41:17:d0:
         01:a5:dd:ae:b7:cb:0f:29:ad:a6:12:8c:f1:d6:57:d0:3a:61:
         2d:73:7e:91:a0:e1:30:0e:c9:2b:55:df:03:d8:fb:32:5a:0e:
         da:af:18:07:e5:30:f5:32:ac:b8:bd:19:8a:8b:c6:29:ad:a7:
         16:1a:39:60:a7:73:f0:89:dc:d9:ec:e9:82:cf:3a:69:bc:2b:
         65:dc:74:73:07:2f:f4:86:2b:a4:e9:48:a6:55:a1:27:1e:4d:
         77:46:35:dc:0b:10:ca:7c:5a:dd:16:fb:58:f0:8d:f7:b5:58:
         d1:ae:84:af:d8:9a:17:6e:03:5f:d2:37:8f:d1:f8:36:58:23:
         6d:42:41:ca:a9:d4:5b:2f:9a:2b:c3:f3:e9:cb:ae:2e:9d:3f:
         7a:c2:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:23 2025 by rpki-client