Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa
File:                     3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (raw, json)
Hash identifier:          4r1kM+j1LMbNU1QCCBEpV17sQtnJcH7xpoD7vSFId8s=
Subject key identifier:   F0:C9:FB:1F:E5:2F:01:60:AF:E9:21:F0:F1:16:34:E8:23:1A:1B:BA
Certificate issuer:       /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
Certificate serial:       7A931FE220D741748FD03890DCF64A710A10FC29
Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa
Signing time:             Sat 20 Jan 2024 13:22:03 +0000
ROA not before:           Sat 20 Jan 2024 13:17:03 +0000
ROA not after:            Sat 18 Jan 2025 13:22:03 +0000
asID:                     151589
IP address blocks:        103.76.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl
                          rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:93:1f:e2:20:d7:41:74:8f:d0:38:90:dc:f6:4a:71:0a:10:fc:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB
        Validity
            Not Before: Jan 20 13:17:03 2024 GMT
            Not After : Jan 18 13:22:03 2025 GMT
        Subject: CN=F0C9FB1FE52F0160AFE921F0F11634E8231A1BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:3a:44:90:01:b2:6f:09:3a:91:8e:15:72:
                    f7:a0:6c:55:59:21:a5:e9:a0:90:a2:b1:d7:fe:da:
                    41:12:30:e9:b8:cc:35:56:19:6b:b4:a4:71:d6:71:
                    0a:44:2c:05:19:5d:0b:df:7f:d0:77:eb:ae:52:89:
                    96:f6:11:b9:11:89:c1:fc:7c:53:df:17:6f:82:23:
                    8e:7c:01:bf:04:96:53:04:ce:39:d2:1a:26:39:b1:
                    b6:ec:e4:35:2e:bc:48:e9:27:f8:b9:e5:b0:40:ba:
                    84:46:12:9d:ac:6d:58:73:45:7f:99:51:30:e0:e8:
                    4d:42:a7:d5:53:e2:d2:c1:a3:55:b2:f4:cf:78:1f:
                    c3:13:bc:e0:45:b2:0c:fe:c3:31:f4:da:6d:82:e6:
                    be:19:9a:20:84:b8:5d:bb:f5:19:c9:b2:11:9a:de:
                    ff:55:31:9e:f1:2e:85:b3:e2:74:72:d5:7a:33:83:
                    1e:6c:97:d7:55:99:48:c0:9a:96:64:30:92:34:36:
                    38:69:4e:f3:03:29:cd:c5:ea:db:98:dc:48:26:60:
                    64:bd:1a:ff:3a:d7:d5:a3:ef:5c:a8:6c:6c:a7:8d:
                    2c:b4:7c:fe:47:47:d1:ac:c5:e1:c4:67:da:28:ae:
                    dd:48:4d:f1:31:ed:b7:c8:90:2f:d3:a8:01:0e:9c:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C9:FB:1F:E5:2F:01:60:AF:E9:21:F0:F1:16:34:E8:23:1A:1B:BA
            X509v3 Authority Key Identifier:
                keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:ab:ef:26:39:c5:21:1f:19:9a:c0:1a:1e:55:1b:be:04:
         44:aa:74:14:52:20:5e:58:84:f9:ba:8e:fe:9a:38:da:a9:88:
         cb:ea:6b:86:78:a8:a1:c1:88:27:cb:df:43:3a:29:ea:b8:19:
         32:ee:4f:78:d0:d7:47:33:e5:d9:df:0d:bb:42:4e:63:aa:17:
         33:07:03:96:3f:d0:d0:6b:8e:12:44:d9:e6:be:dd:dc:2d:e1:
         4c:b1:05:6d:96:37:de:51:b4:01:ab:e8:20:4a:55:83:c6:9e:
         1f:a0:d9:49:7b:00:32:9d:96:16:57:88:84:99:77:7f:d0:20:
         e2:3e:65:54:a7:34:bb:2a:9d:91:11:bd:ef:00:30:d5:60:9f:
         28:f1:38:16:f3:d4:60:00:a5:6e:6e:08:94:f5:04:df:3c:f6:
         35:e4:f8:be:3a:42:6d:2a:2f:e0:03:b3:5d:30:a3:00:5c:f7:
         8f:56:65:f4:d8:49:a7:9c:01:a2:a6:04:1e:f3:5b:62:dc:e2:
         b0:3e:2a:89:3e:9d:e9:fa:6d:70:fa:5a:5a:25:48:8c:82:c1:
         ad:3e:86:71:29:24:b8:18:b7:77:2e:49:4d:56:73:f7:1f:f1:
         5e:3c:ae:db:f7:75:c2:f8:69:72:d7:3a:eb:ab:6a:6b:17:98:
         af:7a:d7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:27 2024 by rpki-client on console-fra.rpki-client.org