Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          xkkQWQ68/IWrTLtti7ORNPYzyLQ7ntDm9RtIDMGrQuw=
Subject key identifier:   ED:C8:DD:BC:D9:8F:78:C1:72:D7:5E:E0:6C:79:28:02:EA:94:BD:F4
Certificate issuer:       /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial:       77263BEA93261694CBF4F52AC7B5B64E155F97DB
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 14 Feb 2024 16:00:02 +0000
ROA not before:           Wed 14 Feb 2024 15:55:02 +0000
ROA not after:            Wed 12 Feb 2025 16:00:02 +0000
asID:                     9341
IP address blocks:        103.180.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl
                          rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 07:54:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:26:3b:ea:93:26:16:94:cb:f4:f5:2a:c7:b5:b6:4e:15:5f:97:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
        Validity
            Not Before: Feb 14 15:55:02 2024 GMT
            Not After : Feb 12 16:00:02 2025 GMT
        Subject: CN=EDC8DDBCD98F78C172D75EE06C792802EA94BDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:24:42:44:19:d5:89:8f:3c:f6:9a:e9:de:
                    00:87:c6:81:ad:e7:68:93:77:70:13:16:f9:0c:4f:
                    f4:30:6a:86:53:61:a1:4c:5b:ad:68:1a:5c:71:11:
                    f1:99:13:8e:14:b7:94:47:96:72:a5:b8:b7:22:73:
                    9c:c2:b7:3f:f5:a7:c9:36:7b:52:78:6b:d8:e6:d4:
                    b3:5e:ee:97:52:0d:f1:37:d1:a1:8b:17:45:71:02:
                    41:50:89:32:54:3b:1d:34:d6:3b:ac:a5:bd:de:8c:
                    fc:0d:15:f1:6a:e8:71:05:1a:15:1d:cd:35:3d:8d:
                    19:9f:8a:e0:5b:95:ae:72:4c:3d:ad:06:82:ed:d7:
                    16:ed:b5:52:12:1e:1a:bb:27:51:b7:5b:22:ca:b6:
                    7f:e5:83:bd:2f:79:e9:02:38:00:41:ee:55:57:52:
                    e0:41:af:4f:ad:9f:a0:71:d7:b8:d7:fe:f5:7c:ea:
                    33:7e:22:a8:4a:e0:08:6a:46:d3:08:a7:92:f9:ab:
                    0e:0d:08:9a:d3:05:64:a8:32:76:7f:65:e0:8d:f1:
                    b2:0e:31:20:f6:ad:ef:43:a3:79:af:de:8e:0a:a7:
                    dc:c9:0c:5a:13:8f:f5:e4:57:ae:a6:fa:5b:23:a6:
                    52:c9:52:b5:e6:9e:2e:23:b3:05:5b:5e:b2:46:26:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:DD:BC:D9:8F:78:C1:72:D7:5E:E0:6C:79:28:02:EA:94:BD:F4
            X509v3 Authority Key Identifier:
                keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:a8:18:86:83:4c:33:86:78:9f:c6:73:bd:e4:8c:74:01:
         2a:65:f2:45:42:07:e3:42:c5:d2:b5:55:50:e0:06:d6:29:09:
         34:82:94:e4:29:df:73:1f:dd:2c:21:e3:34:fc:6e:a6:f4:9b:
         88:d8:36:2a:95:3f:75:9a:2d:75:d0:8d:4b:d9:12:0a:b1:57:
         f9:de:73:b0:1c:78:43:24:a3:ef:39:8e:65:50:87:23:aa:25:
         16:40:2c:d7:4c:87:5b:f3:8e:a5:d5:0d:ca:e2:a6:ee:19:b9:
         9e:67:71:a3:65:2c:04:c1:03:7d:ce:9f:9b:c4:7e:b3:d5:1f:
         17:92:40:29:a3:01:eb:8f:a5:2c:c0:e2:dc:ce:d5:05:a5:c4:
         29:55:55:e1:e7:96:86:38:eb:b1:b6:e4:27:6d:9b:ca:b2:40:
         a2:28:ee:3c:88:b5:83:c4:11:08:da:3d:cd:6f:9d:e0:d1:cb:
         d7:1f:42:b3:f5:c6:d8:0a:a4:75:7e:a2:4a:5b:ec:6f:a4:59:
         6b:9d:0e:0a:c5:07:5c:ec:97:7e:e7:80:9d:fb:54:6c:85:02:
         76:04:c8:15:9f:5b:c2:dd:7c:0c:03:82:27:e3:a4:21:e7:18:
         96:85:53:4a:11:ba:f1:06:7f:11:4b:06:76:06:b9:12:8b:cf:
         64:d8:c1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org