Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          TT7MUwzbMrgBN8oEIAyXqU2sblUIPBHys6QVI7/dQqE=
Subject key identifier:   FC:5D:C8:C2:B4:E3:E1:4E:95:C0:D3:38:9B:8C:62:5F:79:D1:99:5F
Certificate issuer:       /CN=2993EFF92300988A33773DD8C4B502F74B907112
Certificate serial:       530A8192732E93D5A8FACE148AFB42D2347041EE
Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa
Signing time:             Thu 14 Nov 2024 14:00:00 +0000
ROA not before:           Thu 14 Nov 2024 13:55:00 +0000
ROA not after:            Thu 13 Nov 2025 14:00:00 +0000
asID:                     136874
IP address blocks:        103.105.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl
                          rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 17:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0a:81:92:73:2e:93:d5:a8:fa:ce:14:8a:fb:42:d2:34:70:41:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112
        Validity
            Not Before: Nov 14 13:55:00 2024 GMT
            Not After : Nov 13 14:00:00 2025 GMT
        Subject: CN=FC5DC8C2B4E3E14E95C0D3389B8C625F79D1995F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:ba:e0:70:15:4c:0c:1f:42:10:41:95:a9:
                    87:32:cb:2b:d6:10:b8:a1:bb:54:cd:aa:40:57:1d:
                    7f:22:e7:bd:ae:94:c8:6d:dd:5b:4b:b8:ff:27:77:
                    01:1d:a6:49:8d:dd:79:6f:9b:39:1b:3a:b7:95:dc:
                    1f:62:8f:ed:e6:b0:7b:dc:75:ba:8b:0d:4a:14:cd:
                    f3:2b:7f:c8:29:fd:68:4d:e6:76:0a:fd:e1:0f:1e:
                    20:84:2d:9a:e2:37:b6:4f:4c:d2:b8:85:f0:49:52:
                    cb:cc:8d:47:50:be:df:99:07:d6:d1:6a:92:61:3a:
                    0e:77:e6:ca:b7:c0:64:33:8e:4f:c5:52:49:d8:17:
                    96:e3:83:9d:2b:d6:0f:c2:8e:a6:8b:ca:aa:92:39:
                    46:6e:bb:38:82:8d:01:4b:0c:21:29:fc:1f:02:8a:
                    e7:40:78:25:3f:e7:3c:77:53:58:96:22:ac:bf:63:
                    f5:02:80:d4:c9:64:7d:3d:86:e0:01:a7:a2:9a:36:
                    2c:ba:59:48:1d:bb:1b:1e:89:63:d4:da:d6:30:21:
                    e5:ae:15:28:e7:2c:f6:79:52:cb:29:0d:a5:7f:7b:
                    dc:8a:a0:1b:09:37:6a:2e:bc:92:e0:36:96:b3:7e:
                    d2:1f:26:73:39:ec:d6:87:42:0b:7e:22:d9:3c:56:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:C8:C2:B4:E3:E1:4E:95:C0:D3:38:9B:8C:62:5F:79:D1:99:5F
            X509v3 Authority Key Identifier:
                keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:fd:a8:a9:18:3f:66:dc:ad:73:a8:47:43:61:9a:ab:e3:
         88:42:ad:14:d6:c9:8f:9a:04:9f:8f:c3:e4:81:47:12:fb:d4:
         27:31:7a:36:70:37:f7:e1:45:dd:b3:1f:94:86:ce:5b:b6:91:
         0a:c0:26:66:7f:2a:a7:df:bc:8f:cc:33:a2:cc:6e:2a:7a:c8:
         8a:c9:12:f2:60:72:42:a5:de:ce:51:4c:d0:66:5e:22:6d:99:
         da:dc:7c:b1:39:98:ec:bd:53:8c:db:31:42:ce:8f:77:fd:34:
         18:3a:d1:07:1b:9d:c4:b1:1c:52:1d:54:8e:e4:54:40:37:86:
         4f:64:6f:82:fc:db:c4:1b:13:41:7d:c0:6e:29:bf:c7:26:15:
         12:ed:cb:d6:dc:93:1c:5b:9c:11:a5:80:c2:91:8f:fe:97:32:
         48:f8:8e:e5:6c:c0:cf:a3:3c:44:e1:2b:fa:2d:24:90:a4:52:
         fd:c4:fd:d2:d3:0c:27:df:16:a8:8e:f9:af:5e:8e:13:8d:1d:
         11:30:83:44:7a:e6:3d:f6:1f:bb:64:51:15:51:b3:fb:79:5f:
         a9:b0:6e:24:3b:ca:22:76:79:1d:fa:3b:2d:d7:f9:09:86:c2:
         b2:90:08:3c:75:03:07:d0:ed:92:a5:7b:19:a3:91:0f:39:54:
         07:18:1d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:59 2025 by rpki-client