Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
File:                     3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (raw, json)
Hash identifier:          KlZJ5jckt5FYQJMvvreG32ZohfgvtBwGxRusjNz2t24=
Subject key identifier:   65:00:2F:E3:1D:DB:E9:A2:61:D4:B3:57:46:65:AC:C8:0E:2C:B5:F8
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       39B8B69807EC1C77579DF04C08B7D0F271B7BB33
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
Signing time:             Sat 06 Apr 2024 04:00:00 +0000
ROA not before:           Sat 06 Apr 2024 03:55:00 +0000
ROA not after:            Sat 05 Apr 2025 04:00:00 +0000
asID:                     64297
IP address blocks:        103.77.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b8:b6:98:07:ec:1c:77:57:9d:f0:4c:08:b7:d0:f2:71:b7:bb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Apr  6 03:55:00 2024 GMT
            Not After : Apr  5 04:00:00 2025 GMT
        Subject: CN=65002FE31DDBE9A261D4B3574665ACC80E2CB5F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:60:b0:fc:51:8a:87:0e:02:8d:95:4d:89:
                    e9:9b:ec:0d:98:93:01:f6:57:b9:8a:11:50:72:cc:
                    7f:80:ae:94:59:36:85:fe:9f:81:c3:1e:8d:1e:8a:
                    99:64:89:bb:ae:53:8d:10:66:90:5d:48:5b:3d:8c:
                    e7:db:87:5f:ba:90:59:e0:05:ce:07:f9:0f:52:0c:
                    dd:b1:4f:82:a6:cb:cc:0e:80:97:7b:3c:e5:00:f8:
                    c2:81:02:c7:f9:fa:4b:bd:c7:b1:f4:db:e8:53:5e:
                    ba:d1:03:57:d9:ef:99:57:84:fb:a3:cc:88:37:c7:
                    50:98:07:38:88:71:ca:c7:16:ca:cc:7b:ef:6b:b8:
                    e9:3a:3b:26:67:1a:3f:4c:74:3d:da:f2:7c:ea:79:
                    84:2d:d9:2d:31:e7:b8:7f:57:e9:5b:c6:ad:b9:91:
                    b3:6e:58:3b:93:b9:26:02:97:e4:5e:ef:f5:3f:52:
                    43:20:09:1b:4f:1e:12:63:4d:68:26:be:c0:af:5b:
                    eb:ac:8c:67:d4:5f:f6:4b:96:3f:f2:f0:4b:41:7a:
                    09:d0:8e:cf:0a:fd:c1:27:18:ac:0b:b0:4f:4e:cd:
                    15:07:09:10:df:df:9a:9b:a0:7a:54:9b:82:e3:ba:
                    60:bf:fd:0b:6b:71:94:76:c7:87:5b:f4:eb:15:82:
                    b6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:00:2F:E3:1D:DB:E9:A2:61:D4:B3:57:46:65:AC:C8:0E:2C:B5:F8
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:99:cc:7a:02:59:b4:7c:4d:c4:55:9f:c9:c8:6e:53:5e:2b:
         0b:63:56:54:e5:f1:5a:cf:b5:8b:bf:ff:c8:16:d3:67:ec:b3:
         00:64:dc:3e:e1:88:b9:f4:92:3b:00:b1:5a:c3:14:25:b6:b0:
         0c:7a:c2:ef:8a:39:19:40:53:3f:2f:10:53:a8:8e:6a:fb:81:
         1a:79:0b:ef:cb:ae:b4:2c:f5:8c:0c:7b:8e:44:48:92:83:73:
         09:d4:f3:6a:58:95:25:48:99:83:1d:88:33:c4:78:ba:68:2d:
         5b:7e:90:86:85:b8:54:d2:1d:53:54:9a:c3:11:97:e0:3d:e0:
         41:39:03:fc:88:5d:d0:39:74:5e:6d:40:1c:ca:e9:61:3f:10:
         4a:1b:7e:cf:0d:55:a7:a9:53:f6:e0:02:39:37:4c:ae:e5:8f:
         0f:f6:1c:5f:6f:10:12:55:90:ce:8a:c8:d1:3f:4e:a5:01:f5:
         44:dd:b3:96:6d:94:f2:41:5b:0e:b2:ad:50:cf:20:c8:1f:44:
         d8:25:2d:84:f7:69:d5:2e:dd:1b:53:b8:db:18:ff:e2:e2:63:
         d5:86:4c:a1:99:9c:49:af:10:0a:f8:b8:a3:15:d2:cf:bd:9b:
         35:c0:2f:43:6e:ba:bf:ee:0e:ef:e6:d5:13:d2:41:e8:c2:fb:
         78:29:c2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:34:09 2024 by rpki-client on console-fra.rpki-client.org