Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230372e302f32342d3234203d3e203634323937.roa
File:                     3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (raw, json)
Hash identifier:          iWAupmsQQLXrigdxxw/IpFgXCPNtccM8s1cNilgGMAM=
Subject key identifier:   36:3E:44:D1:7A:30:9E:CA:C0:FF:BC:36:F2:5E:25:E7:4E:C3:4C:A5
Certificate issuer:       /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
Certificate serial:       272864CDB8A174CD2AF4F6D9DC181A0EFFF9043F
Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230372e302f32342d3234203d3e203634323937.roa
Signing time:             Sat 06 Apr 2024 04:00:00 +0000
ROA not before:           Sat 06 Apr 2024 03:55:00 +0000
ROA not after:            Sat 05 Apr 2025 04:00:00 +0000
asID:                     64297
IP address blocks:        103.77.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl
                          rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:28:64:cd:b8:a1:74:cd:2a:f4:f6:d9:dc:18:1a:0e:ff:f9:04:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49
        Validity
            Not Before: Apr  6 03:55:00 2024 GMT
            Not After : Apr  5 04:00:00 2025 GMT
        Subject: CN=363E44D17A309ECAC0FFBC36F25E25E74EC34CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:a8:c1:34:a1:a7:d3:91:8b:74:98:8a:53:
                    ec:c8:7e:78:50:09:15:4d:5a:32:8c:6a:d5:7f:62:
                    fd:2f:98:b4:6b:5b:ad:4d:c9:ef:fc:c7:d6:2f:a7:
                    34:b5:31:9e:b7:db:74:cd:36:b2:aa:84:70:68:fa:
                    d1:03:ec:6b:fb:36:2c:6b:15:be:81:8c:e8:7e:5e:
                    62:c6:de:63:99:2b:37:71:4f:f8:65:1b:1e:c4:e8:
                    59:ed:7c:0f:f7:6f:83:fe:a4:76:7f:cc:39:81:62:
                    26:42:1f:a0:16:ce:73:1a:0b:8c:f3:ba:1a:ea:36:
                    bc:9b:05:b7:19:05:6d:76:d4:99:e4:e6:6d:3b:c4:
                    03:b6:1b:7f:c4:3c:1b:47:37:b2:b0:bb:43:80:f2:
                    57:b4:40:41:0a:67:8c:16:68:fe:c7:ae:ef:8b:10:
                    77:f6:4f:13:8f:f9:a4:13:00:57:00:ae:28:b1:bd:
                    51:57:f7:a4:3c:02:72:af:8b:d6:64:50:91:59:5f:
                    45:d5:40:a4:a0:ab:a1:9c:f1:2e:fa:73:41:fa:21:
                    e6:9d:e9:cc:e5:b0:93:7a:16:f1:f9:e1:16:0a:73:
                    5c:2c:4c:81:00:d2:1f:62:bc:90:09:29:89:0f:a1:
                    19:54:96:4b:45:8b:65:f6:2b:45:34:d7:fb:c2:f6:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3E:44:D1:7A:30:9E:CA:C0:FF:BC:36:F2:5E:25:E7:4E:C3:4C:A5
            X509v3 Authority Key Identifier:
                keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230372e302f32342d3234203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:65:38:9b:c8:1a:6c:5f:9b:14:59:24:32:62:af:f4:f0:64:
         e4:46:4e:a2:46:67:89:87:dc:3f:9c:3d:92:cb:7d:0b:3d:78:
         d4:38:ea:53:c8:c6:d7:31:2d:b2:00:7a:65:ad:75:7c:9c:1c:
         8c:2a:ea:cf:1c:a1:ca:5c:a7:3a:06:c2:dd:4e:02:1d:b2:6b:
         72:fa:be:22:2f:ee:64:d3:3e:ce:94:f1:68:7a:33:94:27:60:
         8f:51:35:30:5c:15:55:08:d3:be:58:10:fa:cd:b9:3d:4c:f4:
         f6:87:93:a5:fe:07:be:88:36:84:42:1e:71:56:fa:fb:fc:ee:
         70:75:95:05:7b:fb:0d:86:b9:c8:f8:66:8a:f4:47:a2:f1:67:
         25:e0:c9:08:41:69:08:ea:d8:ed:91:66:89:fc:c0:be:4e:59:
         00:7f:94:d6:0d:7f:53:b1:29:ad:8d:f2:9f:ce:70:fa:4a:71:
         d8:0b:6e:e1:f1:f0:57:b4:0a:3b:b4:42:45:5d:9c:34:aa:9f:
         39:b2:84:f0:7e:96:e9:94:35:f0:1a:97:59:31:96:be:6c:fe:
         9b:e2:e4:e6:de:08:c4:bf:6a:2f:10:f6:eb:f7:75:9b:47:72:
         42:1c:a8:97:c9:e1:5d:ae:0d:80:32:0d:5e:30:46:f5:f4:6e:
         2d:83:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:25 2024 by rpki-client on console-ams.rpki-client.org