Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa
File:                     3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (raw, json)
Hash identifier:          JSycxTOglnQdBUlrjThmP2GKqGp0iOUX7UEI4meYjIw=
Subject key identifier:   E2:37:EC:33:91:DC:94:61:A6:4E:8C:73:69:8E:8A:6D:D1:7C:AC:BF
Certificate issuer:       /CN=90EF20986B3061451D9F1178EB4D439522186281
Certificate serial:       2936455F54E935ED468AF1D51FACE380B95A68E3
Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa
Signing time:             Sat 12 Oct 2024 06:00:00 +0000
ROA not before:           Sat 12 Oct 2024 05:55:00 +0000
ROA not after:            Sat 11 Oct 2025 06:00:00 +0000
asID:                     149319
IP address blocks:        103.178.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
                          rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:36:45:5f:54:e9:35:ed:46:8a:f1:d5:1f:ac:e3:80:b9:5a:68:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281
        Validity
            Not Before: Oct 12 05:55:00 2024 GMT
            Not After : Oct 11 06:00:00 2025 GMT
        Subject: CN=E237EC3391DC9461A64E8C73698E8A6DD17CACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:cd:e6:b7:3d:05:2a:da:aa:0b:7b:3b:70:
                    fc:9d:e7:8e:24:6e:e9:72:55:0e:d7:9b:8f:55:b6:
                    fa:54:0f:20:c6:2b:d2:a5:22:3e:83:cb:67:b1:4c:
                    e9:fe:01:9e:53:d5:84:2a:d3:73:74:d3:ed:bf:e9:
                    eb:5f:ec:18:22:85:45:71:85:de:ee:ce:23:4c:bc:
                    eb:30:d1:6a:cb:b1:8c:4b:cd:97:5f:57:5f:5b:22:
                    aa:42:25:51:cf:14:48:73:66:48:83:ce:f3:6d:b4:
                    18:eb:36:59:43:ed:9b:42:d5:7a:79:b9:7d:4f:15:
                    80:e5:25:4f:13:31:b1:3d:fb:ac:e0:6b:87:49:b4:
                    9e:ea:6d:33:d2:e8:1e:1f:c5:66:3a:a0:76:ef:98:
                    44:dd:e3:2d:4f:64:d7:d0:a2:5d:bd:8f:33:32:60:
                    65:99:bd:4d:23:09:2b:58:b9:04:e1:30:07:a5:2e:
                    c2:3a:7e:c1:b6:4a:00:7d:59:03:66:71:cc:07:7b:
                    be:6a:5e:f5:12:36:ce:8b:53:5b:49:39:7a:a8:40:
                    fd:a9:23:e6:5f:32:aa:9d:d8:36:52:0f:92:8e:dd:
                    74:5c:87:ce:54:fa:95:bc:8d:a5:60:ef:d0:61:67:
                    90:51:d6:39:fa:02:17:13:15:07:6f:e3:aa:08:ab:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:37:EC:33:91:DC:94:61:A6:4E:8C:73:69:8E:8A:6D:D1:7C:AC:BF
            X509v3 Authority Key Identifier:
                keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:99:41:68:23:08:0b:f6:73:69:ab:40:04:aa:6a:19:12:48:
         10:31:c2:b9:81:bc:cf:61:44:0f:5f:ac:8f:8b:7b:39:a0:91:
         3a:32:5b:a4:06:e5:bb:77:51:17:73:3a:16:04:5e:26:aa:e6:
         39:57:a7:4b:77:d4:67:b1:77:d6:5b:9d:1c:b6:91:3e:d5:89:
         7e:bc:85:0f:e8:74:ca:f2:f7:b4:6d:ef:da:53:9a:b7:08:b3:
         6d:d3:95:52:45:60:50:da:f6:d9:be:8e:77:78:2a:92:bf:34:
         53:0e:6c:9d:52:cb:8d:61:0f:9e:d9:43:55:ef:22:57:fb:2c:
         84:96:94:d0:48:a5:29:b7:70:62:e2:c0:54:1d:75:a2:8d:74:
         c2:3d:e7:ef:08:0b:45:01:d4:3b:c7:33:06:70:a7:15:4c:b2:
         2e:c4:d1:04:71:f4:27:7d:0e:59:6e:84:8f:95:58:2c:12:54:
         0a:04:0a:ce:e2:73:41:de:9a:45:10:58:4e:2f:14:9e:85:ff:
         3b:8c:68:39:44:08:5e:61:15:af:f3:1e:29:33:45:63:fa:ec:
         83:4b:f7:3b:db:b1:d9:3b:25:2a:91:a4:d4:22:cc:ec:05:1f:
         e9:23:df:4c:8f:ef:69:72:ab:cf:6c:02:da:d5:87:67:bd:80:
         a8:9b:3f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org