Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa
File:                     3130332e37382e35312e302f32342d3234203d3e20313530323536.roa (raw, json)
Hash identifier:          cfAf2V60+gfjzR+eklmYwe79aEP4k7k8SRMr7TwFqIU=
Subject key identifier:   96:20:DE:BB:FA:B9:97:4B:DD:E6:6C:39:B2:31:45:6E:55:C7:42:9E
Certificate issuer:       /CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
Certificate serial:       69ED24E279B9F0327113D28DB398A41F6987AEF8
Authority key identifier: C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa
Signing time:             Tue 30 Jan 2024 11:31:10 +0000
ROA not before:           Tue 30 Jan 2024 11:26:10 +0000
ROA not after:            Tue 28 Jan 2025 11:31:10 +0000
asID:                     150256
IP address blocks:        103.78.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl
                          rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ed:24:e2:79:b9:f0:32:71:13:d2:8d:b3:98:a4:1f:69:87:ae:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7
        Validity
            Not Before: Jan 30 11:26:10 2024 GMT
            Not After : Jan 28 11:31:10 2025 GMT
        Subject: CN=9620DEBBFAB9974BDDE66C39B231456E55C7429E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:20:bc:b9:82:52:91:7f:29:35:d5:e1:25:cc:
                    10:81:e9:95:6f:25:04:80:a9:eb:bd:3e:14:a2:57:
                    ba:c4:a8:22:8b:14:40:c6:18:36:7d:5c:a2:78:73:
                    d8:a3:36:8d:71:f9:24:1b:30:89:69:2a:8c:90:95:
                    6f:43:69:14:51:cc:71:b0:10:c5:ef:8f:a6:e8:d4:
                    ba:c5:e4:24:93:80:0e:ca:10:cb:f2:ed:83:99:86:
                    20:30:d5:14:12:5c:3e:60:5b:68:b3:1a:ff:52:25:
                    33:15:ac:59:0d:d3:54:5b:29:84:36:dc:9a:f4:70:
                    37:8f:ec:cf:e6:7c:ef:89:72:18:dd:80:6b:3d:82:
                    f0:32:46:56:88:b7:fb:33:76:97:a8:92:f5:6f:e9:
                    dc:08:dd:4a:90:30:a3:d2:34:21:d9:a9:bd:e3:41:
                    69:23:4b:f4:57:e0:ae:9f:e5:42:9f:f3:90:36:9d:
                    de:e6:8c:99:43:a0:2f:35:03:fa:35:40:71:23:dd:
                    0e:2f:98:a3:f5:69:d4:53:17:3f:3e:b9:75:a9:68:
                    1b:90:94:78:72:61:7c:05:8b:12:a9:68:b8:c2:51:
                    0a:5f:8e:45:0c:c4:1d:fd:e0:71:a2:d0:53:26:63:
                    08:a9:41:d3:1c:0c:e3:e9:57:d2:21:83:ae:c0:99:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:20:DE:BB:FA:B9:97:4B:DD:E6:6C:39:B2:31:45:6E:55:C7:42:9E
            X509v3 Authority Key Identifier:
                keyid:C6:95:0F:BC:93:F3:09:E8:39:CF:C5:E1:A2:EF:0F:6C:91:BF:09:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6950FBC93F309E839CFC5E1A2EF0F6C91BF09C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b521bd1-1da2-4b80-8416-f05de292216e/0/3130332e37382e35312e302f32342d3234203d3e20313530323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c9:70:ff:aa:2c:74:f9:3a:9e:ff:8f:fe:43:06:66:b7:36:
         74:65:8b:15:a2:8f:5b:02:12:4c:9c:7b:d7:c6:45:f4:0d:2b:
         a2:55:0c:02:f5:35:42:47:3c:5b:26:ae:e2:5b:f1:73:2c:a8:
         be:55:42:96:16:e9:23:79:b2:22:e7:74:47:55:aa:91:53:a7:
         05:84:32:a7:a6:a3:45:bd:aa:e7:21:e9:56:d8:e5:f9:5b:ee:
         e6:94:fd:3c:af:11:03:7d:00:b6:ad:1e:ce:c9:e2:14:11:32:
         83:77:40:a4:7a:c3:a8:8c:35:7c:8f:f6:7f:e5:3c:26:07:d1:
         84:f8:62:4b:bf:1b:e0:1f:90:4d:62:87:24:60:9e:c2:3f:0a:
         78:cb:c2:62:34:79:b8:3f:e7:fe:48:dc:1f:4b:56:8d:90:8f:
         87:49:ba:a2:51:5a:7c:b3:66:da:0a:61:2c:4f:55:6d:02:55:
         8d:32:6d:85:6b:d0:75:e1:de:4b:c0:9a:cb:ff:06:10:0c:ab:
         a0:c7:7a:c7:96:11:b5:07:09:3d:f5:ae:de:1a:2f:76:48:82:
         90:03:21:5d:b6:e1:5c:27:26:1f:f9:37:69:8d:4e:6f:85:eb:
         57:4d:5c:2b:11:85:63:88:c6:62:a8:d7:f4:60:5d:dc:f8:d9:
         16:75:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org