Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa
File:                     3130332e31382e33342e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          qflbiNmV+Hx0QGQVuXZeJ7tWRRLVbFYKIQaO5BTM6SM=
Subject key identifier:   B6:60:2C:7B:B1:0F:DE:08:61:EE:2F:64:7A:BB:FE:1C:41:AC:D8:8B
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7DCA0A6F7F472FB6082EE98087AD51AFAB39FB16
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa
Signing time:             Tue 09 Jul 2024 05:02:41 +0000
ROA not before:           Tue 09 Jul 2024 04:57:41 +0000
ROA not after:            Tue 08 Jul 2025 05:02:41 +0000
asID:                     9341
IP address blocks:        103.18.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ca:0a:6f:7f:47:2f:b6:08:2e:e9:80:87:ad:51:af:ab:39:fb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Jul  9 04:57:41 2024 GMT
            Not After : Jul  8 05:02:41 2025 GMT
        Subject: CN=B6602C7BB10FDE0861EE2F647ABBFE1C41ACD88B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:0d:b2:9b:3b:0c:28:2f:d4:16:01:48:d3:
                    34:12:92:81:6e:8c:c0:5a:91:d1:aa:2a:29:49:a8:
                    80:ef:28:2e:4c:ad:41:1c:9a:30:d7:f6:7e:89:1b:
                    ad:c2:8e:0c:bf:68:1e:04:83:4b:a2:d2:2b:b0:ae:
                    22:69:54:f6:6e:70:36:dd:88:26:2a:50:92:97:eb:
                    40:be:22:88:3b:a8:e0:65:30:24:81:fe:a5:b4:26:
                    4b:a3:c2:74:fb:fe:ed:e7:d6:56:f6:e6:c7:8a:d6:
                    fd:f1:78:db:3f:25:69:d1:14:77:05:1a:f1:e4:1f:
                    cc:54:7a:87:33:36:1b:eb:89:c2:c7:6c:ab:c6:bc:
                    21:5f:cf:ae:2d:1e:55:80:b7:72:dc:0e:49:3d:ae:
                    01:bf:26:d7:f5:24:09:30:dd:6b:dc:35:42:d3:f0:
                    a7:37:9f:d5:62:a2:e8:37:1b:54:c9:0b:fa:00:f2:
                    fd:50:76:32:2c:b0:5b:f3:80:e4:3c:9c:ce:1b:01:
                    07:4b:00:28:dc:76:ec:2b:e8:16:e6:58:2e:df:b6:
                    74:fe:00:e0:c6:83:14:64:77:e9:8a:b9:21:f2:15:
                    f6:2d:39:e5:d2:b1:a5:19:a4:85:07:d7:f5:c7:2a:
                    f3:11:22:79:b3:1e:94:34:ad:71:74:68:d4:74:ff:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:60:2C:7B:B1:0F:DE:08:61:EE:2F:64:7A:BB:FE:1C:41:AC:D8:8B
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e31382e33342e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:5c:79:ac:37:83:48:0b:cc:d4:32:e5:43:29:a4:85:de:f2:
         56:10:d4:6e:3b:64:e7:91:8e:41:f4:84:18:73:58:01:7b:19:
         e6:72:93:3b:ac:fd:36:2f:2e:94:96:91:b6:38:91:a4:97:13:
         91:67:2b:6d:bf:c9:72:63:a1:10:0c:fd:77:04:9a:45:0c:92:
         3f:4b:7a:b4:7c:be:62:3c:b2:99:a0:5c:5b:e7:bf:e4:1d:96:
         7d:61:15:76:1a:15:bc:2c:4e:74:d7:8e:88:31:06:83:55:6d:
         6d:0e:fe:c0:51:5e:3e:ef:22:15:d9:88:bf:45:75:4e:6c:2d:
         74:49:e1:8d:fe:9f:de:d5:b7:a1:2d:a3:48:65:d3:84:cc:dd:
         ec:11:9e:1d:7e:51:d6:8e:49:bf:26:59:b8:3a:11:1f:bc:8f:
         33:2b:66:e3:7e:19:a5:2d:cf:95:a0:3e:f2:75:04:f6:a1:2a:
         d6:40:5a:2b:e0:fb:10:17:42:4b:4e:6b:a2:8d:e1:b9:24:8d:
         9c:95:5a:99:d9:68:a4:40:fd:bc:44:dd:23:16:61:fe:24:49:
         50:09:53:47:c9:77:29:97:1d:5a:04:3a:4a:62:3a:b3:c5:38:
         f6:b5:21:2f:84:59:c8:db:5f:4b:e3:54:fa:d5:7c:ad:a4:7c:
         2f:ca:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org