Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          tLzsmSmrdy4NREvrke1LZM7uDAlB87xHIm2EO9/n72c=
Subject key identifier:   EC:D9:1A:B6:61:91:F2:6F:46:8D:48:F1:BE:94:63:44:F8:04:A2:65
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7D0231A454EB00C3F60204E4A18CC1E3802BC043
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 05:00:02 +0000
ROA not before:           Sun 21 Apr 2024 04:55:02 +0000
ROA not after:            Sun 20 Apr 2025 05:00:02 +0000
asID:                     9341
IP address blocks:        103.3.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:02:31:a4:54:eb:00:c3:f6:02:04:e4:a1:8c:c1:e3:80:2b:c0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 04:55:02 2024 GMT
            Not After : Apr 20 05:00:02 2025 GMT
        Subject: CN=ECD91AB66191F26F468D48F1BE946344F804A265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:4d:8b:1a:a4:e6:b1:60:eb:8e:45:5c:3f:
                    46:42:60:bb:cf:5a:11:8e:30:83:9c:bf:91:30:ea:
                    60:76:a8:7f:64:ec:58:72:ff:70:6e:c2:63:a4:bd:
                    48:38:2c:85:33:02:2b:f5:86:87:57:d7:44:4d:bb:
                    2b:15:dd:6d:0f:77:5f:d2:20:70:04:0d:fe:7d:51:
                    a5:02:11:a1:59:4b:d2:23:a4:fe:a0:ec:05:12:f8:
                    18:52:84:cd:74:cd:68:b1:fd:e6:59:07:66:dc:bf:
                    fb:0c:48:ab:2f:3e:71:3c:5a:bd:70:3d:ce:80:76:
                    52:5b:eb:7d:76:2e:b3:10:4d:c8:72:6c:06:70:e8:
                    bf:8e:20:dd:01:aa:a9:33:51:ca:0a:7b:e7:cc:bc:
                    43:9b:12:c7:07:d7:cb:5b:2d:8a:2d:f3:81:70:c7:
                    a3:87:fb:23:45:9c:68:37:d7:95:86:92:63:0c:ab:
                    ae:7d:fa:41:78:69:1e:91:51:17:80:5a:65:a1:9d:
                    8c:78:86:f1:07:0e:ef:0d:d6:68:f4:61:1c:f2:10:
                    5a:2e:c9:8a:1a:3f:cc:e4:96:b4:56:fe:13:53:5c:
                    da:5c:29:a2:13:6b:14:51:1c:bd:2b:90:ca:e7:6f:
                    2c:49:24:34:79:c3:31:dd:b0:10:d3:95:fa:45:56:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D9:1A:B6:61:91:F2:6F:46:8D:48:F1:BE:94:63:44:F8:04:A2:65
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:78:93:73:df:5c:f0:41:61:a8:15:4f:2c:91:87:1b:f0:27:
         d6:7c:98:a1:e7:87:7b:16:06:da:37:e1:14:82:ef:0f:ed:02:
         dc:72:9d:fb:ba:37:a6:27:2c:7a:cf:04:dd:2f:13:05:53:28:
         34:6a:f1:b4:07:8b:1a:87:b3:e5:9c:52:f6:c1:a3:03:38:29:
         b3:75:78:17:3d:2d:b6:26:02:d0:be:e9:d7:e3:0b:ee:8d:4f:
         73:80:8f:60:09:82:e3:00:f1:90:1c:7b:8c:56:ce:23:94:32:
         e6:68:84:e2:a4:be:ae:58:5a:6d:67:af:32:d4:7a:f4:95:89:
         06:c5:41:2c:a4:f7:b7:0e:26:59:5e:a2:0c:65:76:af:32:35:
         9c:c2:4a:29:1f:cb:4e:c1:03:a5:d0:a4:a8:08:a4:40:12:85:
         ac:7a:6b:3e:0b:09:7c:df:f2:42:fb:9b:94:db:e6:19:af:59:
         3a:76:5f:0f:7e:d3:c6:23:36:46:db:50:2a:7b:81:cc:be:dc:
         0f:12:0a:c8:ac:be:b1:13:31:ab:39:86:03:6e:24:4a:78:7e:
         7d:b0:87:2b:93:53:fd:cf:fa:7d:f7:e6:37:49:38:65:90:19:
         99:28:7b:12:0e:1f:94:ad:52:de:9d:98:c3:f6:4f:51:b5:9c:
         8d:32:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org