Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          4c7vE1ZJCvYropkh0TLhfAP9I0tQYntSStJ5Wb1iJm4=
Subject key identifier:   BB:E6:BD:CD:E0:77:65:9A:AC:0D:94:55:86:83:10:36:0E:64:B0:B3
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       7F70CFF7B20AD7A6C2FEC282223815BF6426CE76
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 05:00:01 +0000
ROA not before:           Sun 21 Apr 2024 04:55:01 +0000
ROA not after:            Sun 20 Apr 2025 05:00:01 +0000
asID:                     9341
IP address blocks:        103.3.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:70:cf:f7:b2:0a:d7:a6:c2:fe:c2:82:22:38:15:bf:64:26:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 04:55:01 2024 GMT
            Not After : Apr 20 05:00:01 2025 GMT
        Subject: CN=BBE6BDCDE077659AAC0D9455868310360E64B0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:37:d7:ae:db:a3:79:f0:a8:79:c3:5d:be:
                    dd:6e:d8:66:eb:f9:7e:5b:fc:8c:66:46:b1:e0:c5:
                    a0:6e:53:41:12:10:54:06:9f:b8:b8:3e:91:63:7e:
                    7b:d5:da:82:b5:95:b2:0e:bf:4a:48:bd:9a:26:a3:
                    53:09:69:32:d7:22:a1:2b:7f:fb:55:67:73:e0:4b:
                    93:44:5d:fe:09:28:d0:e7:6e:5d:02:7b:e4:18:23:
                    2e:60:c1:c1:b5:60:b3:65:2c:16:82:df:a2:24:c9:
                    94:c9:a1:07:36:50:08:7b:5c:a7:e8:d8:aa:ac:9a:
                    5e:18:58:18:fb:72:b7:5c:64:bf:ae:e0:64:da:82:
                    bd:41:d0:46:51:af:9e:ca:9d:96:20:02:8f:1e:5f:
                    84:d7:75:a0:d7:a8:31:d0:0e:17:94:17:70:4b:4f:
                    4f:3b:88:83:7e:7e:2e:5f:3d:29:39:0f:1f:f3:dc:
                    24:f7:90:7c:4f:73:f9:22:dc:a3:3e:c0:a4:8e:9e:
                    73:18:f7:e3:0a:06:c3:28:20:27:b0:72:88:6f:8b:
                    7d:05:3f:12:7e:fd:ad:c4:b8:3e:40:64:b5:06:f7:
                    6f:18:ab:00:a9:05:f5:ca:fc:c2:54:7d:93:af:bd:
                    4b:60:ac:5e:4b:14:98:24:7f:60:ef:f0:10:66:73:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E6:BD:CD:E0:77:65:9A:AC:0D:94:55:86:83:10:36:0E:64:B0:B3
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37382e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:76:2a:f3:48:a4:01:62:b3:ad:5d:b3:c4:65:9d:f7:a6:23:
         fc:52:06:2c:1c:54:50:9b:13:91:f8:37:fa:15:9d:0f:48:d0:
         a0:a4:81:bd:d7:98:10:50:11:07:39:d7:5b:66:f4:60:df:df:
         1b:33:11:b2:74:37:78:a3:41:70:5b:eb:19:ee:4f:f5:75:13:
         fa:9f:2b:7a:e4:3e:fc:93:08:a1:81:eb:2b:2c:fa:42:ab:30:
         5c:ad:d6:b2:08:37:f5:03:d4:a7:95:09:1e:8e:a8:20:2b:30:
         f4:e2:d5:bf:6a:c1:9a:ea:ba:00:91:be:95:e5:64:42:b2:10:
         45:16:8d:87:e4:db:42:24:78:41:c4:87:cc:76:a4:c0:db:e0:
         ac:4f:40:4d:f5:fc:40:ba:74:01:74:06:0a:d7:25:9f:5a:f6:
         d3:c1:80:ce:87:01:51:c4:20:99:72:e3:aa:9f:a1:56:86:9f:
         fb:ff:19:d1:96:77:92:e9:cf:71:54:8a:4c:d6:b0:ca:e7:3d:
         a4:82:ce:42:07:23:9d:e6:8e:a6:67:c4:41:3b:58:fc:90:d4:
         d0:ff:95:22:86:b7:a7:45:76:f3:42:78:07:71:94:ab:11:f5:
         7d:03:aa:c6:e6:4d:ee:bc:e6:00:08:02:3c:da:54:d1:4b:ad:
         7f:8f:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 20:32:23 2024 by rpki-client on console-ams.rpki-client.org