Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
File:                     3130332e332e37392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          sWtqqHGJ5TstfIHtzxBgl61+I0a2yOdtFUTv1iG5TFs=
Subject key identifier:   D9:FF:10:6E:6D:EF:EC:69:1A:A7:BD:A1:6B:42:E3:D7:73:74:5E:BF
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       250A1FC663A21C2E2A874C309AE849A44B8BD112
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 21 Apr 2024 06:00:01 +0000
ROA not before:           Sun 21 Apr 2024 05:55:01 +0000
ROA not after:            Sun 20 Apr 2025 06:00:01 +0000
asID:                     9341
IP address blocks:        103.3.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0a:1f:c6:63:a2:1c:2e:2a:87:4c:30:9a:e8:49:a4:4b:8b:d1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 21 05:55:01 2024 GMT
            Not After : Apr 20 06:00:01 2025 GMT
        Subject: CN=D9FF106E6DEFEC691AA7BDA16B42E3D773745EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:b9:98:d1:5e:57:68:c0:37:06:12:25:be:
                    6c:b1:0e:07:65:a9:ef:ff:a8:cb:d8:f4:1a:b4:4f:
                    3c:37:67:ed:a5:ac:b7:5a:dd:af:6e:c4:6f:75:a0:
                    1d:64:7b:55:e8:b0:fd:a7:b8:60:9a:51:5c:cc:51:
                    65:a6:aa:81:69:bd:a2:ec:f1:b0:42:b0:61:7e:32:
                    c5:ca:6e:6d:90:1d:4a:d2:ae:1f:7f:4c:78:a6:e8:
                    fd:c2:ea:c3:43:85:cd:d3:03:96:24:15:78:7c:d8:
                    a5:f1:22:19:a9:25:3d:38:b5:04:ca:b4:b3:0b:d9:
                    ce:db:51:75:de:10:32:fe:39:c5:35:7f:18:65:34:
                    f7:a6:f2:d6:db:70:eb:5d:d4:2a:bb:0e:fd:0a:fc:
                    4c:5e:cf:3f:ce:ea:3c:39:88:23:b8:85:10:4b:68:
                    c0:b1:26:2d:3a:ea:5e:9b:9c:76:1a:33:cd:8f:73:
                    fc:c7:25:18:71:44:07:b7:d3:c3:8a:48:83:85:0f:
                    73:fa:69:af:9f:fd:e8:c3:a4:c2:10:37:79:4d:31:
                    45:92:fc:63:9a:45:51:cc:7d:92:0c:5e:2e:cf:c1:
                    25:f3:ad:3e:9d:3e:31:71:e7:e0:89:51:0e:8c:4b:
                    86:ac:84:3d:65:b4:cc:d4:fc:c4:7d:91:b0:c4:b4:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:10:6E:6D:EF:EC:69:1A:A7:BD:A1:6B:42:E3:D7:73:74:5E:BF
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e332e37392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:a0:f4:61:e0:f0:0a:9a:c1:f9:59:5e:10:d4:3d:02:d0:43:
         05:5c:14:df:cf:b6:3f:45:9b:71:d7:24:ba:bc:c7:81:2f:f0:
         f6:46:c1:3e:c3:9a:5a:c1:23:d2:74:20:97:5e:1e:2b:f3:86:
         e2:ac:92:fe:2e:9b:af:b8:4e:8d:54:11:fd:8a:f9:ec:59:af:
         9e:a3:84:b7:7a:34:b5:ef:dd:10:50:5f:44:dd:f1:b3:a6:39:
         ce:65:3a:58:2e:c0:e7:23:bc:88:77:26:b1:e6:94:a2:df:29:
         ce:9c:65:2d:c8:18:d8:08:62:5c:29:72:d1:7c:34:a7:46:98:
         8a:6a:42:eb:ca:87:d7:09:a9:9f:ca:cc:31:db:82:1e:04:8b:
         41:4e:2b:f3:e1:92:7d:2c:f9:3f:15:ee:08:01:8e:98:e3:38:
         06:78:bb:e8:7b:03:16:74:04:41:c2:3b:f8:30:b0:bb:df:24:
         20:18:22:4e:67:bf:66:61:0d:4e:f0:d8:c3:ec:2e:18:e7:ac:
         42:9c:c6:4b:5c:9a:e5:55:a6:88:b1:20:53:ce:1b:8d:7d:33:
         b0:6d:a6:fc:4b:a1:51:8f:79:fc:f9:04:93:45:26:8a:0f:3d:
         ae:df:6d:96:16:20:89:6c:25:82:70:c0:a5:5d:12:e3:c9:93:
         83:72:db:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org