Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
File:                     3130332e34312e3130392e302f32342d3234203d3e203536323536.roa (raw, json)
Hash identifier:          v9oY8U+3AKxn+IwUPc0D3zL4hK9PBTh4yvu0IRpv9j0=
Subject key identifier:   09:44:D7:F3:CE:0B:11:78:B7:C1:98:06:C2:D8:05:8C:97:62:C6:A1
Certificate issuer:       /CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
Certificate serial:       4C1FFC67ED94ADE741F76D43B89464396107EA49
Authority key identifier: EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa
Signing time:             Thu 30 May 2024 02:37:38 +0000
ROA not before:           Thu 30 May 2024 02:32:38 +0000
ROA not after:            Thu 29 May 2025 02:37:38 +0000
asID:                     56256
IP address blocks:        103.41.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl
                          rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:fc:67:ed:94:ad:e7:41:f7:6d:43:b8:94:64:39:61:07:ea:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF979072FBF6DABD2A8EAC08A304509E8DC04C66
        Validity
            Not Before: May 30 02:32:38 2024 GMT
            Not After : May 29 02:37:38 2025 GMT
        Subject: CN=0944D7F3CE0B1178B7C19806C2D8058C9762C6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:ae:88:fd:90:c4:f3:68:ea:2a:2c:c7:d7:
                    ff:a8:94:9b:6f:01:05:c6:09:e9:4b:3e:54:92:a0:
                    82:32:3a:78:3d:47:18:aa:37:85:5b:62:c3:de:7b:
                    e8:3c:d4:40:93:ef:35:bd:5a:12:ea:26:07:de:53:
                    96:59:4e:c2:e1:5d:98:dd:1b:26:71:72:35:59:32:
                    3f:6d:2e:ac:7f:ff:ab:81:1a:60:f3:71:cb:4a:57:
                    68:63:8d:ad:d7:10:c4:6b:cc:8f:0c:f1:54:10:f9:
                    69:a8:0f:63:38:18:d3:d6:f5:14:a6:02:b0:38:e4:
                    8a:01:7b:db:34:b4:b4:e2:f8:ab:00:dd:01:21:f4:
                    6d:05:22:49:e1:5b:b1:00:50:58:19:c7:38:bd:a5:
                    62:ba:ee:8d:35:9f:09:c9:ef:da:94:75:1e:d3:18:
                    5b:eb:32:f2:ff:e2:c9:19:9b:d4:7a:27:07:57:82:
                    aa:cf:9a:93:ff:d5:a1:9b:f5:eb:51:9f:ff:92:c5:
                    ec:d9:1a:79:6e:56:9c:fd:86:96:7e:75:e9:19:af:
                    6f:92:ab:79:e5:4f:0b:cc:1e:9b:9d:a1:4d:55:03:
                    32:cf:98:3a:1c:cd:02:e3:09:f6:e5:10:4b:d9:3c:
                    ff:a2:3c:f1:ff:6c:2d:ca:71:49:57:fd:20:2b:85:
                    25:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:44:D7:F3:CE:0B:11:78:B7:C1:98:06:C2:D8:05:8C:97:62:C6:A1
            X509v3 Authority Key Identifier:
                keyid:EF:97:90:72:FB:F6:DA:BD:2A:8E:AC:08:A3:04:50:9E:8D:C0:4C:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EF979072FBF6DABD2A8EAC08A304509E8DC04C66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76c00376-3351-4fa3-97ee-52385ba4d903/0/3130332e34312e3130392e302f32342d3234203d3e203536323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:96:45:00:30:4a:49:60:2e:d2:41:cd:00:ca:d3:ab:c0:
         22:0c:b1:dd:1f:b0:c6:f7:0c:af:ff:67:1d:77:fb:ca:2a:db:
         3e:1e:5c:02:d3:05:e5:e3:92:ad:9e:3b:68:67:22:65:30:f7:
         b6:83:11:7b:e0:7b:91:75:90:09:de:23:b3:aa:db:d4:c2:c2:
         8b:fb:12:68:11:12:75:68:2a:7e:b1:65:17:7a:64:2e:3b:f1:
         a6:3c:60:3f:f4:d1:c8:4c:1d:f6:74:f2:ee:03:27:8f:42:33:
         65:6e:3a:9b:40:8e:49:8c:ce:df:b5:4d:be:c4:40:60:fe:18:
         26:4b:24:5b:af:a3:79:73:de:c8:67:0f:9d:d9:e4:3b:8a:5c:
         b0:96:83:da:6d:d2:aa:f4:b9:3e:45:1c:aa:b5:80:f2:e5:ed:
         5a:c8:a0:d0:cc:89:33:d8:4b:ab:47:53:74:e5:df:0d:e7:f9:
         ad:f1:39:06:a2:fe:25:98:a8:97:5d:fd:bf:12:0a:99:01:74:
         8d:f5:7c:1c:ed:8c:37:f8:07:9d:d9:c7:d5:99:d7:c9:7d:9d:
         e1:21:fe:34:cd:08:18:df:6f:65:37:8d:c5:b2:36:52:e5:a0:
         77:8e:98:d7:e3:ec:fa:55:72:13:25:10:ea:2a:24:b6:d7:4e:
         63:a6:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org