Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
File:                     3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa (raw, json)
Hash identifier:          AcWRKVS8hMmQoXQ+7qgHzNHPiMSBcaWoEFEGheb2780=
Subject key identifier:   7B:DD:49:3F:1C:97:78:CD:44:27:92:5A:88:40:5E:9D:BD:C2:B9:5C
Certificate issuer:       /CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
Certificate serial:       33AB4570B9C6AE0ABAC249C10C4C4B18A2E66B06
Authority key identifier: 6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa
Signing time:             Tue 19 Mar 2024 18:00:01 +0000
ROA not before:           Tue 19 Mar 2024 17:55:01 +0000
ROA not after:            Tue 18 Mar 2025 18:00:01 +0000
asID:                     131765
IP address blocks:        103.77.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl
                          rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ab:45:70:b9:c6:ae:0a:ba:c2:49:c1:0c:4c:4b:18:a2:e6:6b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FB4DAE76B12CA00E07344A4DD2F933232EC2187
        Validity
            Not Before: Mar 19 17:55:01 2024 GMT
            Not After : Mar 18 18:00:01 2025 GMT
        Subject: CN=7BDD493F1C9778CD4427925A88405E9DBDC2B95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:bb:9f:63:ba:53:e9:40:31:99:d7:81:d6:
                    71:c0:48:ac:f8:af:68:dc:1d:e3:b5:4e:c1:bc:e8:
                    ca:5b:9b:3f:77:b7:36:1b:88:93:2a:bf:94:3d:6e:
                    59:7b:a6:e5:61:9c:e4:23:15:ec:41:8d:ab:5a:cc:
                    2e:de:bf:de:25:24:3b:ff:67:54:76:6e:82:78:3b:
                    80:64:96:b9:42:7b:c3:db:2c:8c:66:f7:0b:69:22:
                    b6:75:1b:39:41:47:1c:8e:53:03:60:a2:c3:86:f4:
                    1b:7f:e1:0c:96:07:ae:b3:bd:a9:0f:d9:d4:20:e6:
                    0e:05:04:8b:26:b9:e9:2d:ea:44:d9:b4:d5:78:78:
                    63:ab:98:6c:29:d2:c2:96:36:e5:01:bb:6d:ea:02:
                    d6:d7:7a:23:bc:11:ec:52:da:af:c7:07:41:91:06:
                    51:3a:68:f1:be:cf:80:32:63:c7:37:29:39:43:8e:
                    38:7f:79:d2:a6:a9:29:73:34:aa:93:5a:7f:d2:f6:
                    51:87:27:c1:51:22:3c:a4:ab:b0:c7:6a:9d:b3:89:
                    dd:de:0b:bc:06:05:59:25:21:ac:a0:38:73:a2:a9:
                    38:53:09:ef:33:ee:f6:cc:59:24:63:d2:01:8f:17:
                    b9:6f:44:6e:3f:fd:d0:54:8c:f6:26:aa:3e:2e:0b:
                    18:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:49:3F:1C:97:78:CD:44:27:92:5A:88:40:5E:9D:BD:C2:B9:5C
            X509v3 Authority Key Identifier:
                keyid:6F:B4:DA:E7:6B:12:CA:00:E0:73:44:A4:DD:2F:93:32:32:EC:21:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FB4DAE76B12CA00E07344A4DD2F933232EC2187.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d70346-5bdf-4961-a74f-55ae855672a1/0/3130332e37372e3138352e302f32342d3234203d3e20313331373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:bc:65:a1:f6:e1:21:e9:18:5a:17:4a:0e:48:4f:80:b7:
         5d:cb:f2:9f:30:00:ef:5d:2f:60:6e:6b:a6:47:60:64:91:ec:
         9e:36:ed:58:94:d3:0d:ce:22:2c:a9:72:1d:1f:c4:d5:88:36:
         3d:11:ec:27:5b:f7:4c:9f:11:b1:23:86:2c:6e:4e:32:46:18:
         35:5f:d7:9d:66:a1:e9:e3:42:4a:8a:de:75:cb:ae:9f:94:29:
         2c:ba:f9:1e:d7:21:a2:ff:15:50:ab:94:28:07:83:f7:44:d6:
         6e:59:2f:af:f4:92:db:a9:2e:34:cf:dd:3c:4a:f2:08:5d:28:
         2c:7d:e1:86:cd:e8:f0:5c:72:7e:4c:f0:ce:cd:a5:ea:5f:6c:
         60:71:0c:29:f8:ee:fe:37:b2:45:df:50:fe:c9:e7:3e:8a:97:
         8a:60:b5:f7:a0:fb:c8:b5:02:dc:f7:f1:7e:d2:98:e4:07:80:
         65:3c:1f:b5:d1:99:2d:5e:b7:83:37:23:32:c5:f5:f9:99:8d:
         84:71:40:d7:0b:10:13:47:cb:67:ad:29:5b:59:8b:87:4a:e6:
         fd:73:33:34:14:11:23:61:f1:c0:c7:1f:db:fd:f8:fa:86:6d:
         43:92:5d:8f:9b:14:2a:96:98:71:b1:97:b5:9f:24:de:8e:30:
         78:10:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org