Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
File:                     3130332e32312e3231362e302f32322d3234203d3e2039393035.roa (raw, json)
Hash identifier:          fibVmJ5+BuV1Eh+J1xvTucBBycsTHcLlifscDZJAsOc=
Subject key identifier:   EF:12:48:5C:A1:0A:C6:AE:35:48:0D:78:5F:BC:0C:D3:0F:C6:6D:CE
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       73CF547761C4214FE7AD393B3F5CBB19469544C7
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa
Signing time:             Wed 15 May 2024 23:00:01 +0000
ROA not before:           Wed 15 May 2024 22:55:01 +0000
ROA not after:            Wed 14 May 2025 23:00:01 +0000
asID:                     9905
IP address blocks:        103.21.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl
                          rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cf:54:77:61:c4:21:4f:e7:ad:39:3b:3f:5c:bb:19:46:95:44:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: May 15 22:55:01 2024 GMT
            Not After : May 14 23:00:01 2025 GMT
        Subject: CN=EF12485CA10AC6AE35480D785FBC0CD30FC66DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:1f:b7:c7:de:9d:b3:25:9e:c6:d9:89:61:
                    87:76:cf:c3:11:be:47:d6:0f:36:93:d0:cd:87:5b:
                    0a:cc:14:20:4b:a4:51:2e:7d:42:42:84:b6:e4:cf:
                    81:43:d3:66:82:d8:02:11:d5:b0:09:a8:99:97:57:
                    7d:d3:46:00:e7:4b:f0:59:98:ee:e4:3d:72:a4:1e:
                    9e:86:b3:12:40:44:39:43:b2:c6:8e:f9:2c:be:63:
                    2e:44:f8:15:55:d1:d2:d4:81:e0:d6:bc:8e:ee:69:
                    eb:ea:22:6e:86:00:61:85:18:ed:c3:69:c1:3a:d1:
                    2b:8c:65:95:c1:e9:84:53:31:1b:6a:62:62:62:fc:
                    e4:72:55:2b:8c:08:e9:35:b3:a1:79:87:65:df:60:
                    44:73:c2:bd:ae:1f:8c:8d:25:f8:04:78:44:38:f4:
                    b1:ba:e9:eb:a1:00:9b:90:a1:71:1f:e6:0c:92:c9:
                    55:f0:77:0b:ce:bf:64:5c:9e:47:e5:8c:08:9d:a2:
                    cd:56:d6:32:30:3b:ce:55:b9:cf:58:a8:9c:30:37:
                    57:18:5d:ee:06:d7:29:30:db:cf:25:21:94:27:0a:
                    b0:5f:b3:53:7a:cd:bd:a7:4e:20:81:a0:b8:9a:ce:
                    f8:e4:15:fe:10:50:83:c7:b8:47:b7:7c:e3:00:ef:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:48:5C:A1:0A:C6:AE:35:48:0D:78:5F:BC:0C:D3:0F:C6:6D:CE
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3130332e32312e3231362e302f32322d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:82:a4:77:6e:82:41:e3:ef:89:c6:77:e4:a0:c1:54:78:a1:
         4d:10:4d:66:a2:fa:29:c3:0f:fb:54:f8:24:48:9b:c7:e4:5c:
         7d:f7:5f:a0:f2:13:26:1e:8f:06:e1:44:8a:06:ee:c8:ec:78:
         93:f0:07:30:c9:f0:77:c2:50:df:c0:8b:40:ef:ac:f0:31:ed:
         6c:24:a0:67:69:11:8c:e6:e5:66:ec:a7:25:8b:f5:3d:53:db:
         fc:f8:4e:76:be:ea:07:1f:73:fc:7a:9c:f0:2a:37:0b:b2:6c:
         23:93:85:39:10:b1:00:69:8a:5b:0e:74:77:2e:20:da:2d:4b:
         1a:f2:ed:c9:cf:8b:08:6b:88:be:cd:15:fd:0a:a2:3b:75:0e:
         89:13:cf:7a:36:ef:a4:0d:06:37:69:d9:9b:4e:a6:37:16:e4:
         89:ca:19:29:2d:5e:34:04:eb:47:29:f2:91:21:e4:44:cc:59:
         4c:6c:04:f1:52:18:76:0e:7b:d7:a6:e2:af:d3:21:ef:f4:43:
         78:9e:a6:75:d9:85:43:db:2d:ce:a6:b4:e3:d1:b1:c0:50:e1:
         8e:a9:27:78:8c:8c:e3:8f:b7:1d:9a:38:30:1c:92:c9:a6:52:
         a5:62:59:6c:dc:29:cc:5d:27:60:04:76:aa:98:9e:5c:fe:bb:
         71:d0:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org