Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          3h2UPh0vRPh56P6Oba/VsRxd9hejLMVm6whkuSfeG5Q=
Subject key identifier:   BF:88:78:B2:A1:EA:66:25:20:88:2E:9F:38:A8:DC:F5:D4:C9:3E:63
Certificate issuer:       /CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
Certificate serial:       7593F33B08D7649CA65E39C9A656E05BD53F3C7E
Authority key identifier: 64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 10 Jan 2024 19:00:01 +0000
ROA not before:           Wed 10 Jan 2024 18:55:01 +0000
ROA not after:            Wed 08 Jan 2025 19:00:01 +0000
asID:                     9341
IP address blocks:        103.181.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl
                          rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:f3:3b:08:d7:64:9c:a6:5e:39:c9:a6:56:e0:5b:d5:3f:3c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6437999FD06F2C7F0F16F8160CD6145F775884A4
        Validity
            Not Before: Jan 10 18:55:01 2024 GMT
            Not After : Jan  8 19:00:01 2025 GMT
        Subject: CN=BF8878B2A1EA662520882E9F38A8DCF5D4C93E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:6a:49:e4:b2:35:27:06:75:50:61:a5:06:
                    be:29:ad:fe:d7:1d:2c:2f:d2:4a:37:cc:e9:72:f6:
                    81:5a:94:1e:4b:3e:9a:f2:70:48:e6:c3:55:24:83:
                    8b:0c:17:3c:28:2a:95:ea:da:d6:09:a9:72:7d:aa:
                    4e:34:dc:e7:86:b0:10:cc:d0:cb:b5:d3:c1:5d:f6:
                    31:08:f7:81:04:bb:61:1b:11:e2:36:5a:f4:4d:6e:
                    43:66:d2:11:ed:78:8d:62:6c:0a:bf:df:32:56:97:
                    ff:cd:0c:3a:48:b1:23:b4:86:95:ce:9c:d8:60:e0:
                    52:1a:8f:95:fe:d2:9c:ba:a9:da:07:da:c1:ab:e5:
                    1e:96:af:ba:09:27:0c:60:ef:5a:d0:d1:16:8d:db:
                    d1:d7:52:e1:6b:9a:da:79:a1:a5:c3:fc:2d:8c:bb:
                    fa:70:a5:f8:2f:5c:0e:7d:38:19:e1:3f:d6:51:49:
                    2f:98:66:26:fd:36:68:eb:8d:2a:bd:d4:2b:ba:eb:
                    a1:3b:1f:d2:96:96:47:82:f4:c9:77:5f:d5:18:c0:
                    0a:27:7d:e8:58:b2:bf:67:e8:1e:95:94:13:bc:7e:
                    53:2e:29:f7:fa:1f:80:8a:7f:c5:8c:02:42:6c:1d:
                    c4:ee:dd:48:c3:fa:70:5a:bf:c2:9c:5d:a0:d2:f6:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:88:78:B2:A1:EA:66:25:20:88:2E:9F:38:A8:DC:F5:D4:C9:3E:63
            X509v3 Authority Key Identifier:
                keyid:64:37:99:9F:D0:6F:2C:7F:0F:16:F8:16:0C:D6:14:5F:77:58:84:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/6437999FD06F2C7F0F16F8160CD6145F775884A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6437999FD06F2C7F0F16F8160CD6145F775884A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/876fdc60-8023-40cd-aaa4-cd6ed22c4d45/0/3130332e3138312e3133362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:a7:d6:3f:f4:b6:a8:ac:40:4c:54:ce:6c:04:b0:54:c8:ec:
         78:9b:7c:e8:52:b7:03:bc:9a:f3:da:9a:ab:c0:8e:42:ea:04:
         21:33:bc:aa:f3:1c:dc:2e:79:36:e8:21:a5:7c:69:e4:50:28:
         60:87:03:b8:8f:4f:eb:47:5f:db:b2:11:3e:b3:d1:fb:7a:93:
         8c:cb:d9:24:ba:53:50:02:3c:d4:68:68:7e:74:08:58:e5:73:
         b5:f7:da:73:87:b6:a5:a2:19:71:3e:c0:cc:6c:60:af:b3:cc:
         cb:8f:11:00:d1:c7:6b:f4:3e:48:1c:3a:db:4e:90:4c:90:56:
         35:a7:46:10:b8:2e:48:ab:d4:ed:6c:0f:e6:9a:a8:e6:89:56:
         08:00:19:e7:f2:27:01:9b:5c:5e:ea:c9:2a:53:29:ea:3c:a9:
         17:3d:d3:d1:1d:f1:b3:25:d7:b6:7b:83:61:b0:df:12:a5:dc:
         46:92:86:82:48:c4:dd:89:91:4e:44:b5:44:cc:f1:0b:32:b9:
         8d:66:2d:2d:71:68:bc:1d:ca:64:ea:37:c4:08:c1:b7:0e:fd:
         15:08:28:c4:3e:e9:0e:ce:bd:70:67:87:95:ed:de:02:7f:df:
         9f:6f:b6:b5:34:2e:c1:4d:09:bc:98:59:96:29:c8:c1:4a:3b:
         42:7a:f3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org