Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa
File:                     3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (raw, json)
Hash identifier:          iJ6zJ5Cp5hSNvosVYxlqcbN7i7A5N8hTHiaK6KMyuDs=
Subject key identifier:   BF:3F:54:55:20:3D:FE:79:A0:4E:58:A0:F6:B5:1A:B4:36:90:5C:8A
Certificate issuer:       /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
Certificate serial:       6F412C1367A537F0CAB41C827BEE62A8E02040D3
Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa
Signing time:             Tue 02 Jan 2024 19:00:00 +0000
ROA not before:           Tue 02 Jan 2024 18:55:00 +0000
ROA not after:            Tue 31 Dec 2024 19:00:00 +0000
asID:                     147145
IP address blocks:        103.177.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl
                          rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:41:2c:13:67:a5:37:f0:ca:b4:1c:82:7b:ee:62:a8:e0:20:40:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Validity
            Not Before: Jan  2 18:55:00 2024 GMT
            Not After : Dec 31 19:00:00 2024 GMT
        Subject: CN=BF3F5455203DFE79A04E58A0F6B51AB436905C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:e7:af:73:a6:1a:05:5b:2b:38:1e:e0:7e:
                    1c:cd:26:86:ac:b0:25:b1:13:c9:79:02:30:1f:47:
                    3a:fc:69:4c:97:72:50:de:5b:f1:f1:9a:1c:db:b5:
                    ad:dd:3f:fb:f7:13:f2:4c:2d:39:2a:13:74:ec:c7:
                    1b:a6:78:ee:e8:2a:8c:1f:b1:78:47:8e:8b:42:27:
                    1d:92:a3:66:54:fb:0f:de:7a:07:1a:81:e1:2a:db:
                    6f:05:76:36:69:d8:23:2a:84:e9:ce:39:2f:2f:8c:
                    4d:37:e2:f8:85:10:18:b2:9a:f0:6f:d7:4d:39:ce:
                    da:d2:39:f5:76:8a:0d:c5:55:95:2a:43:a3:b9:57:
                    eb:c7:b3:a2:c5:49:b2:d9:01:2e:32:84:5e:cd:db:
                    80:82:48:18:07:60:f1:d8:c3:41:7e:c2:d1:bd:fc:
                    14:f7:50:67:2b:aa:dc:c6:6e:6e:8c:ad:d4:d7:1a:
                    b9:0d:99:d9:75:a0:5e:61:d9:15:08:34:18:27:e3:
                    b7:25:93:6f:4a:93:4e:2f:fc:a9:55:59:f5:d7:07:
                    64:27:3f:7c:0f:9b:93:7e:af:cc:bc:88:7c:fd:3e:
                    be:61:5b:04:b8:df:d7:ff:4a:eb:6e:90:21:35:81:
                    ac:3a:b3:44:a9:fd:4d:8a:c5:29:73:f0:37:50:cc:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:54:55:20:3D:FE:79:A0:4E:58:A0:F6:B5:1A:B4:36:90:5C:8A
            X509v3 Authority Key Identifier:
                keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f5:9a:94:67:52:16:4c:09:74:22:34:9d:15:a0:0e:72:5a:
         2a:13:9c:f0:6e:37:0c:7d:e8:03:a3:3f:93:a9:86:e5:93:e2:
         43:e1:96:6a:06:e3:72:91:bd:5e:f8:c0:37:2f:d6:35:84:ab:
         81:c4:b7:58:79:51:bb:5c:d1:9a:ec:f0:f4:2c:08:8a:de:9d:
         e7:e9:6d:c6:a0:7f:b0:a8:59:f0:7c:db:da:32:8d:b3:77:93:
         5d:7f:d3:42:51:55:1b:a8:2b:e5:4e:6d:21:4a:64:b4:54:cb:
         14:3b:f3:68:4d:20:c3:35:af:84:d3:4a:1c:1f:08:4a:fd:15:
         2c:0a:80:f6:be:e4:bb:22:65:4e:48:c8:21:68:fa:fc:44:ec:
         ba:c0:82:50:3d:87:ac:7e:ee:4e:ee:3c:39:7c:85:1b:7f:5d:
         20:bc:ee:af:fa:7a:6e:2f:66:7d:f7:33:4c:08:9a:f0:96:26:
         10:7d:c8:0f:90:7a:41:1a:33:de:74:7b:15:85:57:93:61:4f:
         5e:6a:32:d3:11:31:4a:e2:b0:ef:db:ec:f8:59:5d:e1:b9:5b:
         d4:15:ce:57:c2:ed:a0:a1:55:38:a5:21:26:94:4a:eb:6a:c1:
         a8:55:0d:ff:80:a2:f3:44:d4:53:87:43:da:72:72:0f:63:fb:
         3c:fd:07:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:36 2024 by rpki-client on console-ams.rpki-client.org