Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa
File:                     3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (raw, json)
Hash identifier:          y62s36loioOkfDIogd9n3fyDXbIT77T1EA5ubNc7X5Y=
Subject key identifier:   9C:F2:A2:AA:67:0C:29:2B:C5:52:31:81:4E:BA:C0:3F:27:BD:08:CE
Certificate issuer:       /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
Certificate serial:       0F46D4D06F1F493EAC5AA9840B75271D971609D4
Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa
Signing time:             Tue 02 Jan 2024 20:00:01 +0000
ROA not before:           Tue 02 Jan 2024 19:55:01 +0000
ROA not after:            Tue 31 Dec 2024 20:00:01 +0000
asID:                     147145
IP address blocks:        103.177.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl
                          rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:46:d4:d0:6f:1f:49:3e:ac:5a:a9:84:0b:75:27:1d:97:16:09:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Validity
            Not Before: Jan  2 19:55:01 2024 GMT
            Not After : Dec 31 20:00:01 2024 GMT
        Subject: CN=9CF2A2AA670C292BC55231814EBAC03F27BD08CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:42:71:30:e9:cf:c4:f1:9b:b6:b2:3f:ed:
                    e2:07:55:69:97:3a:62:dd:6e:88:c1:00:57:88:08:
                    8b:48:7f:24:e1:03:41:aa:9d:93:63:1e:50:05:a7:
                    d4:d8:23:df:52:6a:8a:6c:f6:fa:73:4b:35:e0:fd:
                    75:fb:28:65:19:22:44:7c:3a:6b:82:bd:63:91:3c:
                    f1:f7:13:b9:cb:1f:40:b7:fc:4a:d1:19:99:32:56:
                    90:56:0f:05:d0:45:93:e8:50:b9:e8:8c:e4:7c:c9:
                    1a:9c:50:15:97:9c:1b:c9:e4:b2:1c:d9:57:f7:93:
                    8d:a7:1b:d6:63:96:30:73:a7:00:ae:6f:47:e6:47:
                    73:a8:b1:b6:54:e9:f8:e9:5e:f6:29:d1:0f:f7:13:
                    d0:81:35:de:fb:fe:d6:09:f7:f4:ef:0f:b8:9b:af:
                    65:7d:23:93:52:3d:63:26:15:df:37:dd:4f:30:54:
                    55:db:3c:8e:79:47:ac:e2:37:50:78:89:ad:fe:22:
                    cb:ee:ea:62:7e:46:9e:3c:99:f7:a2:21:41:fa:a1:
                    f2:79:30:dc:4b:fc:83:3a:49:3e:f9:90:9b:0c:11:
                    07:74:45:79:1f:39:ed:ba:26:bd:2e:f8:5d:93:10:
                    bb:1e:7b:0c:10:fe:34:0e:1c:24:f3:d0:9b:f5:6e:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:A2:AA:67:0C:29:2B:C5:52:31:81:4E:BA:C0:3F:27:BD:08:CE
            X509v3 Authority Key Identifier:
                keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:d7:3c:f4:4d:42:91:f9:6c:86:0c:6f:2c:1d:b5:60:0d:
         80:a4:6b:fa:16:fc:6d:5c:41:2b:ca:dd:83:05:55:a0:86:fc:
         db:90:55:7c:30:a6:50:90:56:e8:13:30:3f:c6:b1:68:ef:80:
         8e:ea:d2:fa:68:90:a6:cf:b6:4c:86:24:89:dc:2f:6b:c8:1c:
         5c:bc:06:ac:af:51:52:75:26:2c:d7:f6:57:65:02:77:17:26:
         07:8b:03:a8:b6:30:2f:7f:1b:1b:86:66:e4:c0:44:4e:b0:82:
         2f:51:cb:4c:85:56:e3:73:38:d9:b2:ad:0b:24:71:7c:4d:82:
         a5:ea:8c:2e:fd:a5:d1:42:0b:e6:57:2b:a0:47:57:46:d0:f9:
         9a:7e:07:f7:69:e8:9d:15:64:61:b7:f1:eb:00:f3:da:bb:0c:
         ce:4d:30:6d:70:d7:2b:3c:ed:be:88:6b:56:db:3a:38:c6:fd:
         af:14:56:09:d8:3a:27:55:c5:dc:77:50:88:4b:07:d9:af:82:
         a2:ea:cd:c9:3b:75:ba:9d:f9:6d:99:68:62:02:fd:86:25:89:
         f0:ac:14:3a:d1:83:83:c7:fc:12:eb:4d:c5:e3:49:52:f7:9b:
         71:1a:0c:44:3c:32:aa:de:95:3a:00:55:5c:c2:f2:ac:8b:da:
         0c:71:90:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org