Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          uiUSxANoNODzFIewLGALThH13uAn6LXmm2UK715WT+g=
Subject key identifier:   06:03:50:A8:F9:85:E1:D4:B7:C4:77:77:1C:61:42:49:E6:85:9F:83
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       364F5860A9C64DD3843D0EE8D3AA9CC1A9F1A7E8
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa
Signing time:             Thu 14 Nov 2024 16:00:01 +0000
ROA not before:           Thu 14 Nov 2024 15:55:01 +0000
ROA not after:            Thu 13 Nov 2025 16:00:01 +0000
asID:                     9341
IP address blocks:        103.178.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:58:60:a9:c6:4d:d3:84:3d:0e:e8:d3:aa:9c:c1:a9:f1:a7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Nov 14 15:55:01 2024 GMT
            Not After : Nov 13 16:00:01 2025 GMT
        Subject: CN=060350A8F985E1D4B7C477771C614249E6859F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d8:e7:fe:1e:23:c0:f0:84:73:e7:fd:e1:5e:
                    33:6e:88:f9:ec:81:77:ab:de:9a:6e:29:8c:7a:c1:
                    2c:97:5d:61:7f:44:74:b8:29:ed:72:6d:14:c0:a0:
                    03:a4:62:ec:13:58:79:34:23:f0:99:74:5a:e0:7c:
                    67:af:a0:10:36:2f:70:eb:58:69:c7:14:51:84:35:
                    83:de:5d:fa:eb:84:e1:92:2d:84:9d:bb:e2:e5:d7:
                    b1:a4:7d:fa:1c:ed:9f:9c:29:9b:c2:8d:59:f3:6a:
                    39:b0:e4:23:14:37:89:e2:38:3a:d4:3f:bf:be:f7:
                    f9:d6:7e:7c:e8:25:bb:e8:98:0e:23:cf:27:5c:b5:
                    11:b9:f6:91:49:ac:f0:47:f6:34:81:a7:3f:0a:cf:
                    75:83:46:f3:4b:4e:5a:01:f3:1e:f0:bb:7c:29:76:
                    1f:9d:f0:fa:bf:3c:39:98:a8:14:de:90:93:b1:c3:
                    d7:fa:6f:c4:c4:a1:11:53:68:f8:67:d1:3f:bb:8d:
                    6f:a0:3a:07:28:9b:f3:e2:7e:3b:9d:37:e5:12:ba:
                    e4:59:66:42:39:42:1f:08:5a:96:d9:68:a3:b7:fe:
                    05:57:87:bb:b1:13:86:bd:4a:dc:4d:b5:32:e1:85:
                    79:c5:c6:97:9c:20:e8:5c:5b:51:d5:58:20:33:6a:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:03:50:A8:F9:85:E1:D4:B7:C4:77:77:1C:61:42:49:E6:85:9F:83
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:f8:15:d1:f2:0b:20:d2:a6:00:b8:b6:45:6e:ae:64:6d:ce:
         cd:b7:f7:85:79:e4:85:12:08:5a:46:a7:b1:f8:a5:59:10:60:
         c6:3f:46:f9:f9:34:07:08:9c:d5:aa:df:4a:c2:25:e3:ab:7d:
         30:b5:5f:b5:89:86:d1:35:41:76:e8:5c:1d:69:4b:8a:ac:07:
         0a:b7:ea:2c:60:c5:a3:66:ba:ff:7d:c1:b3:47:af:7d:7b:a5:
         17:29:13:02:2c:1d:d3:39:a1:1b:ef:ad:36:7b:62:c4:09:f2:
         50:6b:27:e4:94:e6:8a:01:75:e0:f7:7e:6b:88:9f:25:fe:40:
         ed:b9:59:ff:67:a8:e1:8f:f5:6e:42:a7:25:99:5c:67:fd:69:
         63:32:4e:48:8d:79:02:26:b1:9d:6c:6d:d2:e5:c4:90:db:40:
         72:8f:fa:71:5d:c2:61:fb:7f:d6:3a:84:02:b7:06:b2:d3:c8:
         1c:0c:ea:c3:3e:3d:58:b1:7e:5a:1a:bb:4d:79:a9:f2:7d:a1:
         63:34:c0:c5:2b:a7:1f:87:cc:1f:2e:00:9d:7d:5e:20:e0:2a:
         ae:60:bf:40:0c:44:1e:94:dd:c2:2d:0f:71:12:2a:e7:7f:d2:
         ff:16:ba:ab:af:05:28:f7:75:45:e0:3e:55:5e:48:ff:29:70:
         ce:97:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org