Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137382e31362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Y1e1P9Lfp6j2uN41yXsuTRVgN8tFe5HoW++JbHObZeY=
Subject key identifier:   34:29:2D:AB:F9:5E:D5:1C:1A:38:17:87:85:58:1F:A8:E7:F6:A3:6D
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       16A0C262F5A3A42E9A80C880934858FD3370EAC7
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 14 Nov 2024 16:00:01 +0000
ROA not before:           Thu 14 Nov 2024 15:55:01 +0000
ROA not after:            Thu 13 Nov 2025 16:00:01 +0000
asID:                     9341
IP address blocks:        103.178.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a0:c2:62:f5:a3:a4:2e:9a:80:c8:80:93:48:58:fd:33:70:ea:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Nov 14 15:55:01 2024 GMT
            Not After : Nov 13 16:00:01 2025 GMT
        Subject: CN=34292DABF95ED51C1A38178785581FA8E7F6A36D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ab:51:fd:16:d6:ae:78:ee:3a:a1:96:d7:b3:
                    b2:72:32:76:75:4a:99:0c:c1:07:cd:45:c4:fc:bf:
                    f8:b2:5f:60:2b:6d:95:0f:47:15:46:e1:cd:71:29:
                    66:45:b2:5d:63:b9:a6:86:2f:f7:72:a9:51:24:77:
                    52:07:c2:c5:f6:98:d7:17:84:96:d7:0f:f3:80:25:
                    58:bc:79:d7:13:3c:75:85:d5:ca:1c:2b:36:25:d6:
                    25:08:5f:85:d0:bb:0b:20:dc:73:c2:9c:0d:cb:74:
                    82:be:6b:36:44:ae:1c:8f:65:75:b1:8c:b7:93:c6:
                    1c:3e:56:e2:1b:c7:5f:ac:d9:37:eb:68:88:b4:92:
                    5a:f8:3d:c1:d3:f4:b9:fe:27:97:b3:91:fc:39:59:
                    b4:53:a6:33:9c:95:28:81:44:98:7c:c0:07:fb:7c:
                    61:8b:90:b5:10:bd:a0:15:62:e2:04:ca:02:57:18:
                    62:85:ce:d2:d9:28:f6:da:ff:9e:b5:4b:a7:72:b4:
                    0b:f5:ed:02:5c:de:15:63:da:e2:9d:2e:df:ac:67:
                    b9:5b:fc:bb:8f:55:da:4c:2f:cd:be:2d:36:76:b8:
                    f8:2e:c2:6f:71:e1:d6:e0:7b:85:7d:8c:4f:85:66:
                    2a:35:a5:e3:83:61:47:fd:9b:30:1c:4f:8c:e7:2f:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:29:2D:AB:F9:5E:D5:1C:1A:38:17:87:85:58:1F:A8:E7:F6:A3:6D
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:5e:43:a9:11:77:04:59:39:0d:04:31:89:50:f8:00:6b:
         f7:99:de:73:62:fb:d4:69:2c:b5:e9:97:a7:99:b6:e6:45:7a:
         c3:bd:b9:72:ad:fa:54:f1:98:36:56:8b:ae:87:40:bc:8e:45:
         e3:59:d0:64:89:d0:56:e7:1b:96:74:7f:a6:c2:9d:27:af:c4:
         69:1a:56:6b:81:d9:fb:71:ea:56:91:15:94:1f:c8:64:9f:32:
         9a:a3:51:4a:62:87:10:0b:b2:98:1b:c5:bc:f5:0b:a7:a4:7e:
         c3:55:98:a5:7d:10:f9:3a:bf:e7:36:24:bb:16:dd:8e:5e:a5:
         b2:44:3c:c0:31:94:52:a5:c6:45:6f:8d:d2:cd:f1:99:91:0d:
         05:a3:3e:ce:7b:1c:63:04:81:70:88:c8:4e:ce:b3:aa:9d:1c:
         d1:db:1b:04:58:d1:87:59:bc:38:5a:37:e1:e6:55:ba:4f:0f:
         42:b3:57:39:4b:14:ce:8a:f5:b8:14:83:0d:fa:ef:71:3a:9a:
         03:c3:9c:59:6c:67:e4:41:87:88:30:33:7e:40:c3:3c:75:cb:
         1b:43:6d:58:9a:3d:a9:6e:5c:f4:ae:b9:43:42:9e:01:77:ce:
         1f:f1:72:6b:0d:5f:55:52:8c:b0:d4:59:40:08:f0:7f:17:c5:
         8c:cf:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org