Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137382e31372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          XeFzp7e3uJ/XW0SCT6+L3eC2Ka1QVpzvs90ESVm5heI=
Subject key identifier:   D3:F0:42:9D:C8:D2:38:61:73:A7:95:14:13:D6:18:BE:09:3D:87:A7
Certificate issuer:       /CN=091F7323435A889C466D811B73B98389C1E084DD
Certificate serial:       1E78AB65DA2835FF8F6B797B801140C6ACC76930
Authority key identifier: 09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 14 Nov 2024 16:00:01 +0000
ROA not before:           Thu 14 Nov 2024 15:55:01 +0000
ROA not after:            Thu 13 Nov 2025 16:00:01 +0000
asID:                     9341
IP address blocks:        103.178.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl
                          rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:78:ab:65:da:28:35:ff:8f:6b:79:7b:80:11:40:c6:ac:c7:69:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=091F7323435A889C466D811B73B98389C1E084DD
        Validity
            Not Before: Nov 14 15:55:01 2024 GMT
            Not After : Nov 13 16:00:01 2025 GMT
        Subject: CN=D3F0429DC8D2386173A7951413D618BE093D87A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:f6:1a:f6:be:8e:81:03:54:d0:e4:11:af:
                    4c:01:a6:fa:9d:ef:11:8e:4e:f9:61:0e:13:1a:6d:
                    4d:7e:dc:ab:90:50:a5:55:af:ca:22:14:fd:cd:94:
                    37:c1:0e:cd:d8:17:cb:0e:5d:51:29:05:cc:5d:6e:
                    8c:53:cb:9c:26:11:26:f3:97:8b:d3:6d:6f:68:13:
                    85:65:36:27:5e:dd:52:1d:db:3f:c0:dd:13:08:a4:
                    74:11:60:52:50:cf:27:c5:10:c7:60:b5:d8:a8:fd:
                    dd:cf:a8:fe:3b:2b:d2:b5:22:76:1d:c9:da:86:c9:
                    7e:be:7a:a4:ef:70:d4:86:27:08:b5:87:80:b4:f5:
                    bc:de:02:4b:87:c2:0e:de:76:d2:18:2b:ea:93:a7:
                    6c:08:9c:24:ce:5d:fe:ba:df:1f:26:5b:e5:3c:9c:
                    92:9c:c7:a8:3f:99:81:db:13:dd:4f:41:36:87:42:
                    c1:e3:e4:c3:1c:ef:07:d3:a3:c1:44:89:89:0c:f3:
                    cb:fd:b2:e8:b7:2f:78:aa:31:57:f2:d7:f7:de:2f:
                    ce:4e:00:84:3e:31:01:b2:14:5e:23:67:17:ed:02:
                    18:72:e9:d0:8a:37:93:43:94:c9:ba:86:af:cc:9f:
                    b8:b8:d9:8a:7f:a7:b0:c4:04:d0:6f:6a:ac:5c:0f:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F0:42:9D:C8:D2:38:61:73:A7:95:14:13:D6:18:BE:09:3D:87:A7
            X509v3 Authority Key Identifier:
                keyid:09:1F:73:23:43:5A:88:9C:46:6D:81:1B:73:B9:83:89:C1:E0:84:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/091F7323435A889C466D811B73B98389C1E084DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/091F7323435A889C466D811B73B98389C1E084DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8f:47:04:fa:e4:92:c5:b0:4b:09:f7:db:ee:30:cc:42:45:
         49:f3:a6:a4:6b:d4:60:7f:fc:a6:2d:7f:c8:51:9b:da:e1:de:
         35:44:5f:7c:1a:e1:76:05:8a:ad:37:59:d9:41:7a:d4:28:5a:
         d0:f5:46:b7:a8:a4:79:d6:5d:ec:f8:db:f9:13:1e:55:4a:14:
         35:b8:f4:2e:4f:66:fe:f3:c0:dd:e9:0e:6b:34:02:62:b4:72:
         11:b0:22:44:d7:07:61:2e:dd:cc:e4:b5:18:19:5f:1a:51:8b:
         e3:60:71:1e:62:8d:67:4d:8f:b2:fc:16:8c:a2:80:0e:1e:0a:
         98:17:53:5a:bc:7e:22:a6:44:25:b3:0e:00:90:28:06:b0:a5:
         60:8e:cc:68:3f:b6:dd:01:35:18:06:fd:35:a0:33:f8:30:6b:
         2a:74:14:bf:2a:8a:8b:a3:20:be:de:f9:7a:1c:12:98:de:53:
         38:dd:6f:a7:bd:8c:db:9c:07:83:dd:59:b3:72:7e:7d:cf:5c:
         b1:84:23:77:d2:8c:a9:0e:89:39:68:08:6e:6d:5a:fc:d3:03:
         30:3b:b3:dd:f3:8a:d4:a2:08:61:b9:1c:00:05:5a:ed:d1:d5:
         f0:3f:70:79:84:08:6a:fa:fd:97:15:2e:3f:ba:f4:af:46:50:
         a7:f3:32:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org