Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
File:                     3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (raw, json)
Hash identifier:          JoMXwC0dl3+S/2E+/jkIyxH9CRGDeNV8xtqQzeR7S9E=
Subject key identifier:   2E:6D:2F:F1:9C:3B:DE:ED:8B:4A:84:A4:10:86:D0:0F:24:DF:CC:85
Certificate issuer:       /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
Certificate serial:       4439BA76A428DAD341FE50DEEBB729D68C9CAB4B
Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa
Signing time:             Mon 08 Jul 2024 09:26:25 +0000
ROA not before:           Mon 08 Jul 2024 09:21:25 +0000
ROA not after:            Mon 07 Jul 2025 09:26:25 +0000
asID:                     136131
IP address blocks:        103.97.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl
                          rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 07:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:39:ba:76:a4:28:da:d3:41:fe:50:de:eb:b7:29:d6:8c:9c:ab:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67
        Validity
            Not Before: Jul  8 09:21:25 2024 GMT
            Not After : Jul  7 09:26:25 2025 GMT
        Subject: CN=2E6D2FF19C3BDEED8B4A84A41086D00F24DFCC85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:08:19:60:db:28:0c:f2:16:24:86:fd:22:
                    2c:60:7c:2d:14:33:12:53:80:4f:9b:5c:0e:97:d7:
                    40:97:7b:f0:7e:91:6a:3c:c5:f6:cf:25:13:86:e9:
                    98:a2:f9:05:d9:43:e2:cb:a8:41:fe:2a:f2:bc:40:
                    91:13:cb:ab:79:03:8f:dd:4d:80:3d:a7:f6:85:4a:
                    c3:a6:09:64:f8:79:18:d9:2e:83:fe:04:d1:45:a1:
                    e7:3b:07:4e:46:17:7e:dd:6e:4d:9c:e4:7e:ab:b9:
                    64:79:00:9e:6a:e6:57:a0:e3:dc:d4:2f:ed:55:24:
                    57:02:2c:17:50:db:e5:d6:a3:4c:a8:cf:1a:1e:ca:
                    fa:6d:24:9d:88:72:27:79:6d:be:5e:e0:c2:ee:0c:
                    7a:c6:60:2e:a2:83:90:67:b4:f1:7e:52:0c:9c:e2:
                    65:55:eb:34:57:8b:2c:90:b1:c7:94:8b:51:32:6e:
                    f2:91:2f:62:8f:84:2f:7f:5e:e3:3b:89:f2:e2:44:
                    1d:d3:8c:70:fd:0c:71:d8:f5:c2:d9:d1:2a:a0:d7:
                    92:a0:e7:81:1e:74:ac:8f:04:ab:f8:e2:f6:ac:db:
                    4a:fa:e3:4d:c5:6b:53:84:22:ab:3c:75:37:00:e7:
                    a1:c7:b0:a1:42:8d:ba:66:08:fe:65:3f:65:6e:c4:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:2F:F1:9C:3B:DE:ED:8B:4A:84:A4:10:86:D0:0F:24:DF:CC:85
            X509v3 Authority Key Identifier:
                keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37382e302f32342d3234203d3e20313336313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:74:5d:d5:3e:f9:56:24:d2:09:78:4f:cd:f3:99:7d:f7:bb:
         8e:4c:27:8b:74:3b:2a:c1:e0:ad:aa:12:c9:65:c7:59:22:b3:
         b0:fb:a1:da:1a:3d:1f:0f:87:0d:a2:85:68:be:4b:af:5f:74:
         04:25:f8:10:59:a6:24:ed:46:c1:68:b2:50:7b:28:98:70:14:
         a1:98:78:2f:7b:8d:75:fe:70:51:46:4a:8c:bb:59:e5:8c:9f:
         f0:59:d1:64:96:60:d1:c3:88:80:3b:84:4a:3a:f3:6e:f3:b1:
         b7:21:96:94:cc:dc:88:30:71:d6:df:9b:67:6f:8a:48:83:ad:
         de:6f:13:f0:10:98:25:73:d1:4f:ea:e4:5e:9e:02:25:a1:4f:
         b3:68:a8:ea:22:50:b3:49:f6:b2:da:1d:f1:96:32:17:b2:b2:
         2b:c9:29:eb:3c:06:ff:4e:5d:d0:81:e0:06:31:aa:a0:9d:56:
         25:db:37:65:70:c0:5a:ea:19:82:3d:3d:ae:35:7e:da:e4:1e:
         10:f5:50:e9:e4:1a:ef:a3:6c:18:29:e1:a5:4e:93:d4:68:8c:
         f1:df:25:76:da:3b:6f:ba:91:e7:54:45:b1:63:26:60:cc:29:
         cc:ce:b3:5a:b6:33:93:19:73:3b:17:e7:bb:33:23:5d:89:8a:
         9d:5a:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:20 2024 by rpki-client on console-fra.rpki-client.org