Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
File:                     3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (raw, json)
Hash identifier:          zdQwMiPPoNJElh+XhiXe64Qelg/rMXtzBtaCs0ofeRA=
Subject key identifier:   15:CD:0E:BB:0B:4A:37:39:BA:E1:EF:92:9C:7E:2A:E9:6A:65:81:BB
Certificate issuer:       /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial:       18071B94B79478BAEB36E7B23591F927B5A798A8
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
Signing time:             Mon 15 Jan 2024 22:00:00 +0000
ROA not before:           Mon 15 Jan 2024 21:55:00 +0000
ROA not after:            Mon 13 Jan 2025 22:00:00 +0000
asID:                     147170
IP address blocks:        103.178.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
                          rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:07:1b:94:b7:94:78:ba:eb:36:e7:b2:35:91:f9:27:b5:a7:98:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
        Validity
            Not Before: Jan 15 21:55:00 2024 GMT
            Not After : Jan 13 22:00:00 2025 GMT
        Subject: CN=15CD0EBB0B4A3739BAE1EF929C7E2AE96A6581BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4b:7e:12:52:6f:74:c4:99:69:2a:54:78:69:
                    1d:50:0d:53:0e:01:ac:0a:84:08:11:af:ba:b8:bc:
                    39:50:c1:40:e3:15:9b:5d:fe:ce:f5:aa:ec:a3:7b:
                    e6:22:5b:52:8a:50:a6:65:73:de:85:d3:99:31:91:
                    2a:ef:2b:69:8c:55:b2:c2:e4:28:84:71:a1:20:d6:
                    ee:19:d2:63:0f:9c:3e:38:47:55:c9:d1:b7:59:69:
                    e8:dc:62:d8:75:88:da:76:3e:2e:7c:76:43:a5:c5:
                    52:c4:28:cd:78:25:75:5d:67:d8:43:80:a9:c9:4b:
                    22:5c:cd:1c:bb:3e:43:b5:98:dc:32:b2:7e:1f:61:
                    3c:a4:33:1f:84:01:bc:8d:43:d6:95:2f:8e:e1:bf:
                    48:ae:76:3a:55:cc:39:e5:71:1b:04:a2:c3:01:3e:
                    77:d7:37:10:9d:48:c7:a2:81:01:99:56:90:5b:1a:
                    b8:3a:3b:df:79:b6:1f:9a:3e:44:d3:3f:d5:3e:e7:
                    4a:db:8b:91:7e:7c:22:0d:55:e1:89:a9:b3:f2:1a:
                    66:7a:1e:9b:74:b4:d0:22:8d:c9:67:84:93:c7:c9:
                    98:61:76:9a:52:e5:b5:37:4c:9b:78:b5:48:4c:af:
                    cc:61:9a:3b:be:d7:8b:5b:7a:ef:f9:90:0f:49:c2:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CD:0E:BB:0B:4A:37:39:BA:E1:EF:92:9C:7E:2A:E9:6A:65:81:BB
            X509v3 Authority Key Identifier:
                keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e5:a9:87:e3:4e:2b:ae:b2:ad:e2:55:05:87:93:b9:de:15:
         bc:a3:ae:fc:4c:ae:c4:71:0f:fd:2a:44:1d:4e:cd:5e:86:a3:
         6f:f7:73:4c:89:f7:de:cd:74:24:ca:08:0b:c0:ca:88:d7:83:
         f3:1e:22:ef:8b:8f:2b:3e:de:00:2c:49:f2:eb:70:1d:b2:f3:
         1d:12:b4:0e:ef:8f:97:e5:2b:fd:03:e0:36:a8:05:6d:85:f7:
         c2:9b:5b:e4:8a:ef:0c:e6:02:11:03:65:c1:c2:80:36:1e:44:
         2a:39:a2:cf:49:fa:33:6f:21:2f:fd:9a:d3:6b:f1:32:e0:47:
         5c:cf:5e:74:c1:40:85:c8:75:8c:15:fd:09:f9:1a:83:5c:22:
         e0:bc:e5:16:c5:f8:36:6e:28:2e:bc:7b:d7:3e:e8:de:9b:65:
         dc:eb:f7:13:e3:86:da:06:54:0b:a7:9b:c5:9d:3c:07:71:f2:
         ab:b2:ad:49:d8:a5:02:0d:9d:c2:ca:10:1d:c8:70:9d:ca:a4:
         05:f3:0b:51:b2:0f:bc:a8:d7:09:21:5f:26:96:ef:67:98:7e:
         ba:8e:72:c7:27:72:69:01:3a:4f:05:1a:c5:02:5e:ee:a1:1c:
         8b:8e:7e:be:e1:0d:8f:0c:40:88:92:86:15:2f:4c:83:96:cd:
         6f:70:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org