Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa
File:                     3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          7tq0HKdWO+3ta35d/BQkZ8ympdjh7rT8PasjWbKYse8=
Subject key identifier:   50:F1:29:30:87:72:79:AD:04:96:CA:E3:7F:3C:41:37:3A:36:1E:78
Certificate issuer:       /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial:       414C4D8926FF8BBD3C277D0239EC12AD9CAEF3F7
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa
Signing time:             Fri 17 Nov 2023 05:00:01 +0000
ROA not before:           Fri 17 Nov 2023 04:55:01 +0000
ROA not after:            Fri 15 Nov 2024 05:00:01 +0000
asID:                     135477
IP address blocks:        103.76.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl
                          rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 09:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4c:4d:89:26:ff:8b:bd:3c:27:7d:02:39:ec:12:ad:9c:ae:f3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Validity
            Not Before: Nov 17 04:55:01 2023 GMT
            Not After : Nov 15 05:00:01 2024 GMT
        Subject: CN=50F12930877279AD0496CAE37F3C41373A361E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:40:b7:02:91:08:54:4d:23:be:b3:3d:36:
                    15:33:0e:15:be:e9:84:14:5d:46:5f:82:4c:86:6f:
                    51:67:14:63:1a:16:5c:a1:7f:f5:4d:e6:81:a1:ca:
                    9c:59:af:89:87:36:db:14:9e:c9:a3:05:5d:42:14:
                    a2:7d:03:b3:de:1d:7f:a8:ae:bb:2d:30:bc:1c:b9:
                    50:41:6d:40:de:56:58:b1:97:e8:b4:c9:a4:16:3a:
                    28:da:af:8c:04:37:cf:51:ee:ce:59:77:e1:cc:9a:
                    c6:bf:0a:a5:5e:95:83:df:34:20:1c:07:66:3b:d1:
                    39:a5:29:53:8f:28:16:0c:fa:dd:d9:22:76:72:91:
                    ec:34:d9:80:f4:bf:4b:8c:12:44:cc:cc:ac:8c:8b:
                    2c:cf:c5:2b:12:cc:ba:e8:01:f8:fd:1d:41:b8:46:
                    aa:e6:69:3f:4c:73:2c:e4:d9:e4:e1:e2:98:c7:08:
                    03:2d:fb:c9:94:34:7a:29:e7:3f:0c:85:26:cc:85:
                    f2:16:02:ee:53:e6:7c:72:e1:9c:67:93:7b:00:45:
                    8e:b6:88:28:b3:2b:26:49:f5:86:c2:30:ae:22:6b:
                    11:3d:77:6d:f6:0a:59:f2:1e:9e:90:3c:7b:67:3c:
                    a4:37:fd:0c:81:e7:2f:69:37:38:47:ef:23:93:84:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:29:30:87:72:79:AD:04:96:CA:E3:7F:3C:41:37:3A:36:1E:78
            X509v3 Authority Key Identifier:
                keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3134392e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:5c:e7:fa:21:38:9b:5c:ba:ea:96:29:4d:d7:1d:5f:26:
         81:31:62:38:e7:dd:e0:8c:47:b4:2a:cc:11:6a:76:30:f3:e2:
         ed:b8:14:71:27:b3:01:ab:71:bd:12:dc:7f:53:75:8c:53:30:
         3d:55:82:0d:45:c0:26:d7:a1:fe:8f:b6:6c:d9:74:1b:dc:40:
         b3:8c:3c:ec:41:cc:f5:07:48:50:fc:7f:36:ff:d3:15:74:92:
         82:0c:3b:be:7f:70:34:7b:9c:3d:87:3a:e9:d8:2b:3d:32:22:
         46:84:a9:61:91:d3:f1:e8:98:dc:9b:60:9b:1f:19:b4:fe:f9:
         14:c0:68:7d:74:2d:7a:2e:e1:a4:48:90:34:f9:57:b5:99:4c:
         a7:f6:b3:78:6d:95:66:70:e1:3a:d0:6b:07:02:5d:ed:55:a4:
         cb:b7:3e:fe:f3:7e:f8:b4:b3:30:e0:73:4a:7a:84:f9:27:5b:
         03:e5:ab:c9:f1:56:ec:35:df:50:93:b1:3c:6e:16:f2:62:5a:
         19:25:8e:bb:eb:2b:cd:5b:fc:e4:54:3a:59:7a:7f:69:de:a8:
         47:2b:46:ad:a0:46:63:30:cd:3c:c9:ad:d9:f1:e0:fe:ac:92:
         f3:82:2e:3b:6d:8d:1e:2f:52:bf:cc:75:a1:4c:04:c5:14:90:
         c7:90:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:08:26 2024 by rpki-client on console-fra.rpki-client.org