Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
File:                     3130332e3131342e37372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          +LTLBKhpdKjtRWpiyc9TvyWBocA4NHvIy7eE974Udlg=
Subject key identifier:   18:81:85:32:78:DD:7A:CD:DC:E3:DE:7B:2D:D9:73:83:FE:B4:7B:C1
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       73A3E974EB91771B2635D437BAED1E9D3B74DCDA
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa
Signing time:             Sat 24 Aug 2024 11:00:02 +0000
ROA not before:           Sat 24 Aug 2024 10:55:02 +0000
ROA not after:            Sat 23 Aug 2025 11:00:02 +0000
asID:                     23679
IP address blocks:        103.114.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a3:e9:74:eb:91:77:1b:26:35:d4:37:ba:ed:1e:9d:3b:74:dc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Aug 24 10:55:02 2024 GMT
            Not After : Aug 23 11:00:02 2025 GMT
        Subject: CN=1881853278DD7ACDDCE3DE7B2DD97383FEB47BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:d0:42:b8:42:63:2d:a9:bd:c7:b0:22:63:
                    b3:39:9c:ac:8d:e7:72:e9:b3:57:ff:f1:27:02:61:
                    8a:04:ba:ad:63:c2:42:03:7f:3a:1e:dd:56:bc:44:
                    99:63:18:99:54:ae:b1:1f:68:c4:9a:eb:23:41:de:
                    c9:ad:15:5a:67:d3:91:47:cd:d6:52:b3:05:b6:9d:
                    96:4f:0b:ef:64:a0:8b:25:90:30:1b:37:2f:e0:86:
                    9e:40:60:26:1c:25:9f:ef:3a:62:42:42:8a:d5:b9:
                    e5:ef:52:06:db:99:f6:84:7c:5d:e1:73:0c:ac:c8:
                    de:4a:23:5d:27:f2:84:2a:ce:0d:c0:c9:45:d3:b9:
                    e0:4d:8d:0c:45:67:a7:12:88:be:28:df:b0:32:42:
                    12:25:b2:cb:a4:20:56:71:2c:e2:94:35:b5:fe:9b:
                    51:b1:18:48:32:73:77:35:6d:f2:a8:28:9d:a5:65:
                    64:3e:79:ab:4d:8f:fa:ed:a6:9e:a0:23:5d:82:35:
                    6f:5b:bf:e2:a0:25:4b:57:31:3c:51:42:ae:4d:29:
                    bf:32:e9:f2:fb:6a:1d:c8:a2:15:17:29:17:1c:13:
                    06:11:4a:d9:45:64:67:72:ec:e3:04:c2:0b:01:75:
                    9e:7b:a4:d2:35:7f:ce:f0:d0:c9:66:0f:d7:7f:0d:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:85:32:78:DD:7A:CD:DC:E3:DE:7B:2D:D9:73:83:FE:B4:7B:C1
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:71:82:7d:10:ca:2d:45:c6:42:be:cb:40:c0:db:05:b3:
         c4:ff:7d:ff:61:78:5c:b8:70:5a:d5:ab:af:3f:9e:80:bb:37:
         e6:78:25:dd:29:b9:d5:b6:b9:08:3f:48:97:28:e3:f3:bb:a7:
         f2:a3:3d:8e:09:de:1a:db:a6:ad:79:6d:22:00:f8:40:47:ce:
         84:68:fb:1a:ef:ea:9d:7f:d1:6f:30:59:49:f4:a6:af:86:63:
         2b:03:e6:cc:cd:5d:25:66:a7:38:92:60:1b:3d:d5:5e:94:7f:
         11:15:34:fe:3a:b3:02:4b:65:2c:6f:56:92:47:97:42:38:ca:
         86:51:04:60:58:d0:e1:99:3e:b5:86:51:ed:f7:04:54:bb:0d:
         7a:d9:7a:52:47:15:d8:25:47:f0:9f:7e:f0:5e:de:c9:a3:3b:
         c1:86:66:ae:9e:61:fd:c8:ef:5e:01:9e:92:b1:41:1b:08:12:
         2b:52:f6:c9:16:22:1e:b4:41:78:a1:a9:0d:53:d0:c7:e1:45:
         fe:64:a2:a7:01:02:4c:7d:0a:46:8e:58:e6:3a:59:89:36:b0:
         bb:96:69:ad:53:47:d7:8a:af:92:3b:2a:fb:56:2f:dd:fa:b1:
         64:cc:fd:7e:4d:3d:e2:f8:1d:07:2c:f9:7a:c5:fd:89:a2:b5:
         57:45:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org