Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa
File:                     3130332e3131342e37392e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          LOykd6TKV3gFIzpx1n/izSmq9fdWaJkPI8brGRJe684=
Subject key identifier:   27:F6:A7:DD:E5:09:0B:0B:A7:5D:4A:DA:4F:97:F1:00:1F:09:71:E8
Certificate issuer:       /CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
Certificate serial:       3C05636B31D33A66DC0AA7B1CBBA721B0D450E85
Authority key identifier: 44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa
Signing time:             Sat 24 Aug 2024 11:00:02 +0000
ROA not before:           Sat 24 Aug 2024 10:55:02 +0000
ROA not after:            Sat 23 Aug 2025 11:00:02 +0000
asID:                     23679
IP address blocks:        103.114.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl
                          rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:05:63:6b:31:d3:3a:66:dc:0a:a7:b1:cb:ba:72:1b:0d:45:0e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045
        Validity
            Not Before: Aug 24 10:55:02 2024 GMT
            Not After : Aug 23 11:00:02 2025 GMT
        Subject: CN=27F6A7DDE5090B0BA75D4ADA4F97F1001F0971E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:94:70:a5:9d:ea:86:21:36:f2:24:38:83:
                    58:57:40:8a:6f:44:45:73:9b:f9:fd:8b:35:db:28:
                    15:56:16:a4:ce:4c:d3:6f:5f:66:46:53:fe:8c:4b:
                    fd:1b:05:b3:11:d2:2a:58:15:7d:5a:20:df:8e:d7:
                    4f:7a:99:1e:e4:31:a1:51:5a:6f:a2:ef:bd:45:b7:
                    0c:f2:bd:e3:c8:56:7f:17:3b:f0:1f:35:43:6b:e6:
                    5c:d4:82:e8:87:a9:23:fb:df:1d:72:d3:3b:02:26:
                    1d:a5:76:d7:89:e5:e9:63:e2:2c:70:91:a0:98:c0:
                    ab:e1:77:6c:4c:65:10:38:54:8c:f3:58:0c:cd:a4:
                    0e:7a:09:99:dd:c4:35:59:71:e7:63:27:d4:43:03:
                    1d:47:e8:c5:16:bb:92:87:7e:0f:fc:d9:df:ea:15:
                    99:34:23:8e:e0:a7:33:c3:ce:f9:a1:e4:88:9e:d0:
                    99:59:51:4b:e3:4b:14:ed:f8:a4:56:6b:85:ff:b2:
                    02:7e:17:4a:93:1d:5d:99:b6:d1:85:ee:0b:14:e3:
                    40:db:c2:f4:cb:97:06:0e:40:39:1e:09:a0:79:52:
                    cb:aa:5d:dd:ee:e9:6d:b3:20:27:9d:ab:80:28:bd:
                    f1:d9:ee:22:ff:95:25:04:a9:1f:80:9f:ea:18:8e:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F6:A7:DD:E5:09:0B:0B:A7:5D:4A:DA:4F:97:F1:00:1F:09:71:E8
            X509v3 Authority Key Identifier:
                keyid:44:43:0F:D6:AB:CA:B2:54:BA:E7:AE:F8:6E:5F:5D:77:7F:CC:80:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44430FD6ABCAB254BAE7AEF86E5F5D777FCC8045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a85477ce-0717-47c0-8766-8b9bec0c086c/0/3130332e3131342e37392e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:b5:e7:0a:b4:72:97:fc:2d:b4:1b:c1:d4:da:2d:5f:c1:
         2e:92:04:ea:4d:e9:56:37:2a:7f:40:18:8e:ab:3a:98:22:9e:
         e6:20:42:1d:e9:d5:75:e8:7d:0b:6c:ee:df:7c:70:8e:27:d1:
         55:80:77:f4:ea:46:cf:3e:45:5a:e6:1e:1e:0e:db:86:9f:ff:
         55:c9:64:35:99:cc:ba:60:e5:41:42:42:7c:e2:c0:bd:f3:2a:
         fe:bf:d1:a6:e1:57:d7:69:b2:c6:db:b5:e9:5a:c2:17:43:bd:
         6e:a5:56:d6:19:87:89:2e:94:a9:42:fc:d0:b3:b6:a5:ee:99:
         f0:55:72:b9:8f:d7:47:c6:b6:29:d6:e8:d9:49:bb:45:9e:aa:
         96:5c:b4:33:02:fe:cd:46:60:41:00:1f:b9:a4:25:8e:c6:77:
         7a:28:64:85:4c:68:dd:61:d4:68:78:79:d3:1d:d8:a3:65:ab:
         d4:f9:33:ad:9c:59:39:a5:22:2d:3a:10:d1:a3:41:93:c4:1d:
         63:b6:14:6e:bb:4f:d2:f0:63:f0:5c:37:73:36:4f:e1:11:21:
         89:6a:5c:d1:69:dc:1b:cf:d9:4e:c6:bf:ac:7b:50:d2:08:a8:
         fa:5f:6f:37:1e:a3:f5:f2:01:c9:eb:cc:ed:70:65:24:29:fc:
         97:f2:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org