Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/3130332e37382e3139352e302f32342d3234203d3e203634333033.roa
File:                     3130332e37382e3139352e302f32342d3234203d3e203634333033.roa (raw, json)
Hash identifier:          /8TaRcDH102ElihjDsrFZkOmbC6DuwjfXL4wAH53Erg=
Subject key identifier:   F0:36:57:C8:25:62:61:57:9F:9E:54:ED:A1:DF:D7:3A:FE:5C:BC:CB
Certificate issuer:       /CN=9B481670EF7678276B7F667CD9CB3577AF393FD0
Certificate serial:       0A9A4816C7B51323E91D70AAB012BF4683CE110A
Authority key identifier: 9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/3130332e37382e3139352e302f32342d3234203d3e203634333033.roa
Signing time:             Fri 10 Nov 2023 08:18:48 +0000
ROA not before:           Fri 10 Nov 2023 08:13:48 +0000
ROA not after:            Fri 08 Nov 2024 08:18:48 +0000
asID:                     64303
IP address blocks:        103.78.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl
                          rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9a:48:16:c7:b5:13:23:e9:1d:70:aa:b0:12:bf:46:83:ce:11:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B481670EF7678276B7F667CD9CB3577AF393FD0
        Validity
            Not Before: Nov 10 08:13:48 2023 GMT
            Not After : Nov  8 08:18:48 2024 GMT
        Subject: CN=F03657C8256261579F9E54EDA1DFD73AFE5CBCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:69:db:da:a5:f6:69:03:43:a9:80:3f:53:
                    70:69:d9:94:01:af:b6:64:7c:a3:d9:61:04:db:3b:
                    88:3e:2f:2b:23:59:b1:8c:f5:b0:fc:2b:55:2a:cd:
                    06:15:d3:3f:e4:55:cb:6e:e5:5f:0f:16:b3:1a:f0:
                    0a:92:41:1e:83:f6:05:92:e4:b3:39:de:d1:b3:08:
                    c6:79:a7:30:60:7e:a7:bb:ec:30:07:58:7c:93:37:
                    e8:ec:d4:18:db:fc:a5:e5:9d:5e:11:4b:3d:8e:53:
                    1e:b3:3e:97:3a:52:b8:80:d0:28:f1:9d:7f:f8:f5:
                    55:75:2e:0d:c5:e2:9d:3e:bd:95:a2:9b:62:4c:c2:
                    a2:df:ee:57:ce:36:4b:f4:47:76:ee:83:70:89:21:
                    4c:8e:3d:13:3c:8f:6b:fb:e0:a4:04:72:74:68:3f:
                    a7:1f:81:04:af:a0:1e:49:67:de:83:08:c9:2e:7b:
                    27:7a:29:21:a9:dc:5d:54:23:a7:89:fb:27:a4:0a:
                    42:d1:bb:4b:40:b8:b5:55:af:99:6a:df:1e:72:8b:
                    b8:af:62:d9:61:55:df:55:d2:92:4e:b9:3c:0c:fa:
                    f2:8e:31:d4:cc:30:f9:74:dd:60:10:59:1b:2a:10:
                    58:d7:ee:a5:8f:c2:2d:20:26:1d:26:96:ea:fc:27:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:36:57:C8:25:62:61:57:9F:9E:54:ED:A1:DF:D7:3A:FE:5C:BC:CB
            X509v3 Authority Key Identifier:
                keyid:9B:48:16:70:EF:76:78:27:6B:7F:66:7C:D9:CB:35:77:AF:39:3F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/9B481670EF7678276B7F667CD9CB3577AF393FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B481670EF7678276B7F667CD9CB3577AF393FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac6b5abc-2c54-4c5f-b3f8-3346f19e6cc8/0/3130332e37382e3139352e302f32342d3234203d3e203634333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:79:38:3c:2f:80:c8:5e:61:f1:ec:36:7b:22:06:c7:52:6a:
         b7:6e:10:39:bc:81:01:e9:f8:0e:ab:5d:2d:aa:18:17:d7:bf:
         78:eb:fd:32:99:9d:d1:99:c9:29:d4:5d:fd:e8:7b:fc:c3:4c:
         86:84:eb:20:c0:46:2f:be:1c:f8:92:f7:ec:73:0f:9e:3a:3c:
         b0:a4:df:35:1c:ec:62:fe:cf:30:e4:80:d4:81:b9:7f:d5:f5:
         ce:89:f6:fd:5a:0c:54:6c:a9:51:14:c9:28:c0:33:90:2e:4a:
         5b:46:77:8f:b8:d3:a9:fe:bf:3f:b4:bf:cf:71:14:6c:0d:12:
         a7:3b:c7:88:96:4f:c0:d7:65:25:32:e0:75:ff:7d:ea:75:52:
         4a:0d:bb:93:40:92:d1:7e:be:f5:cb:13:00:90:99:cd:48:68:
         12:aa:cc:ac:67:e8:1e:ad:e4:78:6b:60:26:09:78:1d:77:3a:
         79:ac:18:8a:d4:b1:73:86:fc:9a:35:1a:df:b9:8f:2e:c5:4b:
         76:6d:46:74:de:8d:ee:02:4d:90:ac:b4:57:6c:e6:cd:f2:20:
         3d:e7:b2:2e:7d:ee:76:0a:2d:b5:40:66:64:22:8c:3d:3b:ef:
         26:0b:6f:2f:e7:5d:37:23:d8:93:78:94:84:8f:ca:fa:1c:17:
         31:cf:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:30 2024 by rpki-client on console-ams.rpki-client.org