Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa
File:                     3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (raw, json)
Hash identifier:          Cs87VnTpkFvXSUxnIhvbTI701tlOW36+gH6MwBMpqh8=
Subject key identifier:   0C:59:09:6F:FF:63:AD:F2:30:12:08:D3:18:18:E0:E4:93:82:EF:33
Certificate issuer:       /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA
Certificate serial:       13DB7BFE05367DB488CA7E50A6F2F9B84DF9B8C8
Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa
Signing time:             Thu 07 Mar 2024 02:47:07 +0000
ROA not before:           Thu 07 Mar 2024 02:42:07 +0000
ROA not after:            Thu 06 Mar 2025 02:47:07 +0000
asID:                     150226
IP address blocks:        103.17.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl
                          rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:db:7b:fe:05:36:7d:b4:88:ca:7e:50:a6:f2:f9:b8:4d:f9:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA
        Validity
            Not Before: Mar  7 02:42:07 2024 GMT
            Not After : Mar  6 02:47:07 2025 GMT
        Subject: CN=0C59096FFF63ADF2301208D31818E0E49382EF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:da:52:d9:87:5c:9b:9f:08:d8:1d:d1:83:
                    b1:e8:4c:6f:03:36:ff:30:b8:ae:2f:d3:ad:b8:a0:
                    ea:3a:fb:61:42:b4:7d:54:d0:5e:f3:19:58:9f:32:
                    b0:ea:8c:8b:a2:1e:be:2b:83:c7:9d:1a:2b:59:4c:
                    30:e2:18:02:48:bd:70:25:f1:55:2a:dc:42:c8:b5:
                    73:66:49:fa:d6:69:98:c7:5c:94:c5:d6:fc:43:40:
                    62:67:e3:51:1c:c9:99:ec:f8:23:e6:ca:c5:0e:88:
                    78:4d:18:55:c6:3c:07:05:e0:b3:ff:fd:04:c2:84:
                    26:79:a6:05:74:84:01:39:cb:08:43:db:f9:cb:3c:
                    c3:26:0d:e7:22:e9:cf:58:db:9b:3f:21:3c:ef:98:
                    2e:23:a3:36:7e:09:7b:cc:37:6e:71:b6:2e:5c:72:
                    a3:bf:7f:73:63:33:12:35:bd:57:56:f7:9e:b9:90:
                    0f:20:c9:71:eb:5d:ac:d0:62:77:f3:b3:d3:ac:f2:
                    86:28:40:63:c0:fb:9e:e0:55:cc:cf:c4:5c:20:4a:
                    3f:2e:b6:89:30:28:d6:03:10:8c:0b:1c:6b:b1:c1:
                    7c:09:0e:8f:ee:c9:74:28:ae:73:5a:99:0d:53:93:
                    7a:87:77:55:ff:b1:53:fc:e7:20:60:4b:09:0c:02:
                    87:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:59:09:6F:FF:63:AD:F2:30:12:08:D3:18:18:E0:E4:93:82:EF:33
            X509v3 Authority Key Identifier:
                keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:49:3e:8f:9e:56:10:46:d0:ae:ad:2b:92:3f:f8:09:39:2a:
         e9:6c:f0:ce:ee:ce:c1:5f:4b:3a:6c:c3:b8:a7:5c:42:c5:35:
         ad:80:55:38:0d:63:2a:01:74:9c:9a:d8:dd:43:21:9f:12:1b:
         2a:0f:05:21:ca:7b:d7:f7:09:ce:1e:45:09:f5:9d:99:bb:e2:
         15:f0:86:d1:4b:aa:87:4e:99:b6:55:23:1a:69:78:4c:8d:1d:
         d1:0e:76:07:bb:4d:9a:c0:de:6f:3a:42:df:b1:73:52:82:4c:
         7f:5a:28:90:03:5b:fd:55:9d:8d:d4:3e:45:cd:43:39:0a:65:
         84:76:02:5d:aa:95:66:49:47:00:6b:87:58:ff:ae:ab:ee:29:
         0b:d7:fa:9d:d5:f0:25:8f:68:4d:6d:9b:6f:eb:1d:2a:87:e0:
         7b:fb:a8:e6:33:32:e9:4b:99:8c:cd:b5:fc:b8:4a:1f:37:99:
         39:14:f5:04:b6:68:a6:ab:a3:35:2e:47:0a:8c:15:48:05:d0:
         bd:48:e1:35:4d:4e:db:8d:df:ba:c1:b9:61:f0:b9:88:26:3b:
         29:ae:1b:f2:00:4e:25:50:a9:f4:d1:20:6e:f3:b3:ce:3e:85:
         3d:c5:81:1d:c8:f4:b6:4b:45:89:31:0f:c8:52:61:53:cf:38:
         18:e8:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org