Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa
File:                     3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (raw, json)
Hash identifier:          biBc3b6GGx2dUj7YnQWOhcGsodIKTbyhZn9FTYFEG1E=
Subject key identifier:   93:AB:4E:71:88:10:F2:90:84:25:62:39:D9:CE:2C:78:A5:71:86:0E
Certificate issuer:       /CN=3E788037924369AA3B8E52A5857804BE5D285FA2
Certificate serial:       10A0752FD55F298D5DC3C3155F14D456F24A5A1E
Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa
Signing time:             Wed 30 Oct 2024 06:00:00 +0000
ROA not before:           Wed 30 Oct 2024 05:55:00 +0000
ROA not after:            Wed 29 Oct 2025 06:00:00 +0000
asID:                     141645
IP address blocks:        103.179.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl
                          rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a0:75:2f:d5:5f:29:8d:5d:c3:c3:15:5f:14:d4:56:f2:4a:5a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2
        Validity
            Not Before: Oct 30 05:55:00 2024 GMT
            Not After : Oct 29 06:00:00 2025 GMT
        Subject: CN=93AB4E718810F29084256239D9CE2C78A571860E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:9f:52:df:c6:d6:59:3c:2b:0b:54:c5:ac:
                    51:95:6d:d2:91:e6:1f:af:a9:b9:42:5f:ea:5c:56:
                    a2:1a:a1:40:51:21:b0:69:a7:5c:d3:eb:52:90:75:
                    77:7c:03:28:43:69:fe:56:4c:2f:92:84:77:39:9f:
                    32:02:a9:03:97:3b:fe:ae:cf:b9:05:dd:fd:5f:6a:
                    54:20:07:76:19:5f:62:06:7c:91:29:58:b2:83:6d:
                    29:26:a4:fe:18:7f:3b:fd:24:e4:38:0a:fe:a3:50:
                    7d:e5:89:d0:fd:f4:c2:8d:4f:49:d3:6b:4c:6b:d5:
                    f9:a5:64:15:4f:5b:61:6e:cd:6d:2b:35:50:58:56:
                    b0:4d:dc:11:cd:82:ee:86:69:51:fb:03:d1:9d:3c:
                    40:6d:7c:c6:25:69:1e:3a:a0:8a:28:98:cd:07:94:
                    cb:1e:76:2f:a5:f4:f1:ee:a7:eb:ca:63:f4:a1:aa:
                    ef:31:47:0f:08:21:dc:05:cf:9d:10:1f:df:ab:7a:
                    88:07:90:97:b4:c9:8f:8d:27:b8:2f:eb:17:0c:be:
                    2c:7e:4f:5f:33:9a:ee:8c:73:04:8c:b8:9c:7b:ba:
                    85:13:3c:d4:85:4c:eb:d3:b6:6f:49:55:e8:56:24:
                    a9:d2:43:e9:fc:05:02:0a:24:e6:a2:4c:dc:6f:72:
                    48:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:4E:71:88:10:F2:90:84:25:62:39:D9:CE:2C:78:A5:71:86:0E
            X509v3 Authority Key Identifier:
                keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:8b:cc:df:73:0f:8e:60:d4:57:e6:db:d2:b5:aa:2e:2e:0a:
         83:98:9a:d4:41:61:17:a5:bf:fa:98:2a:3c:50:6f:83:fd:7f:
         3d:31:a4:e8:1a:01:72:5b:a8:66:0d:d8:a7:a6:c6:ef:cb:99:
         7a:d3:be:f5:e2:90:de:ea:39:59:24:80:95:d6:62:11:30:bf:
         5e:5a:8b:1d:f6:6c:26:32:73:21:1b:14:0f:e2:7a:42:ae:b0:
         92:9f:12:c6:f9:96:4b:61:59:a8:33:02:cb:64:6c:4e:29:13:
         6b:ad:6c:9f:0c:a1:b6:bc:11:25:19:e2:d4:d4:95:23:0d:23:
         54:0f:72:9a:60:95:2c:aa:7d:47:71:aa:02:f0:ea:81:cf:d2:
         09:39:e7:5b:ef:07:e8:c5:55:5c:ed:e3:a7:b4:da:ed:96:4c:
         f1:60:58:d7:2c:d6:3f:f9:d3:69:3e:8e:08:e6:b0:d0:66:1b:
         f8:e2:68:c4:2b:18:09:ba:25:89:ed:a8:f5:6c:5b:22:d7:75:
         f2:54:62:34:e9:03:50:0f:9e:c9:b3:1a:00:bc:84:c3:88:23:
         05:18:81:11:27:cf:18:c2:44:7b:82:a8:93:a4:f1:a4:e4:c0:
         de:b2:1c:2f:26:77:f7:47:19:d6:b3:b1:bf:a8:af:b9:92:48:
         7d:f8:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org