Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          /OQkx9g3G0mNLv2t5M45uvGCPQSQky0vGm43Njj2/Gk=
Subject key identifier:   A9:F1:06:56:9B:C9:33:30:36:7F:CD:22:00:7D:55:72:B2:F2:D5:EC
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       4260B1EADC5A9BBF8653163F516BA8E2268EEEDB
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
Signing time:             Fri 27 Oct 2023 19:00:00 +0000
ROA not before:           Fri 27 Oct 2023 18:55:00 +0000
ROA not after:            Fri 25 Oct 2024 19:00:00 +0000
asID:                     140404
IP address blocks:        103.178.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 May 2024 14:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:60:b1:ea:dc:5a:9b:bf:86:53:16:3f:51:6b:a8:e2:26:8e:ee:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Oct 27 18:55:00 2023 GMT
            Not After : Oct 25 19:00:00 2024 GMT
        Subject: CN=A9F106569BC93330367FCD22007D5572B2F2D5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:50:6a:3e:37:c3:59:43:1f:2c:a0:e0:8e:
                    99:5a:54:da:65:c3:34:c9:31:96:c6:23:0c:4d:af:
                    be:bb:c2:3a:d6:29:73:49:94:bf:c8:08:84:59:79:
                    ea:a3:cd:54:77:34:fc:cb:d1:7e:3f:2e:23:87:86:
                    64:2b:61:35:c9:25:92:04:4d:dd:cf:6a:bc:5e:d3:
                    60:c8:33:0a:72:c3:9b:59:96:6b:e0:50:b6:c9:f1:
                    8c:79:62:41:92:98:6d:1f:4b:dc:3a:de:d2:75:f9:
                    d1:43:76:28:cd:64:eb:10:2f:62:5b:88:12:31:8b:
                    ef:72:3c:9e:a0:ff:05:f5:92:aa:9b:9e:74:4b:d3:
                    4d:95:97:b7:e9:4c:ff:2e:a5:92:b2:44:03:dd:d9:
                    bc:96:66:27:c0:b8:a5:c9:15:db:2d:41:03:e0:02:
                    4e:91:b2:c2:ef:c1:34:87:4b:9b:d9:02:1f:ba:84:
                    9f:f4:7f:4e:a7:06:5a:5a:e2:a4:1d:d4:fc:46:c0:
                    8e:2a:6b:b2:23:bf:75:1e:d9:28:0b:8f:1e:32:50:
                    7a:a3:4a:59:bc:43:64:f5:f9:6d:18:f3:92:c8:db:
                    f3:74:32:65:ed:a6:19:4e:68:ec:94:9e:7e:ef:d0:
                    17:84:93:7c:6d:cc:aa:93:1b:c7:1c:57:5c:6a:a2:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F1:06:56:9B:C9:33:30:36:7F:CD:22:00:7D:55:72:B2:F2:D5:EC
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:22:8e:17:57:b2:6f:19:1a:be:fa:a3:3c:af:e2:15:0f:
         4e:f4:1f:93:e2:b2:07:ec:b1:09:1e:de:ed:f5:19:47:e1:24:
         03:67:63:d9:be:fb:01:ef:72:13:f9:34:f1:c5:a0:4a:28:4b:
         06:95:8c:61:39:1c:cc:eb:fb:94:f8:23:64:1a:85:82:a5:6e:
         32:2e:5c:d2:94:37:fd:f6:77:91:37:9e:0d:2a:e4:05:41:3e:
         49:e0:7a:b8:8a:20:57:6d:9a:e9:b7:54:96:b2:1a:7f:af:94:
         85:b3:ec:0e:89:df:89:3f:9e:3a:58:6a:55:f6:9e:78:f5:ba:
         70:ac:08:9a:06:f0:6a:56:da:bb:d6:18:f5:01:51:18:8f:b0:
         52:32:7a:40:52:ee:2f:33:1f:59:eb:58:5b:11:e5:d4:0e:64:
         f1:b3:45:d8:9a:f4:2b:5c:3f:b2:a4:c9:99:51:56:ce:d3:57:
         7f:47:f7:8b:7a:c6:19:47:5d:2f:36:3f:41:d6:8b:d7:36:05:
         2b:d5:b5:2f:3d:87:45:91:22:3d:23:16:67:19:01:aa:19:9f:
         de:93:45:a2:2f:4a:e6:47:a8:85:a1:16:03:2d:73:26:ce:e6:
         12:1b:07:cb:8e:31:d7:5c:7f:da:30:fe:fd:8a:6b:61:c3:43:
         a0:f8:f8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 10:57:07 2024 by rpki-client on console-ams.rpki-client.org