Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          YMDkntnBNEUChh1fjSUxsHUlcIYaP2qrbYkSgf6cNK8=
Subject key identifier:   62:7D:15:44:F4:1A:A8:6B:10:B1:DF:65:5E:46:D6:C8:A9:1D:05:2E
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       5F02A31EAF73072473A0E4315CE1607A39705748
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa
Signing time:             Fri 27 Sep 2024 19:00:00 +0000
ROA not before:           Fri 27 Sep 2024 18:55:00 +0000
ROA not after:            Fri 26 Sep 2025 19:00:00 +0000
asID:                     140404
IP address blocks:        103.178.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:02:a3:1e:af:73:07:24:73:a0:e4:31:5c:e1:60:7a:39:70:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Sep 27 18:55:00 2024 GMT
            Not After : Sep 26 19:00:00 2025 GMT
        Subject: CN=627D1544F41AA86B10B1DF655E46D6C8A91D052E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:a7:21:4b:08:03:67:1c:d9:9b:a7:7b:40:
                    57:d3:7e:f9:b0:89:20:70:c4:df:79:02:1a:d1:ed:
                    d7:4d:fe:63:dd:1d:fa:4b:12:84:ef:48:a6:bd:c7:
                    91:c9:4c:29:e0:6c:be:27:0d:f5:99:24:24:35:6f:
                    5b:a5:e1:c8:52:9b:62:63:9b:9e:df:c4:c2:59:0c:
                    6c:c5:ef:61:d7:60:d5:8b:6f:67:40:d3:7c:9c:9e:
                    7c:69:fc:07:25:f7:62:04:ac:e0:b9:4d:a6:d6:13:
                    71:e9:94:ae:8c:37:37:1c:30:61:f6:7a:f3:43:08:
                    e0:85:64:62:80:be:49:5e:ea:25:c8:c9:2f:92:7c:
                    24:a1:2c:8a:2b:d9:f2:84:a6:42:f0:3f:d6:cf:c8:
                    f3:c2:37:a5:66:ed:72:dc:7c:65:11:93:6f:f3:46:
                    9b:7e:7b:9c:94:7d:30:39:ba:a7:6b:55:06:a7:a5:
                    05:cc:37:85:74:65:37:7f:7a:3b:9c:84:fa:04:c5:
                    db:87:02:93:7b:3a:a1:16:43:c0:52:ab:ce:15:52:
                    66:47:18:8f:8a:87:aa:c9:1e:31:66:0f:53:2c:95:
                    20:51:90:da:33:6f:28:79:75:3d:2a:2f:02:b4:31:
                    ee:bc:df:8e:86:ff:db:38:ce:d0:59:1e:a4:d1:30:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:15:44:F4:1A:A8:6B:10:B1:DF:65:5E:46:D6:C8:A9:1D:05:2E
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:91:02:f8:0a:ee:17:15:03:39:06:20:22:45:44:b3:d9:7e:
         d5:1d:ea:f2:a7:74:75:67:20:45:a5:92:45:1a:81:76:d7:d3:
         32:0c:b5:c4:14:c1:2f:ea:48:12:77:5f:b7:9c:7a:1d:5a:db:
         3e:56:24:2e:e0:50:87:db:10:3d:2d:ff:a2:f2:32:0b:44:91:
         e3:30:da:51:ee:95:c5:ba:b4:17:cc:d7:a6:88:3b:b1:48:9a:
         7f:ba:7f:58:cc:d2:f3:24:99:eb:b1:81:ec:e5:8e:5f:ca:2f:
         bc:5c:3e:87:5a:c1:dc:5a:6c:24:1d:6c:57:d2:58:4c:0b:1f:
         96:9f:df:2a:18:0c:3a:5a:14:63:53:80:32:71:50:fb:90:25:
         fd:e4:23:a7:18:12:3e:e9:5f:16:53:d3:86:17:e8:a1:13:50:
         c2:46:db:33:6e:5a:0c:5e:5d:15:9f:ee:f7:aa:45:31:b8:e7:
         72:1f:23:06:82:e0:ea:16:b9:9b:33:c0:48:07:7b:c5:1d:86:
         a1:92:96:69:99:6c:36:a7:57:0a:6d:27:2e:70:24:12:5f:55:
         a7:d6:da:bc:17:85:94:07:c8:45:eb:02:38:ad:c0:d5:6e:96:
         45:be:e5:20:52:e3:bb:a0:8c:31:9c:2a:92:a7:d6:dc:b6:67:
         fe:7f:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org