Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa
File:                     3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (raw, json)
Hash identifier:          cwpP3KiwDKIgbbgc3ieD13ETZDLuNdtQbdT3pJc3mh4=
Subject key identifier:   2C:AB:57:AC:9C:65:9E:4A:DE:C3:38:30:2A:BD:65:77:B1:47:AA:C9
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       479CE8CFDDC8D257BC0E6D7E7D16FBE4B7BB4E85
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa
Signing time:             Mon 06 May 2024 18:00:00 +0000
ROA not before:           Mon 06 May 2024 17:55:00 +0000
ROA not after:            Mon 05 May 2025 18:00:00 +0000
asID:                     140404
IP address blocks:        103.178.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl
                          rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9c:e8:cf:dd:c8:d2:57:bc:0e:6d:7e:7d:16:fb:e4:b7:bb:4e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: May  6 17:55:00 2024 GMT
            Not After : May  5 18:00:00 2025 GMT
        Subject: CN=2CAB57AC9C659E4ADEC338302ABD6577B147AAC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:e7:26:29:53:ea:da:97:20:f3:ec:44:73:
                    92:51:13:89:74:8e:15:59:8e:6d:fd:97:57:cf:02:
                    ef:cb:ee:63:f2:04:c9:cd:c8:a4:82:47:65:3e:3d:
                    b8:08:e9:a3:a0:41:58:4f:3e:05:ca:23:da:e6:2d:
                    97:a5:a7:27:50:b1:23:e3:b1:b2:55:cd:30:04:6a:
                    8b:3b:5b:cc:6a:80:5c:81:ed:a8:1b:54:e4:47:01:
                    2b:a3:ee:61:cb:4a:0a:62:20:bb:32:e5:f3:91:cf:
                    a1:3f:a3:09:1d:8d:d5:33:bc:c9:bd:66:17:d2:27:
                    95:f9:ef:93:3f:14:c9:75:2f:7e:be:46:4c:fb:43:
                    63:fb:bc:82:44:5b:5f:6f:81:16:f7:70:2e:d7:5b:
                    5d:9a:1d:12:e7:d4:d9:4a:53:e5:65:00:a0:f1:a2:
                    ba:64:b0:db:6b:cf:99:4b:e0:e5:3d:f4:f2:c1:1f:
                    a2:de:89:f5:b2:18:ce:c7:15:c7:35:63:6f:e9:1a:
                    41:fa:4f:10:4c:bf:14:56:74:06:2e:60:65:17:03:
                    57:8a:f2:5f:f3:f5:02:5f:cf:59:bb:2e:1e:84:a4:
                    b9:04:f7:21:54:71:37:40:c7:c3:0e:5b:73:fe:ca:
                    33:98:66:e3:1d:4e:8a:5f:4d:94:65:1e:90:95:a0:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AB:57:AC:9C:65:9E:4A:DE:C3:38:30:2A:BD:65:77:B1:47:AA:C9
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2d:34:c3:cf:7c:81:df:4e:95:b3:67:a2:48:53:83:4a:5d:
         db:0a:e4:2e:e3:13:2c:1f:6c:92:41:90:de:ed:db:13:50:06:
         22:be:88:35:56:ef:ac:7c:35:75:b2:77:b5:17:6a:33:6e:e2:
         93:d0:a4:c3:85:2b:be:91:cc:09:85:3f:04:3f:d0:24:f6:d9:
         7a:ab:71:f1:ae:b0:97:44:2a:e0:2a:64:15:e5:ee:a3:d2:fb:
         05:22:1d:d2:92:80:8e:01:79:01:ce:f2:6c:65:36:c9:60:81:
         24:c9:23:f5:7b:c3:ad:78:8e:96:9d:99:25:71:b5:c2:74:e1:
         92:b5:cf:70:1d:b2:9f:60:70:eb:f7:bc:dc:f9:94:20:8c:8b:
         d3:69:81:75:96:6b:c1:c0:f8:17:52:83:8b:b0:11:fa:ad:52:
         49:74:53:39:bf:d9:be:1d:5b:2a:91:b9:73:bf:a1:d6:e5:c9:
         0f:31:17:32:82:24:2d:5d:c0:87:73:af:0c:1e:b2:79:35:b5:
         f1:06:b6:a1:ac:d4:08:8b:61:c6:53:ea:5c:08:40:e2:36:d4:
         f2:12:e7:64:cf:87:2f:e9:10:96:8c:2e:88:44:fa:5b:d9:a6:
         40:c6:b3:72:c8:08:0f:13:be:73:ec:e6:9d:e5:e0:62:57:13:
         59:0f:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:20 2024 by rpki-client on console-fra.rpki-client.org