Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          FSBT4Cl2oIA3FZ2v8CwqLAvZnqhyh2xxPvGzfautFn8=
Subject key identifier:   18:B5:D1:04:3B:DE:81:65:99:0C:36:C5:D6:D1:35:E3:61:5C:B8:5C
Certificate issuer:       /CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
Certificate serial:       09BF3894ADA8080051F405B68819121E33764CAC
Authority key identifier: 21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
Signing time:             Tue 05 Nov 2024 08:36:24 +0000
ROA not before:           Tue 05 Nov 2024 08:31:24 +0000
ROA not after:            Tue 04 Nov 2025 08:36:24 +0000
asID:                     46023
IP address blocks:        103.106.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl
                          rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:38:94:ad:a8:08:00:51:f4:05:b6:88:19:12:1e:33:76:4c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21F5E152BA3E25561EA4D2E2986546412F44F15B
        Validity
            Not Before: Nov  5 08:31:24 2024 GMT
            Not After : Nov  4 08:36:24 2025 GMT
        Subject: CN=18B5D1043BDE8165990C36C5D6D135E3615CB85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:2a:e7:75:36:27:4c:39:e0:a7:21:9d:c3:
                    32:ee:d7:0c:df:3d:ae:94:d9:2e:75:ee:4c:e9:88:
                    17:1a:a3:71:16:7e:5e:08:75:3e:73:db:cc:1a:09:
                    be:b9:07:c0:93:47:cd:e0:88:b5:d9:b1:03:34:99:
                    a9:cd:3a:61:ea:a5:7e:c1:71:5e:44:eb:42:79:02:
                    53:ad:56:10:e0:00:28:33:ce:84:1b:9f:bf:3c:93:
                    cb:e7:0b:0e:c6:08:e3:90:9b:fe:86:20:24:03:f7:
                    ee:d0:d4:70:90:a3:6a:33:eb:5f:e6:4a:22:ca:bf:
                    c1:46:a6:57:f8:b2:8d:4d:ef:e9:4a:a2:81:8e:b6:
                    ac:cb:7f:a8:89:c5:0c:4c:47:ab:50:42:58:81:54:
                    3f:66:41:cb:bd:10:e3:40:6e:dc:12:c5:7b:33:ea:
                    17:3e:29:41:78:50:e8:99:ca:b0:3b:a8:62:ea:e5:
                    34:fc:00:5b:e6:ce:c9:22:e0:4c:05:5a:92:6a:c8:
                    68:e2:63:dd:b2:95:dd:53:8d:5c:50:7b:c8:d2:39:
                    2b:35:c6:d0:33:77:fc:8d:04:c3:f0:e9:af:09:36:
                    6a:6e:fc:97:91:26:8c:96:bb:12:7d:32:3b:e1:e1:
                    0a:b1:1e:93:c7:24:a2:82:01:58:d0:e5:84:8f:a5:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:D1:04:3B:DE:81:65:99:0C:36:C5:D6:D1:35:E3:61:5C:B8:5C
            X509v3 Authority Key Identifier:
                keyid:21:F5:E1:52:BA:3E:25:56:1E:A4:D2:E2:98:65:46:41:2F:44:F1:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/21F5E152BA3E25561EA4D2E2986546412F44F15B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/21F5E152BA3E25561EA4D2E2986546412F44F15B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:8a:eb:a9:9c:a0:12:3b:83:5e:93:3f:1d:26:5b:46:4b:
         a8:93:6e:6c:b8:33:50:a5:20:33:f8:e9:ba:81:11:e2:9c:a4:
         02:a6:94:46:98:f1:40:ed:98:70:f8:e9:bf:81:8c:81:74:5b:
         6c:5a:5a:ba:b2:45:98:1e:da:99:34:b2:b5:12:3a:99:02:ff:
         1e:cc:2f:45:e3:18:af:ea:f6:d5:fc:f5:10:95:8c:f0:fd:88:
         b3:16:cc:27:fe:8e:a1:10:a9:a6:17:5e:9f:83:0d:fa:ca:83:
         81:cf:6d:a3:4c:55:13:e2:19:95:1b:7c:e2:c6:cc:fe:42:fc:
         2c:9b:5b:a5:8a:56:2f:2f:dc:7d:78:b5:ca:26:7e:47:f9:2f:
         45:23:dc:41:01:e8:40:11:75:a6:a8:88:99:77:39:e2:09:0c:
         1c:ba:81:aa:8f:d4:d5:90:ec:41:20:5a:41:37:d6:27:59:9e:
         e3:ca:b1:d2:eb:fa:0e:00:ca:14:de:d0:e6:b2:3a:f6:6f:48:
         64:1a:0f:7b:77:36:cf:e7:0e:19:6b:1a:ab:25:43:30:87:4f:
         38:d5:70:bc:4c:8c:f3:03:0f:da:79:9e:73:c7:bd:f1:e8:ea:
         53:62:78:d8:c2:ea:68:85:13:28:b6:1f:06:ba:0d:54:e3:00:
         9b:f3:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:27 2024 by rpki-client on console-ams.rpki-client.org