Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
File:                     3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (raw, json)
Hash identifier:          BPKyUKqegcQh7lOAU+lF0QRMkfi7PI2y8bbVLrRKJ70=
Subject key identifier:   0C:7F:3C:30:81:5F:71:C8:BC:2F:1C:B7:95:A8:4C:1D:65:13:36:04
Certificate issuer:       /CN=7FAD2077691F807236683910594F23BA68280CD9
Certificate serial:       3ADEED2A44D63F59C9DE7DA51887713E9366B751
Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa
Signing time:             Mon 01 Jul 2024 01:05:39 +0000
ROA not before:           Mon 01 Jul 2024 01:00:39 +0000
ROA not after:            Mon 30 Jun 2025 01:05:39 +0000
asID:                     133803
IP address blocks:        103.147.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl
                          rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 14:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:ed:2a:44:d6:3f:59:c9:de:7d:a5:18:87:71:3e:93:66:b7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9
        Validity
            Not Before: Jul  1 01:00:39 2024 GMT
            Not After : Jun 30 01:05:39 2025 GMT
        Subject: CN=0C7F3C30815F71C8BC2F1CB795A84C1D65133604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:e3:dd:00:39:64:df:dd:8e:09:90:cc:7d:
                    a9:1e:b9:c6:5d:72:99:4c:75:81:ce:b2:14:70:86:
                    eb:d9:79:6e:7a:8c:d2:ce:2e:4e:74:39:47:52:84:
                    d6:07:50:a9:3b:0b:41:87:13:04:3a:de:ba:af:ec:
                    8c:0e:93:e9:4c:80:c6:ef:64:2f:08:cf:12:4d:65:
                    91:66:15:74:2a:04:3f:02:22:bd:23:df:ac:08:22:
                    9c:55:a0:75:79:af:85:b8:97:f3:be:27:45:eb:60:
                    02:8f:eb:26:ad:2f:4f:31:d5:85:fb:8e:30:30:92:
                    71:c5:dd:91:55:c5:f2:73:48:c8:8d:df:73:d0:2c:
                    73:62:cf:13:53:e8:65:2b:25:45:61:cd:5b:20:1d:
                    f9:ed:ac:bf:19:7c:b8:7e:48:02:60:3f:c0:0d:36:
                    31:66:19:bd:cd:26:5b:2e:c4:44:92:85:c8:8f:05:
                    be:64:08:ca:bc:14:11:d0:52:29:e6:f9:41:00:ed:
                    43:73:76:dd:d9:6b:9c:00:b1:b1:47:7f:32:54:96:
                    dd:fb:16:71:44:5a:f1:be:40:2a:be:df:42:99:47:
                    88:4c:db:c9:80:1f:9c:9c:c9:dd:dd:7d:3a:02:ec:
                    f9:1c:cb:5f:6e:d4:05:f0:40:f1:34:0f:11:9d:fc:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:3C:30:81:5F:71:C8:BC:2F:1C:B7:95:A8:4C:1D:65:13:36:04
            X509v3 Authority Key Identifier:
                keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:9a:fc:e0:69:7a:2a:84:d2:f6:c3:2a:c0:7b:33:61:9e:
         62:06:a4:eb:b7:9c:26:c7:84:f7:50:f7:72:31:de:a1:6f:94:
         c5:a6:53:4f:2f:34:5c:79:6c:62:4e:ae:00:48:bc:a5:c1:19:
         62:99:63:92:65:8d:83:da:e8:f1:00:da:52:4b:51:3b:e3:80:
         dd:7b:6c:df:61:fa:d0:36:46:24:f5:84:72:06:1e:aa:7f:25:
         44:97:28:90:20:7f:fc:1e:2a:50:7d:20:e9:b9:ca:38:cd:b0:
         38:92:1c:40:f3:c6:b4:51:73:5b:c1:1f:ab:88:6f:ee:fe:0c:
         ed:84:66:0c:47:6b:93:83:49:5a:df:42:c6:29:85:31:e9:4e:
         0c:33:9b:a0:81:59:b6:d7:cb:06:76:2d:07:99:9e:20:3a:8a:
         b1:f8:ef:10:b0:3c:f8:01:8b:88:ce:f4:47:dd:ba:bc:33:21:
         ae:47:39:9a:ab:0b:fc:87:6f:c7:d1:6f:99:78:82:f3:c3:4e:
         2b:05:d5:af:a4:a8:7e:8b:bd:39:0e:d3:87:ee:ca:e4:f4:b5:
         37:df:bb:69:1f:d4:d0:72:f7:18:86:eb:5a:a4:62:3a:14:f3:
         cb:54:a8:6f:a5:a0:fc:05:96:71:64:92:f5:19:b6:0c:5f:a7:
         1a:c0:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org