Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
File:                     3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa (raw, json)
Hash identifier:          9ZF2Eg58CtZBkb9CJ/ttc70dTqlt4QyDCLL7yta5ufQ=
Subject key identifier:   0A:3F:6C:12:C0:67:05:D8:73:2A:A4:01:CA:71:AE:31:81:AA:EA:8E
Certificate issuer:       /CN=1DD4F8984667E142BB9C6F1133AA56899352286C
Certificate serial:       06CFD5F90F207759C7BAAA5B9073B48614772D9B
Authority key identifier: 1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa
Signing time:             Fri 07 Jun 2024 09:02:08 +0000
ROA not before:           Fri 07 Jun 2024 08:57:08 +0000
ROA not after:            Fri 06 Jun 2025 09:02:08 +0000
asID:                     149318
IP address blocks:        103.178.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl
                          rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cf:d5:f9:0f:20:77:59:c7:ba:aa:5b:90:73:b4:86:14:77:2d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DD4F8984667E142BB9C6F1133AA56899352286C
        Validity
            Not Before: Jun  7 08:57:08 2024 GMT
            Not After : Jun  6 09:02:08 2025 GMT
        Subject: CN=0A3F6C12C06705D8732AA401CA71AE3181AAEA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:0d:5b:2c:83:ea:bd:fe:8d:c5:79:e5:e5:
                    12:05:37:a5:ec:f0:a0:54:0c:0b:f9:88:1a:72:af:
                    9c:79:96:0f:3a:4f:bb:65:4e:c0:bc:4d:e8:6b:8d:
                    bd:77:8a:4c:57:df:c9:92:0c:2b:18:55:ce:cb:a2:
                    f2:39:01:54:f1:60:f4:a5:87:04:18:2c:cc:2f:ff:
                    48:64:85:98:eb:1a:8f:3f:c6:fe:d3:41:49:c3:ee:
                    9c:b1:f7:e5:28:d3:6a:10:a9:57:76:cd:69:7f:a6:
                    7a:a6:26:3f:fd:f6:ac:aa:7b:b8:d9:2e:22:b5:54:
                    e1:ea:a3:a8:92:a2:12:2f:7b:31:ee:ba:f1:6b:7e:
                    00:83:e9:69:f1:e6:63:26:87:2c:9e:d8:dd:07:82:
                    09:0f:53:98:82:cc:da:75:55:b2:79:67:29:0e:07:
                    5d:dc:46:b2:0e:64:7a:17:40:3f:99:d8:18:42:7a:
                    e4:30:7c:18:c9:20:b3:6f:7d:bf:23:e3:82:0c:d7:
                    2e:31:71:6e:db:7b:ad:33:fb:74:4f:5f:ae:65:da:
                    c3:7c:8d:32:ce:65:37:c0:00:90:5b:5c:88:15:95:
                    83:21:fd:53:c6:9e:70:c6:d9:fe:8a:57:b1:26:fb:
                    52:76:7c:16:eb:69:7d:3d:53:0a:44:e8:74:8b:f0:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3F:6C:12:C0:67:05:D8:73:2A:A4:01:CA:71:AE:31:81:AA:EA:8E
            X509v3 Authority Key Identifier:
                keyid:1D:D4:F8:98:46:67:E1:42:BB:9C:6F:11:33:AA:56:89:93:52:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/1DD4F8984667E142BB9C6F1133AA56899352286C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DD4F8984667E142BB9C6F1133AA56899352286C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38352e302f32342d3234203d3e20313439333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:db:d8:29:df:c7:39:82:75:0e:a1:49:ed:85:ab:06:ee:
         be:9b:87:4f:5a:7f:41:36:58:66:a2:0b:4b:69:68:dd:55:7a:
         3a:91:8e:7e:2c:82:27:42:fb:ca:b7:4f:7d:34:98:7f:1f:4e:
         2d:71:0e:52:ec:11:ac:fd:bc:48:50:31:13:d1:43:6f:6c:bb:
         66:fb:69:c5:9f:09:d3:b1:df:20:27:e3:cc:8b:19:80:21:87:
         fe:33:63:7a:b7:36:3e:d2:63:90:80:1b:a3:82:e7:ef:77:51:
         bf:4e:0f:08:ad:9a:67:f0:17:94:93:d9:e9:ea:aa:9a:11:10:
         e6:db:f6:ff:44:be:ea:8a:a3:a0:02:f7:7c:74:a8:53:1a:80:
         01:54:96:b5:72:7b:4d:ef:6c:c4:58:4e:69:39:79:32:e1:e0:
         49:6f:26:70:27:0e:d4:d8:92:6d:03:a0:ca:ba:b8:3f:b7:ad:
         41:df:ee:27:b9:de:a6:2f:20:1e:b1:52:d0:ca:16:a3:b9:39:
         95:a2:ea:9e:9f:05:e9:fa:9b:7d:46:01:66:ad:db:0f:ce:83:
         63:23:c7:d4:90:7e:54:a2:88:54:98:83:32:68:02:29:90:fe:
         23:13:0c:2b:db:42:a6:a4:90:2d:f2:ef:17:d2:31:db:67:ea:
         e0:b0:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org