Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa
File:                     3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa (raw, json)
Hash identifier:          S4P5IQeGPISm8AAMMW7Ln274SMZv0cJIlnYH2lAvE0o=
Subject key identifier:   AF:37:3C:D5:37:3A:ED:BB:2D:BE:70:18:7E:90:3B:9A:BC:B4:D1:93
Certificate issuer:       /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Certificate serial:       50A1264366AE5D444BA26D44E74028CBFE81F8DB
Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa
Signing time:             Wed 07 Feb 2024 04:03:08 +0000
ROA not before:           Wed 07 Feb 2024 03:58:08 +0000
ROA not after:            Wed 05 Feb 2025 04:03:08 +0000
asID:                     136841
IP address blocks:        103.79.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl
                          rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a1:26:43:66:ae:5d:44:4b:a2:6d:44:e7:40:28:cb:fe:81:f8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
        Validity
            Not Before: Feb  7 03:58:08 2024 GMT
            Not After : Feb  5 04:03:08 2025 GMT
        Subject: CN=AF373CD5373AEDBB2DBE70187E903B9ABCB4D193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5e:10:04:b4:bf:de:6f:c1:ef:c5:0e:89:35:
                    27:94:4e:16:22:74:da:9e:eb:a9:7f:9c:6c:9a:b4:
                    d6:51:1e:11:75:33:36:e6:01:f8:63:6e:79:23:13:
                    1e:4b:5e:f6:81:d5:aa:5f:eb:51:e4:fc:d6:47:73:
                    8e:ef:45:6a:af:95:d8:54:92:f6:a7:5e:4d:74:9a:
                    49:2c:5c:e0:de:9a:10:5f:af:82:c9:5f:74:89:af:
                    63:13:6e:42:66:55:48:3f:11:8c:cf:6c:4c:d7:39:
                    55:1f:6b:bf:1b:82:21:52:95:f1:5c:70:4c:05:cc:
                    15:9e:0f:f5:44:f8:73:87:f6:d4:71:3b:14:fc:b1:
                    1d:6c:eb:7b:7c:f4:9c:ca:52:b4:4b:a8:c8:f0:99:
                    0a:16:61:cd:e6:0b:a9:4b:3d:3d:2d:97:ab:dc:f7:
                    2b:35:0c:ba:8a:09:bd:61:f1:b5:20:65:24:d0:cd:
                    3d:93:c4:80:f5:46:44:4d:35:f8:5e:dd:49:ae:22:
                    e7:2c:39:bc:4d:1a:0d:4d:5d:77:6c:ab:d4:f5:66:
                    21:75:30:47:5c:dc:e5:17:ca:4d:93:ad:5b:17:4f:
                    2b:1d:eb:06:70:b5:89:1b:6e:0e:99:bf:01:b9:8d:
                    fd:d7:64:45:6e:87:dc:81:55:f8:fc:c4:7f:80:63:
                    1a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:37:3C:D5:37:3A:ED:BB:2D:BE:70:18:7E:90:3B:9A:BC:B4:D1:93
            X509v3 Authority Key Identifier:
                keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313336383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:d0:9f:44:a1:e0:fd:be:56:b1:ca:76:aa:e4:0b:d2:ed:
         2f:be:68:d7:04:13:00:16:92:13:5e:44:b8:1d:67:49:d6:f1:
         59:b1:eb:28:b1:f5:aa:63:67:95:b1:69:14:f6:4c:55:ac:36:
         25:de:7b:be:33:f1:09:42:be:b5:97:48:6d:4f:d0:e0:73:50:
         52:b4:58:5d:3f:d3:f7:8a:d4:b1:42:69:64:30:fb:01:49:cc:
         3e:16:a3:11:af:60:66:ae:e2:db:b6:01:99:aa:3b:60:d2:05:
         33:7c:d6:65:d3:a3:a6:87:82:c6:a8:1d:59:84:6c:60:8d:bc:
         31:06:29:c4:a5:ce:04:b6:e5:59:51:a2:e9:63:b5:f8:67:0c:
         06:8c:05:a7:25:3d:5e:f3:b2:70:7c:43:cd:93:46:d7:d8:a5:
         48:6d:55:5e:f3:13:02:3c:70:ba:a5:14:1b:d4:68:4d:07:2a:
         3b:6b:59:a2:69:bc:28:26:91:a1:7f:48:2c:d0:01:5f:fb:00:
         79:74:9f:05:32:f1:e0:65:1a:73:92:a5:ac:2d:ae:4a:37:02:
         90:34:47:92:fa:f1:a7:62:c1:6a:f6:75:40:88:d9:ad:60:98:
         60:8f:69:c1:3a:ec:67:18:a9:ac:e7:c0:78:cf:47:5a:92:79:
         41:98:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org