Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa
File:                     3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (raw, json)
Hash identifier:          EsdKY6DIJD/GOkvFDL0LPLouzJj6b3iPsPXhNlP6S4M=
Subject key identifier:   D7:A2:69:75:65:3C:52:08:3A:E1:61:7D:EF:E2:E1:ED:5F:46:63:ED
Certificate issuer:       /CN=08435803278DC5796EE67697996454D656195D4C
Certificate serial:       21487A845EBED79FDFED6661F28A48E21E711E0D
Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa
Signing time:             Tue 19 Mar 2024 06:14:44 +0000
ROA not before:           Tue 19 Mar 2024 06:09:44 +0000
ROA not after:            Tue 18 Mar 2025 06:14:44 +0000
asID:                     149377
IP address blocks:        103.180.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl
                          rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:48:7a:84:5e:be:d7:9f:df:ed:66:61:f2:8a:48:e2:1e:71:1e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08435803278DC5796EE67697996454D656195D4C
        Validity
            Not Before: Mar 19 06:09:44 2024 GMT
            Not After : Mar 18 06:14:44 2025 GMT
        Subject: CN=D7A26975653C52083AE1617DEFE2E1ED5F4663ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a8:51:49:70:21:60:f2:f8:51:d8:76:60:db:
                    d4:ea:8f:aa:90:69:a9:d9:87:e8:05:d2:f9:51:be:
                    22:fc:52:e2:18:db:a3:86:35:ef:aa:97:6c:85:9a:
                    26:f2:54:77:a3:ed:28:23:2d:91:a4:1a:b1:af:9c:
                    b5:a1:65:ce:82:7e:bd:7a:2e:4c:99:cc:40:b3:d1:
                    bf:f9:b0:04:1f:d4:f9:66:ad:26:af:da:43:46:53:
                    a8:75:56:87:0d:21:87:1c:b0:14:80:8a:67:53:e9:
                    a5:cb:e5:4d:6e:24:47:48:dd:cc:f2:e5:55:fb:1c:
                    f8:fb:3a:77:d4:ec:f2:a7:36:ae:2d:40:9f:bb:8e:
                    d5:8d:7b:c7:0e:3c:0f:28:16:32:d5:40:6e:fe:28:
                    7c:64:b7:c1:9f:50:f3:f0:d7:af:c1:8a:a3:63:7a:
                    4d:6f:8a:6b:18:28:55:d2:5e:21:63:b5:ee:5e:9d:
                    1d:9d:bf:43:29:28:ff:2e:52:99:c5:65:6d:66:5e:
                    a0:ac:b1:1b:93:95:4d:70:9f:6e:9b:8b:54:0a:6c:
                    07:71:70:f1:a1:b1:2c:a7:92:5e:56:c2:f3:c8:13:
                    dc:c5:52:33:c3:99:fa:b6:e9:c0:cd:5d:8e:77:d1:
                    d7:55:78:fc:ed:38:26:18:2a:07:36:67:9e:b8:26:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A2:69:75:65:3C:52:08:3A:E1:61:7D:EF:E2:E1:ED:5F:46:63:ED
            X509v3 Authority Key Identifier:
                keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:09:89:83:75:8a:0e:6a:f1:d8:e7:75:77:be:68:1d:96:37:
         07:b3:d1:9d:0e:3b:47:dd:f0:7d:dc:b1:68:69:f8:4b:8d:cf:
         e3:98:44:f9:9c:76:12:79:d8:a1:bb:5a:16:89:39:79:2d:8f:
         75:b4:9d:bc:db:9f:4a:97:77:3d:54:6b:34:99:83:15:f6:2d:
         0c:f6:86:5e:3c:77:6b:00:c5:ae:97:af:96:47:ea:38:24:f3:
         5a:4a:bf:2a:f8:d9:93:d5:5f:f1:88:bf:ce:a8:7a:cc:51:23:
         db:f1:fe:83:44:02:e5:e4:4a:e3:ae:42:3a:ea:dc:dc:89:f0:
         ff:70:e5:54:75:e6:b7:82:9a:59:97:82:a5:6f:66:cb:88:8e:
         0d:69:76:20:10:f2:99:90:59:fd:20:7f:a3:46:db:03:2f:d7:
         8c:1c:ec:c4:d1:16:da:b2:7c:41:f4:f0:c9:81:14:87:f7:af:
         a6:87:ca:66:54:de:3d:61:13:bb:55:93:de:b6:49:1e:67:fa:
         8b:2a:ff:c0:b6:fe:c9:50:b8:57:22:07:cc:ba:75:da:2d:ed:
         7c:e8:fe:de:f6:e5:89:5a:1c:d2:02:ce:0e:b3:bf:4c:86:cf:
         34:79:ff:1c:7c:7c:13:a7:89:5d:6b:88:cc:f2:f2:a4:4f:2b:
         ab:9c:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org