Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
File:                     3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          tc3HncTRHUQSS+sqsfs0p+pSPYJdxeM+Nhwr5YxRIMU=
Subject key identifier:   22:16:9C:91:DC:2A:98:F2:D1:53:59:FB:E0:A2:FC:61:28:03:6F:3C
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       7E239F82858AE80DF06F91EEB2FCE9613394ADFE
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa
Signing time:             Wed 03 Apr 2024 06:00:30 +0000
ROA not before:           Wed 03 Apr 2024 05:55:30 +0000
ROA not after:            Wed 02 Apr 2025 06:00:30 +0000
asID:                     139951
IP address blocks:        103.79.128.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:23:9f:82:85:8a:e8:0d:f0:6f:91:ee:b2:fc:e9:61:33:94:ad:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: Apr  3 05:55:30 2024 GMT
            Not After : Apr  2 06:00:30 2025 GMT
        Subject: CN=22169C91DC2A98F2D15359FBE0A2FC6128036F3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:87:da:6f:df:a3:e4:0b:eb:c7:de:e0:b9:2c:
                    ae:26:3e:09:ed:44:52:fc:8b:7a:4d:3d:b8:eb:49:
                    a9:27:f8:90:f0:71:ed:d2:e9:a0:89:52:56:bb:11:
                    e3:bc:b7:6f:5d:64:23:ed:e1:f4:05:a8:8d:fa:00:
                    e6:e4:c7:c6:53:ab:6e:8a:14:fe:bd:1d:1f:1b:54:
                    31:dc:96:86:12:53:46:6f:01:58:cc:c7:19:24:cd:
                    ab:81:c3:72:2c:9b:50:a5:49:0b:e8:c9:f4:94:a1:
                    5b:2f:98:80:2f:17:40:5e:84:8e:d8:81:db:14:42:
                    31:c1:5b:26:42:bb:07:dd:8c:8f:55:3c:7f:d1:4f:
                    71:07:cf:87:00:78:97:fd:0f:ff:d3:92:96:9a:b0:
                    4c:94:0f:86:91:83:f8:7d:61:b6:f8:27:d5:e1:82:
                    5a:e7:bd:69:e7:cd:37:1b:19:9d:60:86:1e:59:73:
                    2d:52:53:97:74:0c:ea:61:4f:f2:2d:7c:24:42:4c:
                    c3:aa:91:20:2b:2f:7a:37:b6:57:99:5c:e5:18:ca:
                    69:81:44:84:3e:cc:19:46:d2:5f:10:a6:18:7b:e8:
                    dd:3c:ed:13:3a:7c:e9:29:71:53:d9:3f:02:ae:e9:
                    4e:3b:d6:09:88:86:f4:30:32:8d:36:00:1b:a0:d1:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:9C:91:DC:2A:98:F2:D1:53:59:FB:E0:A2:FC:61:28:03:6F:3C
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132382e302f32332d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:a7:26:4e:6f:b7:3d:5e:df:bc:99:96:0f:c4:98:15:d2:be:
         53:3e:d9:d6:a1:f0:a7:79:61:84:a5:ce:87:d0:8a:f9:e3:6c:
         52:d0:eb:99:8a:69:87:d4:b1:15:2b:5f:5d:60:4b:61:59:1c:
         81:f1:87:52:1c:4b:23:c5:00:a6:2c:70:cf:29:2e:fa:39:ce:
         1c:42:cb:4a:3b:34:dd:80:d7:97:c2:92:17:54:f4:d6:c8:38:
         78:be:8f:99:ab:8b:1b:ba:fa:3b:52:cd:5a:08:97:bc:5f:b2:
         77:45:84:a8:4a:14:3c:4e:a5:62:3d:b3:07:a2:f5:7d:ca:53:
         c3:88:2b:66:6d:64:78:0f:ad:ee:d2:b9:fb:73:6b:70:c2:9d:
         b9:1c:ff:4d:c0:40:bb:86:e2:9e:b9:4d:62:0d:5e:07:4b:33:
         d6:f3:d9:6b:54:0f:1d:51:a1:85:50:f6:2c:17:28:53:5a:5e:
         b4:b6:83:ff:e9:06:d0:b8:2c:38:03:52:8f:28:26:2e:bc:3a:
         5a:e4:6e:9f:ef:54:5e:3b:a8:84:a4:02:b7:2a:d7:9f:6e:3a:
         09:7a:5c:f6:65:ac:e4:73:c8:f3:b1:fe:59:6e:7e:3b:e5:72:
         6c:38:f9:c0:87:16:1f:73:c2:88:c0:a7:8d:ba:e9:7a:08:87:
         3f:0f:a9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:29 2024 by rpki-client on console-fra.rpki-client.org