Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e35342e3137322e302f32342d3234203d3e203538383234.roa
File:                     3130332e35342e3137322e302f32342d3234203d3e203538383234.roa (raw, json)
Hash identifier:          OWfsDct17svjGuwbQaZmV8U2U6uJIqxIULkYT7dzkhM=
Subject key identifier:   F0:26:19:FF:BD:E3:E4:E7:E5:82:36:89:C5:C0:84:7F:FB:C4:18:AA
Certificate issuer:       /CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
Certificate serial:       22DDCB2D42AD07893DC463302D9C366B1882CD6D
Authority key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e35342e3137322e302f32342d3234203d3e203538383234.roa
Signing time:             Mon 04 Mar 2024 04:00:00 +0000
ROA not before:           Mon 04 Mar 2024 03:55:00 +0000
ROA not after:            Mon 03 Mar 2025 04:00:00 +0000
asID:                     58824
IP address blocks:        103.54.172.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl
                          rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dd:cb:2d:42:ad:07:89:3d:c4:63:30:2d:9c:36:6b:18:82:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD
        Validity
            Not Before: Mar  4 03:55:00 2024 GMT
            Not After : Mar  3 04:00:00 2025 GMT
        Subject: CN=F02619FFBDE3E4E7E5823689C5C0847FFBC418AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:9c:9a:40:8b:4d:15:43:d2:04:ba:78:10:
                    77:fb:a6:0e:60:01:e5:08:36:19:34:6b:9e:94:5e:
                    f4:95:2b:b7:c9:7a:cd:d5:85:70:27:8f:6d:6f:84:
                    b9:af:44:7b:07:0d:43:39:59:b4:af:ef:1f:d2:78:
                    df:f1:70:bb:85:68:00:14:83:1d:53:96:5f:74:5e:
                    54:af:a0:41:75:da:b4:6d:59:ae:ad:1d:e2:80:bc:
                    bf:5e:32:cf:8a:d9:d5:3b:a6:6f:da:33:54:de:74:
                    70:e0:39:b0:34:da:b5:d0:95:9e:85:66:98:75:8a:
                    c1:51:5f:8b:17:13:50:78:78:6a:c7:83:c5:14:89:
                    75:26:e8:5d:eb:e2:28:b5:0f:2e:c2:27:ca:10:88:
                    37:e5:1b:a7:45:2f:6f:69:a4:e1:75:69:ec:8e:85:
                    64:39:42:3f:6d:30:b7:3b:e4:d5:1a:49:ee:ae:ae:
                    82:fa:df:de:48:ea:7e:ec:fc:f2:d2:dc:29:50:44:
                    04:cb:84:f8:5b:d1:89:19:0c:6e:61:00:10:b3:6a:
                    9f:79:33:ca:27:4c:a5:fa:07:7a:99:16:62:6c:4c:
                    0a:61:c1:bd:30:29:5a:65:6d:28:06:30:d4:2b:50:
                    47:48:c4:e3:ed:14:f5:10:d7:eb:7e:5a:43:21:09:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:26:19:FF:BD:E3:E4:E7:E5:82:36:89:C5:C0:84:7F:FB:C4:18:AA
            X509v3 Authority Key Identifier:
                keyid:17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/3130332e35342e3137322e302f32342d3234203d3e203538383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:4a:b9:81:54:c6:32:5b:fd:5c:97:25:77:c1:b0:97:42:
         f4:ba:fe:34:1f:f9:31:64:ef:4c:0e:cb:be:ef:64:77:80:0f:
         39:4c:3d:3a:53:fb:68:35:24:e0:3b:e8:dd:04:d0:8f:3c:c8:
         f0:4c:63:b7:25:72:ad:ad:87:73:db:98:c8:e6:9f:a3:69:57:
         4a:b9:60:64:cf:bb:03:b4:7f:5f:65:87:0b:ae:53:7f:47:d5:
         8e:1f:5d:82:7a:87:9a:ee:d7:0a:70:6c:54:f5:34:89:60:6a:
         a6:b6:be:9d:d4:3a:11:8b:b2:f3:33:fd:5d:33:72:d6:67:c3:
         ba:a3:22:b5:31:5d:31:56:b0:b0:83:f6:a4:ae:72:e4:9f:41:
         27:d3:f6:5e:cf:15:9e:fd:4b:4e:a3:f8:a4:29:4c:ce:e3:c1:
         5f:06:30:5c:42:4a:e9:a9:a3:27:0d:82:83:7a:f7:cb:a2:99:
         ca:e6:a2:01:d7:75:2a:9f:0d:da:09:12:0b:7d:45:3d:81:be:
         a7:df:49:4c:21:3b:a7:54:73:02:6c:7a:4d:9f:87:b8:5e:e5:
         db:ee:11:6b:2c:8f:dd:6b:5f:46:34:e4:d1:da:7c:8f:28:5b:
         71:10:6c:8c:00:47:2b:41:78:2c:3d:d7:1c:5b:39:43:5d:00:
         0f:55:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:27 2024 by rpki-client on console-fra.rpki-client.org