Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa
File:                     3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa (raw, json)
Hash identifier:          VX/I3/x4BQAW9tojrrpAd/u/hvUEfSW7Ux6uRaa3WGI=
Subject key identifier:   62:9B:13:11:22:35:D6:67:5F:75:27:F4:40:0C:B2:8C:C6:FD:F7:34
Certificate issuer:       /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
Certificate serial:       55F244F9FD383C80155E1E87B6AEE3F9E8B77F84
Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa
Signing time:             Fri 04 Oct 2024 12:00:00 +0000
ROA not before:           Fri 04 Oct 2024 11:55:00 +0000
ROA not after:            Fri 03 Oct 2025 12:00:00 +0000
asID:                     139418
IP address blocks:        103.174.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl
                          rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f2:44:f9:fd:38:3c:80:15:5e:1e:87:b6:ae:e3:f9:e8:b7:7f:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
        Validity
            Not Before: Oct  4 11:55:00 2024 GMT
            Not After : Oct  3 12:00:00 2025 GMT
        Subject: CN=629B13112235D6675F7527F4400CB28CC6FDF734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a8:0f:0c:81:f6:d3:0a:aa:4c:5f:94:d7:c0:
                    13:3f:2d:a9:6f:44:af:98:cb:80:58:ab:22:5a:35:
                    13:19:00:9f:dc:3d:d7:ca:bc:77:9c:0c:9c:aa:ab:
                    70:79:e3:f5:fa:7c:dc:cb:d2:a8:35:60:d6:a0:50:
                    6a:b1:88:65:a7:06:e7:ec:6f:78:6e:35:fa:02:78:
                    0e:ad:ab:93:2c:3b:6a:e0:90:47:97:bc:4b:d5:dd:
                    fc:d9:ad:01:68:0a:20:ff:04:50:be:60:df:be:f2:
                    49:3c:e1:21:08:97:44:0e:e0:e2:87:ba:19:7a:fc:
                    7a:46:45:2d:b7:eb:d4:90:5d:36:80:65:0b:3e:ff:
                    10:cb:d1:11:c2:e0:18:b4:4f:77:b3:b5:02:70:84:
                    ae:d9:7d:3a:05:a2:d0:9b:ae:30:17:2a:fe:a6:1c:
                    ec:b3:4a:2c:17:11:07:99:1a:54:2b:91:1e:81:9b:
                    ea:1e:3d:da:4e:e1:c1:3a:23:e3:4d:8c:13:57:83:
                    b1:d4:75:ba:e3:09:79:bc:14:c1:42:34:36:4a:f7:
                    38:8a:2e:b9:3a:af:d4:6a:0b:de:dc:53:a6:82:17:
                    4a:8f:e6:8d:3b:0d:64:47:95:89:c5:54:c9:df:75:
                    99:5d:c1:27:aa:be:af:9f:5d:3e:d5:95:4d:06:da:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9B:13:11:22:35:D6:67:5F:75:27:F4:40:0C:B2:8C:C6:FD:F7:34
            X509v3 Authority Key Identifier:
                keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137382e302f32342d3234203d3e20313339343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:57:fe:fa:a7:f2:e3:a6:a2:9a:5b:7b:ee:cf:68:56:b7:39:
         19:dc:c8:59:d8:57:be:ad:d0:60:b2:ff:03:53:31:8e:04:89:
         cf:d3:f5:2a:9d:f2:1a:76:8d:09:8d:5f:94:a0:0a:aa:55:51:
         96:85:b8:91:a3:83:b2:30:2e:ac:df:c0:6a:18:5a:e7:e7:61:
         fd:06:8f:ce:ac:88:73:da:56:5d:4b:3e:2d:f8:2a:a4:30:c6:
         2d:46:b2:4a:e0:1d:02:a9:20:6c:4c:fe:02:64:61:50:e4:3b:
         64:83:2d:26:e0:08:02:b5:12:57:b4:20:ea:8f:25:c3:b5:49:
         2c:ca:63:b7:19:48:bb:62:eb:9d:67:9a:22:bc:5c:47:27:24:
         08:44:c9:15:3f:5f:bf:38:78:3d:38:94:70:3a:05:5a:dc:5d:
         41:54:94:f0:4a:54:ca:70:fd:29:29:11:2d:22:df:39:81:55:
         fa:1f:fe:f1:a9:72:cc:e4:51:c5:a5:82:c7:47:2c:43:7c:04:
         96:46:03:a8:8d:6d:43:24:e5:5d:63:0b:42:b9:8f:5c:0e:65:
         b4:ea:0f:7d:d8:1b:96:03:c7:f9:1c:c3:69:94:48:e3:05:1a:
         87:a3:6a:12:88:33:d2:3a:df:c8:dd:52:e3:53:1e:f3:a1:5c:
         1d:2d:96:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org