Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
File:                     3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (raw, json)
Hash identifier:          a0lH+PIAmWNcxqLbA+wvO5CoOPbucnjR8xOoW3GXo30=
Subject key identifier:   3A:ED:B4:40:32:B6:0F:21:D9:39:B7:08:52:33:A9:63:B0:63:10:0F
Certificate issuer:       /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
Certificate serial:       5C15C534DA5D56B9B2AA52C12FF4121475D6F50F
Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
Signing time:             Fri 04 Oct 2024 12:00:01 +0000
ROA not before:           Fri 04 Oct 2024 11:55:01 +0000
ROA not after:            Fri 03 Oct 2025 12:00:01 +0000
asID:                     139418
IP address blocks:        103.174.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl
                          rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:15:c5:34:da:5d:56:b9:b2:aa:52:c1:2f:f4:12:14:75:d6:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
        Validity
            Not Before: Oct  4 11:55:01 2024 GMT
            Not After : Oct  3 12:00:01 2025 GMT
        Subject: CN=3AEDB44032B60F21D939B7085233A963B063100F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:01:c2:57:a3:50:e3:5e:af:51:3e:60:b8:
                    db:62:12:64:e5:d9:b7:68:92:8f:21:5c:a3:0e:f5:
                    55:72:f8:02:19:f8:68:3a:6c:63:00:5f:4c:38:e7:
                    bc:cc:51:04:f7:04:12:4c:96:c7:19:eb:61:02:de:
                    8c:2b:ab:80:81:74:e1:73:61:5b:d9:25:40:ac:77:
                    a2:e6:8d:82:fa:d5:9c:f6:ad:f9:3e:73:3c:69:0e:
                    6a:59:c7:1f:9b:b9:0c:74:ec:53:b6:cc:38:8c:8e:
                    dc:38:ae:fb:e6:5e:f5:58:cd:30:db:81:61:91:3c:
                    55:d8:9a:9a:bf:4c:7b:4a:35:ae:86:da:27:26:af:
                    ba:f3:47:60:ea:2e:8e:32:77:db:b2:d4:1d:1a:ed:
                    fa:c1:b8:78:1b:58:7f:f6:2e:60:4e:98:52:4a:eb:
                    a1:22:2b:5a:0f:0e:64:39:d3:2b:be:78:e9:3e:c7:
                    0f:76:21:73:f9:2c:2b:3b:fb:6e:06:67:50:04:4b:
                    c8:9e:47:f4:f8:1d:53:13:03:d2:38:9f:35:7f:87:
                    0e:96:ff:8b:dd:49:fc:2d:88:41:e8:b0:5b:04:aa:
                    da:d9:d6:21:65:6a:50:22:fd:8f:c9:c4:bb:4f:ee:
                    34:b7:c1:28:2a:b8:14:cd:9a:8d:05:df:09:bb:94:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:ED:B4:40:32:B6:0F:21:D9:39:B7:08:52:33:A9:63:B0:63:10:0F
            X509v3 Authority Key Identifier:
                keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:85:0e:38:14:0b:2c:e1:7d:07:b1:83:6f:a0:4e:2c:31:ec:
         76:d8:4e:c9:82:56:c3:92:a2:1b:b3:ff:b6:6a:56:79:5f:f2:
         79:5e:05:36:f2:e7:b6:bd:1a:b2:2d:77:8f:76:78:87:17:f6:
         e8:1a:0f:19:31:dd:35:d9:59:66:55:7d:b1:a7:77:b8:8a:65:
         5e:1f:78:b1:dd:3a:c9:82:77:4f:bf:e5:6c:f5:6c:9a:09:62:
         e6:4b:42:4e:6d:cf:b3:5e:80:ad:3c:49:d1:85:aa:5d:0d:20:
         e8:d1:c9:e6:63:7a:b5:38:fa:39:50:8f:d7:35:e8:a4:f7:ca:
         0c:dd:0d:58:95:2b:9d:0a:10:10:4c:c7:c7:ec:73:72:41:3f:
         77:4f:a2:76:5f:e7:46:84:f3:be:f6:71:ed:73:2d:b8:89:1e:
         50:ab:a2:2b:1c:aa:66:49:54:75:8d:29:16:81:c0:b1:6b:01:
         01:1b:f4:a3:0d:86:24:18:44:e5:39:20:e9:2c:22:9f:50:13:
         81:0e:9f:32:17:48:18:be:99:06:80:22:37:9e:4c:e5:aa:f4:
         55:a7:9d:cc:12:d9:aa:3f:1a:35:90:61:42:fa:ab:c1:02:61:
         15:37:3c:36:df:79:21:27:88:26:28:eb:1c:14:66:e7:69:f9:
         20:26:60:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org