Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
File:                     3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (raw, json)
Hash identifier:          Pqs7mBbS68/XqZN+jsLfhPSajsx+wciG2xBMQo+m37c=
Subject key identifier:   62:5B:C3:6A:54:7F:97:AB:83:CF:72:B6:5E:A2:B6:4C:94:DF:51:BA
Certificate issuer:       /CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
Certificate serial:       4C683E875AC5D0741410AB8C7173EA4A28856162
Authority key identifier: 70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
Signing time:             Fri 03 Nov 2023 11:08:52 +0000
ROA not before:           Fri 03 Nov 2023 11:03:52 +0000
ROA not after:            Fri 01 Nov 2024 11:08:52 +0000
asID:                     139418
IP address blocks:        103.174.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl
                          rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:68:3e:87:5a:c5:d0:74:14:10:ab:8c:71:73:ea:4a:28:85:61:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64
        Validity
            Not Before: Nov  3 11:03:52 2023 GMT
            Not After : Nov  1 11:08:52 2024 GMT
        Subject: CN=625BC36A547F97AB83CF72B65EA2B64C94DF51BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0a:a2:37:ec:d8:37:6a:a1:ef:b3:d3:04:28:
                    42:9f:7a:19:2d:a7:98:d7:4a:3d:ba:ce:75:b2:db:
                    d0:18:5e:73:57:43:87:3c:20:64:c3:3f:e8:35:cb:
                    f2:7c:67:d5:fb:1d:94:e3:b2:ad:06:a7:d5:33:28:
                    8a:e7:a8:be:4e:7d:35:02:25:59:47:21:06:68:ca:
                    d6:30:20:c7:ee:63:99:69:1a:08:f4:c5:cc:8e:bc:
                    06:b0:71:ed:ad:18:53:03:ae:c1:d3:84:d2:4d:05:
                    b6:cc:6b:46:6c:71:ba:18:b0:44:6b:f0:57:ed:a0:
                    38:e6:1c:42:6b:35:e0:d0:d7:13:a3:c9:f3:f7:b0:
                    12:35:5f:31:04:e9:1d:a6:e3:cb:f1:06:0d:dc:4a:
                    a3:d1:d0:15:7c:71:18:e5:8e:56:f2:a4:5a:28:4c:
                    6a:fa:91:9e:20:95:58:55:43:5a:a5:52:60:37:75:
                    01:f5:29:d1:57:19:9f:27:68:31:41:ae:cc:50:f8:
                    be:91:4b:51:79:e2:3f:21:32:c2:1c:cb:e7:49:5a:
                    e5:76:2e:a2:dd:60:91:36:aa:6e:7c:7a:e5:14:46:
                    a1:2b:d3:2a:d6:14:46:14:d1:04:72:45:23:13:52:
                    9c:a3:00:af:32:02:9d:82:c3:aa:a0:32:7b:73:c7:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5B:C3:6A:54:7F:97:AB:83:CF:72:B6:5E:A2:B6:4C:94:DF:51:BA
            X509v3 Authority Key Identifier:
                keyid:70:0B:95:87:C4:CF:A7:F2:B1:D9:F7:C9:2C:B0:B0:DB:84:6A:2D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/700B9587C4CFA7F2B1D9F7C92CB0B0DB846A2D64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a0:51:7b:d3:b4:2c:d0:65:d8:5e:f4:56:3f:f0:8e:92:07:
         ae:17:0b:f5:a5:8b:d3:84:bd:a5:e1:be:80:ab:83:51:d8:76:
         18:e9:59:90:e8:45:88:2f:7f:8c:62:e9:a6:95:64:a8:90:cf:
         ab:b1:5f:e2:47:2a:e9:5a:b2:06:82:a0:30:22:30:df:da:0f:
         e2:95:de:28:35:db:70:74:44:7f:49:88:4e:5d:4b:74:23:8d:
         b5:84:27:b6:d3:1c:14:ec:39:ac:8e:68:f1:78:ca:e1:f6:90:
         89:63:19:64:58:48:a8:fe:74:71:e0:20:3c:a1:9b:a5:ab:c9:
         5c:6f:77:1f:4b:ed:ae:53:50:1d:05:c8:c4:5e:5c:d7:b3:ea:
         97:b5:08:a6:0d:68:56:ab:75:80:09:14:ec:3b:52:07:c4:fc:
         74:6a:cd:87:ea:1f:16:38:51:8d:c2:5d:df:6c:c8:49:f2:fd:
         3f:68:3d:f5:a1:50:58:59:83:75:14:5d:54:52:ea:bc:6b:8e:
         c3:83:16:dc:f4:5c:5e:b7:b7:bc:46:3f:ef:6a:57:09:15:dd:
         bb:aa:93:fc:47:85:e5:a1:8d:6e:8e:b6:81:8e:87:a3:ca:7b:
         f3:17:ad:ce:8b:31:b6:ec:18:6a:7a:85:c6:ff:66:6b:5f:00:
         78:cb:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:42 2024 by rpki-client on console-fra.rpki-client.org