Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          aKEsgE6H2Q6MjQcVkyp/z8tGgi8bnF/5scXJTaxQ5O4=
Subject key identifier:   A0:9B:CC:4F:DC:82:92:80:89:F7:C1:FE:B8:EF:11:DD:BD:C3:62:1A
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       448DB6D6358B8B85F0C2F2467060F2780081E761
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
Signing time:             Sat 05 Oct 2024 04:02:25 +0000
ROA not before:           Sat 05 Oct 2024 03:57:25 +0000
ROA not after:            Sat 04 Oct 2025 04:02:25 +0000
asID:                     64302
IP address blocks:        103.78.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8d:b6:d6:35:8b:8b:85:f0:c2:f2:46:70:60:f2:78:00:81:e7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Oct  5 03:57:25 2024 GMT
            Not After : Oct  4 04:02:25 2025 GMT
        Subject: CN=A09BCC4FDC82928089F7C1FEB8EF11DDBDC3621A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5e:62:95:5a:21:62:ce:63:f0:a8:d0:39:f2:
                    90:2e:f3:89:b0:01:7d:60:ea:ca:e6:c0:3d:ba:56:
                    8a:1c:9e:9b:88:03:05:68:fc:a0:5e:ee:43:aa:5f:
                    ee:36:07:f4:b4:25:58:ba:67:41:71:e5:b1:cc:d3:
                    90:85:74:22:34:75:c2:c5:4b:84:00:be:f9:59:e5:
                    46:5b:89:04:51:2b:39:54:de:e4:45:d3:20:88:65:
                    6a:87:bd:4a:83:ab:8b:a7:93:26:16:1d:e8:a9:93:
                    b7:3e:16:cf:37:8e:ab:64:0c:d2:5a:8a:0d:c7:2a:
                    9b:de:f1:4f:2c:60:c1:71:c8:87:ac:2f:66:5a:10:
                    0f:30:b3:f2:93:ec:4d:06:4d:c8:46:a2:86:4a:4c:
                    5e:a1:fa:03:ee:6e:60:fb:84:f3:7f:76:50:f0:ec:
                    23:d1:6d:aa:3a:e9:fe:24:7f:82:6c:dc:77:06:25:
                    1f:de:ff:d9:8c:52:4d:c2:85:b9:e6:ac:bf:78:cc:
                    e9:5c:fb:db:dd:9b:fb:ef:b0:55:a5:d4:51:33:ad:
                    cb:9f:d2:97:79:c5:4c:f2:a6:2a:88:a4:14:57:5a:
                    66:b1:51:9d:24:2e:ef:c6:2e:02:c4:8e:16:9d:31:
                    cf:c2:8e:ac:6e:91:a8:b4:ef:82:3a:dc:1f:11:c7:
                    99:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9B:CC:4F:DC:82:92:80:89:F7:C1:FE:B8:EF:11:DD:BD:C3:62:1A
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:f0:f0:d4:40:07:bf:5e:54:e7:c4:ad:f9:60:dc:6d:37:
         74:f8:ad:cc:de:b7:34:e8:aa:6f:20:9f:59:71:32:eb:3f:63:
         39:64:25:28:ab:ab:f1:6f:c7:d8:1d:a0:09:e3:0b:45:ec:a5:
         ec:e3:8c:0d:a0:8c:1b:e1:29:61:08:c0:2a:ad:5e:28:02:72:
         89:c4:3a:8d:96:c1:80:32:61:e9:fc:21:a7:38:0f:45:cd:b4:
         cd:fd:95:f4:c8:33:e9:8e:3a:1f:7d:08:2a:f5:e5:81:69:bc:
         d3:ff:ff:83:55:eb:c3:f7:3b:75:90:08:e8:ae:a7:a8:16:3f:
         14:b5:37:89:79:dc:07:54:46:9f:a6:dd:8a:0d:b4:06:d3:9d:
         30:0a:62:b8:17:2e:aa:c5:92:a1:59:bb:2b:d4:8c:76:3e:c0:
         c1:e1:dc:7a:db:47:dc:f0:38:6e:b1:0e:2f:29:92:8c:cd:da:
         36:01:94:72:6f:5e:e0:c1:84:dd:89:9a:f9:66:25:d8:56:59:
         1d:87:96:88:d7:d6:cb:28:20:e8:ad:ed:c8:37:00:31:21:10:
         8f:a0:02:e5:6f:29:db:cf:87:e7:71:e6:a7:92:66:f9:74:1b:
         cc:bd:a1:b5:c8:4b:01:99:56:20:0d:a1:e5:6a:9c:ca:1a:8f:
         85:67:c0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org