Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          3xpIJX5oINXJUPuBkhUbqHuDByu9ZULCKQ7tzsRwqDk=
Subject key identifier:   0C:6D:AB:70:C1:2B:41:34:B4:68:13:F7:72:68:2A:0C:7C:67:5D:FF
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       742DB9B73C31100B4C59ACF5A3716D6CEF60D991
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa
Signing time:             Sat 05 Oct 2024 04:02:24 +0000
ROA not before:           Sat 05 Oct 2024 03:57:24 +0000
ROA not after:            Sat 04 Oct 2025 04:02:24 +0000
asID:                     64302
IP address blocks:        103.78.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:b9:b7:3c:31:10:0b:4c:59:ac:f5:a3:71:6d:6c:ef:60:d9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Oct  5 03:57:24 2024 GMT
            Not After : Oct  4 04:02:24 2025 GMT
        Subject: CN=0C6DAB70C12B4134B46813F772682A0C7C675DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b3:ec:e5:bc:52:1c:88:e3:4e:fd:13:27:cf:
                    79:49:14:54:2d:f8:d0:be:85:9b:38:42:be:09:df:
                    e8:ad:00:89:3c:25:51:74:49:8e:7d:17:a5:2d:0c:
                    24:ab:99:f5:90:3e:01:eb:33:82:9e:bc:2d:42:fb:
                    36:a0:58:d5:30:06:ef:4c:0b:4d:6c:10:b8:e9:bc:
                    b0:28:38:65:55:91:bc:1d:96:13:80:e8:a1:cc:d9:
                    01:35:e2:c2:7e:a8:a2:c0:4b:b0:18:7b:ad:0a:c7:
                    c3:37:4c:0b:a9:ef:a7:2f:b7:53:d2:8e:7d:c7:1c:
                    2c:b8:8a:9c:d5:a1:ff:07:3a:ce:54:65:0d:92:3a:
                    8c:f9:da:3a:e7:79:1d:97:06:66:18:88:af:11:d9:
                    fa:40:39:ad:fd:0d:27:cd:5a:e3:cd:5f:f8:1d:9a:
                    4a:bc:9e:8b:15:d2:e4:93:83:4a:b5:f1:07:f9:2f:
                    27:c7:d2:d0:bd:85:a7:a3:97:62:25:1b:b9:e3:89:
                    41:ed:a8:82:9f:b6:8e:9b:8f:21:be:1b:f5:17:ce:
                    69:6a:50:4e:bc:ac:83:f3:84:3d:ac:db:32:24:e0:
                    81:8b:a1:a1:8d:5c:d8:b9:82:89:54:b5:46:9e:64:
                    17:0c:9d:55:14:46:8a:38:ea:b4:be:f2:a3:e4:37:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6D:AB:70:C1:2B:41:34:B4:68:13:F7:72:68:2A:0C:7C:67:5D:FF
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233342e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:72:e5:1a:91:f1:86:ca:eb:8b:c7:6d:ee:b2:18:7e:61:
         93:8d:b3:f0:96:16:a8:69:11:ae:f3:ba:e9:ff:68:ca:dd:36:
         b0:46:99:35:a9:f6:84:82:77:0c:84:5d:d5:4f:e5:ac:22:10:
         20:d3:33:11:5b:a8:d7:40:4b:3c:ce:93:d0:a9:1f:55:53:94:
         7c:89:f9:6b:8f:21:7b:a7:e9:7f:00:20:b7:70:c6:3f:f1:95:
         84:59:81:80:3d:4d:5e:e5:f6:85:58:49:ea:6f:97:7c:fd:ea:
         b0:85:c5:69:6a:cb:74:cd:63:1e:6e:d2:34:00:7a:d8:0b:01:
         71:09:09:ff:b8:a5:3e:c8:13:e8:5a:01:61:f4:24:1e:4e:20:
         12:ed:f0:25:d3:19:d9:d3:ae:8d:88:52:5c:d9:75:47:c2:fe:
         13:20:4a:79:fe:3f:d6:83:89:48:70:20:6b:58:1c:72:9e:8b:
         db:54:b2:15:73:b7:06:f5:5d:00:26:fb:18:55:64:98:82:de:
         a6:c5:9c:98:c8:08:88:a6:39:51:37:4c:7d:14:45:75:fa:69:
         df:75:76:92:71:ac:32:6b:26:5d:3a:bb:77:b8:b2:09:72:a5:
         f5:71:cc:5b:7a:a9:9a:c8:de:6f:cf:80:91:07:39:5d:46:01:
         f8:52:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 10:18:22 2024 by rpki-client on console-fra.rpki-client.org