Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233352e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          NbBYk657nhFcWyfIb4SK1Hr5N01903qmNQrNmHuRDKc=
Subject key identifier:   FF:03:D6:B9:1A:5D:A9:CF:F5:1C:3E:32:2B:11:4C:EF:F1:AD:AA:30
Certificate issuer:       /CN=9F1E176A521C3CEFE1D787F898211547A2D65955
Certificate serial:       6C30E1060A93E9CB1E816117F8B9BE8AF48EE3C5
Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233352e302f32342d3234203d3e203634333032.roa
Signing time:             Sat 05 Oct 2024 04:02:25 +0000
ROA not before:           Sat 05 Oct 2024 03:57:25 +0000
ROA not after:            Sat 04 Oct 2025 04:02:25 +0000
asID:                     64302
IP address blocks:        103.78.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl
                          rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:30:e1:06:0a:93:e9:cb:1e:81:61:17:f8:b9:be:8a:f4:8e:e3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955
        Validity
            Not Before: Oct  5 03:57:25 2024 GMT
            Not After : Oct  4 04:02:25 2025 GMT
        Subject: CN=FF03D6B91A5DA9CFF51C3E322B114CEFF1ADAA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:b3:d2:69:63:68:81:0e:54:23:bd:f1:4c:
                    96:fc:3f:13:ba:30:95:de:73:0e:99:0c:75:7f:2f:
                    51:ee:e1:a4:4d:88:7b:01:89:a7:06:3b:54:25:f1:
                    ac:58:03:d8:95:90:93:08:86:5b:0b:4e:8c:0d:e3:
                    e4:4d:c1:bb:39:c8:a9:8d:7d:73:fa:68:6b:c5:c6:
                    69:a3:28:f6:9c:f1:6e:b0:95:2b:36:2d:ab:a1:1c:
                    96:a7:c1:a5:91:eb:18:bd:a3:90:64:55:d0:4f:28:
                    8a:5e:10:91:3b:26:be:99:4f:5a:0d:11:42:38:95:
                    bc:50:d0:7c:56:b8:0d:16:f8:92:ab:36:18:62:32:
                    00:b8:32:18:1d:53:ed:69:2c:b4:e6:1f:89:3f:39:
                    96:92:0f:bc:f1:b4:84:61:77:bc:7c:47:8e:05:72:
                    34:ef:e6:20:35:29:e1:80:f7:59:44:ae:c4:2a:39:
                    5b:58:60:ea:b5:9b:5d:69:74:7a:c4:5b:83:ab:2d:
                    cb:37:76:2a:c6:55:ae:0d:5c:11:83:83:38:23:4b:
                    b2:e0:3f:41:56:a7:9a:4d:44:1d:a4:c7:3e:4b:39:
                    24:3d:d8:55:46:78:62:09:0e:3a:ba:8c:6c:79:19:
                    65:f1:11:88:4e:be:b6:a2:c2:89:70:9b:42:1f:f5:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:03:D6:B9:1A:5D:A9:CF:F5:1C:3E:32:2B:11:4C:EF:F1:AD:AA:30
            X509v3 Authority Key Identifier:
                keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233352e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:e8:60:88:ad:a8:ae:e3:ce:40:f0:01:c1:31:b0:2e:aa:
         1f:03:8d:4f:c7:6e:09:20:67:b1:58:87:24:49:2e:5f:21:47:
         ad:42:6a:63:c7:80:29:12:f2:3d:07:69:27:b3:4c:19:13:e2:
         f2:57:8c:6c:75:6a:af:f9:14:f4:42:b4:03:84:1b:1b:3c:9e:
         33:a4:4d:7a:74:56:3a:2e:81:fa:a1:62:f1:c9:ac:ea:94:99:
         04:45:43:b5:ec:12:89:26:a1:b6:c1:3c:49:74:dd:a7:90:af:
         1e:44:05:05:0d:36:b3:19:a8:e7:a1:b0:d3:c6:af:bf:b3:b4:
         6b:99:bb:06:a0:ae:a0:aa:22:9d:a6:78:18:bb:7c:b2:5e:fb:
         4f:0a:71:52:dd:ec:58:ae:9f:a0:99:ce:6d:75:bf:b5:c2:20:
         f0:9d:2a:db:e5:c7:57:db:ed:d3:85:9e:6e:83:6c:15:59:32:
         d0:be:08:a4:4f:bc:a0:5c:7a:40:f0:20:38:e8:aa:43:f1:4a:
         1e:0b:c1:8e:67:6b:69:97:d4:1c:fe:8e:89:86:8a:f6:a8:6d:
         85:5b:5e:6b:af:bb:63:a6:9c:45:43:c6:7d:67:40:bc:49:4c:
         94:da:69:af:c0:13:44:36:8c:43:60:7e:72:38:82:b7:9f:b5:
         82:0d:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org