Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
File:                     3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa (raw, json)
Hash identifier:          Lkf5GtqCgpM0afLQQBUVM3+/AVTbtZLezFPI9dw/EXw=
Subject key identifier:   AC:8C:27:F0:91:26:87:9B:FA:C3:BF:74:8B:5C:9B:D9:DE:77:44:01
Certificate issuer:       /CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
Certificate serial:       0542CEB7FB25834771C523901330B9B4537E602E
Authority key identifier: EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa
Signing time:             Sat 15 Jun 2024 08:08:42 +0000
ROA not before:           Sat 15 Jun 2024 08:03:42 +0000
ROA not after:            Sat 14 Jun 2025 08:08:42 +0000
asID:                     149379
IP address blocks:        103.181.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl
                          rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:42:ce:b7:fb:25:83:47:71:c5:23:90:13:30:b9:b4:53:7e:60:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC973BE13EF324E7D59046CF7690A12F9DF12932
        Validity
            Not Before: Jun 15 08:03:42 2024 GMT
            Not After : Jun 14 08:08:42 2025 GMT
        Subject: CN=AC8C27F09126879BFAC3BF748B5C9BD9DE774401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:fd:1e:3b:aa:a9:4b:ba:3f:a8:67:47:ce:
                    23:ff:1c:8d:a8:fd:00:fc:1e:85:84:38:f8:9f:bd:
                    ae:89:73:48:64:da:d8:4b:28:6d:f9:ce:51:2d:06:
                    38:aa:3b:1f:a2:ab:e5:6b:1f:3c:a5:a6:11:b6:48:
                    35:18:21:70:aa:30:2b:7e:29:28:ba:d9:43:42:68:
                    89:41:1f:c3:63:a0:7d:7a:ea:fc:14:8a:94:70:6e:
                    1f:f0:10:2f:f4:36:81:36:d9:89:d0:88:d2:68:3b:
                    3a:a9:14:d8:a1:c0:50:48:d1:40:87:72:70:96:97:
                    ff:4b:0b:07:ac:a7:3c:27:f5:76:5a:cb:49:a2:78:
                    da:13:43:1b:29:93:e7:17:90:0c:2a:57:53:4b:6c:
                    88:d6:e4:4e:40:11:86:48:1f:95:a6:38:ca:e6:1c:
                    0e:9e:aa:9c:63:02:2d:4f:ac:11:81:91:b3:95:89:
                    35:b7:8e:27:f1:f9:80:39:db:6f:e0:f9:d9:a7:d6:
                    65:80:71:73:1a:e4:e8:4f:af:ba:89:4d:89:4e:b3:
                    fc:2b:8e:e6:72:a3:42:8d:00:b2:b0:c0:b6:4c:c7:
                    d2:e9:62:4c:24:db:c5:41:5b:01:c8:f0:d4:02:79:
                    18:dc:fb:e8:28:d3:dc:fe:1f:c3:60:95:17:68:2b:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:27:F0:91:26:87:9B:FA:C3:BF:74:8B:5C:9B:D9:DE:77:44:01
            X509v3 Authority Key Identifier:
                keyid:EC:97:3B:E1:3E:F3:24:E7:D5:90:46:CF:76:90:A1:2F:9D:F1:29:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/EC973BE13EF324E7D59046CF7690A12F9DF12932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EC973BE13EF324E7D59046CF7690A12F9DF12932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe1cbd79-8f26-4b0e-8b3b-ab9e9938fcae/0/3130332e3138312e37362e302f32342d3234203d3e20313439333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:23:5d:94:15:49:1f:4d:1b:31:01:25:20:a3:e4:01:bf:
         20:3b:04:ba:4a:3a:30:f2:55:b3:bd:62:72:c8:f2:a9:4a:df:
         9e:b5:ab:8d:3e:28:05:9d:e7:24:ad:9e:dd:b7:f4:b5:ed:3e:
         a5:46:db:e6:34:21:bf:66:2b:d4:ae:68:4c:82:d0:05:e0:98:
         2e:02:00:7c:d8:12:97:02:ed:67:66:e6:e8:66:db:45:b6:61:
         04:95:7c:c1:b9:00:4a:54:e2:34:7f:81:d7:4a:64:83:28:19:
         82:a6:0f:3b:09:56:de:8c:56:1a:47:af:b5:1b:89:75:3b:39:
         b5:9b:80:73:9a:37:07:c5:48:71:48:7a:f2:7b:66:04:5d:0f:
         30:a5:01:3c:ad:fb:55:44:20:e3:0a:c4:a4:df:c7:d0:f0:e7:
         ed:8e:69:f2:89:52:c5:34:ae:e8:49:e6:2c:4a:ba:83:8d:e3:
         a7:3f:a6:a5:d7:29:46:0b:f5:e6:a8:7e:e6:bc:f1:1f:59:2c:
         80:55:a0:58:89:e0:27:d4:9a:08:4d:ba:0c:39:12:f9:4b:66:
         d5:d4:01:b7:bc:f7:f4:e5:ef:e0:bd:49:8e:27:67:d5:37:0d:
         10:56:fa:91:ac:be:83:91:42:ee:4b:94:d0:77:67:17:3e:d2:
         fd:e9:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 21:51:29 2024 by rpki-client on console-fra.rpki-client.org