Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          SNtYuT/n5y5w2JEXbdwTMHS/PJlXy054mkzA+0Jsgyg=
Subject key identifier:   7E:99:CF:C6:68:65:CB:8D:68:72:F9:87:48:60:5B:3A:8F:E2:4C:7F
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       0225A549E625E08725229BD5E5665245FB40A82C
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
Signing time:             Sun 24 Dec 2023 06:00:00 +0000
ROA not before:           Sun 24 Dec 2023 05:55:00 +0000
ROA not after:            Sun 22 Dec 2024 06:00:00 +0000
asID:                     139449
IP address blocks:        103.179.216.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
                          rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:25:a5:49:e6:25:e0:87:25:22:9b:d5:e5:66:52:45:fb:40:a8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Dec 24 05:55:00 2023 GMT
            Not After : Dec 22 06:00:00 2024 GMT
        Subject: CN=7E99CFC66865CB8D6872F98748605B3A8FE24C7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6b:20:6e:2d:55:dd:a0:bf:fa:42:35:6c:d4:
                    49:23:52:29:a3:e9:07:01:e9:eb:09:6f:7a:74:33:
                    37:8f:e2:3e:7a:7f:f8:e6:03:db:2e:3c:a6:fd:ba:
                    62:fa:3e:69:72:01:d3:ae:ce:7d:2e:a9:59:b2:28:
                    0f:7b:3d:b4:a7:ab:8d:e7:43:54:38:af:95:69:bf:
                    52:51:26:7e:30:05:90:14:6c:ae:80:e5:28:52:0f:
                    16:42:c5:09:a6:36:84:b9:50:f0:b6:10:47:e7:3c:
                    16:76:69:5c:20:fc:9d:34:2a:ce:80:84:ae:8b:7d:
                    89:d2:41:d6:05:c3:bb:c8:ac:c3:5b:f2:d1:7f:7c:
                    d0:04:fa:06:8e:4c:c9:22:a1:f5:40:23:19:75:99:
                    49:62:a9:ec:5d:41:bc:a1:35:9c:0c:a2:eb:f9:f9:
                    19:a3:8b:61:25:82:d6:19:5e:a2:bd:1e:45:90:19:
                    26:84:16:9d:15:63:8b:97:25:3c:fe:45:94:53:02:
                    e5:a5:1c:1b:56:4a:7b:b6:18:4b:ce:1a:90:c5:0f:
                    11:1d:c2:2e:f5:e4:19:cb:ef:e4:aa:10:9a:e4:5c:
                    0f:6d:e1:09:92:32:8f:ad:f2:45:84:19:4c:9f:d8:
                    c1:c6:91:d1:ca:2a:4d:ef:47:1a:07:94:45:c4:8c:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:CF:C6:68:65:CB:8D:68:72:F9:87:48:60:5B:3A:8F:E2:4C:7F
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:7d:e2:ae:21:a4:43:bf:d2:c1:fc:d6:6b:df:32:0a:ad:7b:
         89:de:1c:44:34:c3:b9:d1:59:19:68:83:87:d7:27:da:3c:1e:
         8e:4d:71:12:c9:09:ee:8a:4c:71:94:be:f9:da:f9:11:d7:45:
         de:03:03:44:e5:a5:d2:63:f4:79:ce:8d:4a:82:b8:10:a6:6c:
         05:d7:d9:11:a2:cf:71:c3:47:15:9e:37:99:6b:67:fc:86:85:
         1a:e8:c4:32:82:68:cd:e3:fe:25:50:f9:4b:2f:5b:4d:e4:8d:
         5a:0a:7c:8b:07:65:34:ca:cb:54:23:2f:ed:1c:22:b0:2c:b9:
         17:94:3d:2e:54:0e:77:91:0d:4f:75:e7:71:b0:b9:d3:f1:3e:
         41:18:77:2c:bc:91:40:29:94:03:05:92:0a:6e:67:76:29:b5:
         b3:b1:56:8e:b1:6f:a6:2e:b6:90:ab:27:a3:d3:1b:5b:bf:d0:
         9e:c0:bf:27:ab:42:7c:15:50:72:cf:df:0b:15:cb:89:a9:68:
         e3:b1:e9:25:09:e0:07:79:27:07:36:43:fc:3e:72:bf:fe:60:
         78:15:24:92:f3:a3:f9:1b:4f:61:05:f6:03:27:c2:68:d8:22:
         2a:c5:93:10:8d:f3:6e:1c:09:ca:17:95:64:17:40:a9:f4:31:
         8e:87:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:53 2024 by rpki-client on console-fra.rpki-client.org