Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          8ksM/q+y6Lni1XQrvYbOQyNFp8Q4IAzl4uPFuNiAyRE=
Subject key identifier:   6E:AB:16:10:F5:61:13:1E:5E:CF:92:EE:13:82:4B:22:89:97:89:7A
Certificate issuer:       /CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
Certificate serial:       44737CBC7D02BB4112D9041AECFFCB4C8089DD9F
Authority key identifier: 71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa
Signing time:             Sun 24 Nov 2024 06:00:00 +0000
ROA not before:           Sun 24 Nov 2024 05:55:00 +0000
ROA not after:            Sun 23 Nov 2025 06:00:00 +0000
asID:                     139449
IP address blocks:        103.179.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl
                          rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 00:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:73:7c:bc:7d:02:bb:41:12:d9:04:1a:ec:ff:cb:4c:80:89:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C1EFD5DFDE20418A49070671B01D675F9A8917
        Validity
            Not Before: Nov 24 05:55:00 2024 GMT
            Not After : Nov 23 06:00:00 2025 GMT
        Subject: CN=6EAB1610F561131E5ECF92EE13824B228997897A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:78:b4:ea:28:fc:15:6c:dc:11:e8:e6:f3:a1:
                    8a:94:33:4f:29:df:d7:a8:93:78:66:20:e2:8b:86:
                    30:c3:d5:91:fb:2b:a8:66:1e:7c:b9:19:2a:99:8f:
                    9a:2f:af:33:ea:28:c5:b0:2a:13:b5:2d:f0:c4:7f:
                    b3:48:3a:c4:8a:7e:90:65:5f:69:5e:45:96:41:7b:
                    5d:34:22:c8:30:83:d4:12:87:2a:cf:40:7a:83:f4:
                    d5:b7:97:d1:0a:97:ef:99:31:1e:0f:ab:fb:d7:db:
                    75:51:21:36:6d:36:3f:b7:69:97:63:0a:20:86:eb:
                    64:9f:48:52:e5:30:13:85:8d:9d:c8:f9:37:50:2f:
                    60:83:75:30:79:ad:69:bf:8d:d1:e2:0d:bf:9a:58:
                    60:7d:7b:73:ce:1c:86:33:cb:37:31:01:fe:bc:b2:
                    89:e4:5d:f0:e8:55:9c:49:99:14:03:34:6a:62:33:
                    fb:ae:ea:d8:6f:d2:c6:9b:73:65:f5:14:35:78:e2:
                    99:cf:ea:cb:a0:43:f8:a9:e5:af:1b:cf:03:54:7a:
                    ed:ac:d8:49:34:13:8d:d6:be:97:72:35:ec:fa:3e:
                    5f:14:92:0a:ce:ff:d7:65:77:93:a1:4e:d6:a7:e5:
                    b3:8c:e7:c5:40:17:70:3f:48:27:33:ec:f3:93:f5:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:16:10:F5:61:13:1E:5E:CF:92:EE:13:82:4B:22:89:97:89:7A
            X509v3 Authority Key Identifier:
                keyid:71:C1:EF:D5:DF:DE:20:41:8A:49:07:06:71:B0:1D:67:5F:9A:89:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/71C1EFD5DFDE20418A49070671B01D675F9A8917.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/71C1EFD5DFDE20418A49070671B01D675F9A8917.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05eab442-7480-4581-81dd-23a200614382/0/3130332e3137392e3231362e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:38:9a:1e:46:45:4a:13:d2:07:cb:10:fd:b7:02:08:ca:
         41:ab:13:41:2c:eb:1d:6a:f7:91:4d:28:81:87:42:af:ea:77:
         67:b0:9a:5a:2d:db:db:98:ca:86:50:12:a2:b9:1a:f8:d7:f3:
         14:ac:c5:8b:24:d6:a7:7a:67:43:dd:86:18:c3:13:d6:f4:e8:
         33:43:ff:d9:41:cc:82:74:08:35:92:ee:74:9d:c5:56:c4:f8:
         d9:1f:0e:fa:3d:6e:fd:f1:33:aa:ec:95:40:01:44:a0:cc:5e:
         c6:1a:14:82:0e:e5:b5:3b:ff:c1:dc:7c:14:43:65:0c:7b:54:
         b5:8c:1c:11:a0:ac:dc:f1:a2:a0:5e:13:1e:8a:5b:db:30:c2:
         a7:a0:a7:48:15:17:96:14:60:1c:67:1d:84:9b:9c:31:54:c3:
         c8:0e:45:aa:e4:b6:ef:5e:16:ba:f1:81:e3:76:86:cc:00:44:
         8f:91:4e:c8:bf:14:7e:3c:73:8e:4c:8d:39:ae:96:cf:24:d9:
         7d:f6:3d:e6:e5:ca:a6:e9:54:f6:fb:7f:7d:bb:2d:fb:02:e2:
         5d:35:68:e1:4c:db:08:82:1f:ea:f0:db:4c:88:e8:8c:45:8c:
         7d:93:e7:3b:e0:e3:f8:92:55:ed:34:dd:a4:de:2b:0b:5d:7a:
         f5:36:61:9e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURHN8vH0Cu0ES2QQa7P/LTICJ3Z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1
RjlBODkxNzAeFw0yNDExMjQwNTU1MDBaFw0yNTExMjMwNjAwMDBaMDMxMTAvBgNV
BAMTKDZFQUIxNjEwRjU2MTEzMUU1RUNGOTJFRTEzODI0QjIyODk5Nzg5N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaeLTqKPwVbNwR6ObzoYqUM08p
39eok3hmIOKLhjDD1ZH7K6hmHny5GSqZj5ovrzPqKMWwKhO1LfDEf7NIOsSKfpBl
X2leRZZBe100Isgwg9QShyrPQHqD9NW3l9EKl++ZMR4Pq/vX23VRITZtNj+3aZdj
CiCG62SfSFLlMBOFjZ3I+TdQL2CDdTB5rWm/jdHiDb+aWGB9e3POHIYzyzcxAf68
sonkXfDoVZxJmRQDNGpiM/uu6thv0sabc2X1FDV44pnP6sugQ/ip5a8bzwNUeu2s
2Ek0E43WvpdyNez6Pl8UkgrO/9dld5OhTtan5bOM58VAF3A/SCcz7POT9dvDAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbqsWEPVhEx5ez5LuE4JLIomXiXowHwYDVR0j
BBgwFoAUccHv1d/eIEGKSQcGcbAdZ1+aiRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NWVhYjQ0Mi03NDgwLTQ1ODEtODFkZC0yM2EyMDA2MTQzODIvMC83MUMxRUZENURG
REUyMDQxOEE0OTA3MDY3MUIwMUQ2NzVGOUE4OTE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzFDMUVGRDVERkRFMjA0MThBNDkwNzA2NzFCMDFENjc1RjlB
ODkxNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1ZWFiNDQyLTc0ODAtNDU4MS04
MWRkLTIzYTIwMDYxNDM4Mi8wLzMxMzAzMzJlMzEzNzM5MmUzMjMxMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFns9gwDQYJ
KoZIhvcNAQELBQADggEBAGnROJoeRkVKE9IHyxD9twIIykGrE0Es6x1q95FNKIGH
Qq/qd2ewmlot29uYyoZQEqK5GvjX8xSsxYsk1qd6Z0PdhhjDE9b06DND/9lBzIJ0
CDWS7nSdxVbE+NkfDvo9bv3xM6rslUABRKDMXsYaFIIO5bU7/8HcfBRDZQx7VLWM
HBGgrNzxoqBeEx6KW9swwqegp0gVF5YUYBxnHYSbnDFUw8gORarktu9eFrrxgeN2
hswARI+RTsi/FH48c45MjTmuls8k2X32PeblyqbpVPb7f327LfsC4l01aOFM2wiC
H+rw20yI6IxFjH2T5zvg4/iSVe003aTeKwtdevU2YZ4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:22 2025 by rpki-client