Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          5kf5CGKJdZ00zwNNKAFo7QoadQBzyTrYO6+fwLSFx4w=
Subject key identifier:   BE:13:15:94:63:E9:55:FE:EF:53:1E:55:A6:DC:3C:DD:24:AC:8A:9D
Certificate issuer:       /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
Certificate serial:       6E331036A222A7CC19B84D19993F3472E23B2230
Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 27 Feb 2024 09:02:02 +0000
ROA not before:           Tue 27 Feb 2024 08:57:02 +0000
ROA not after:            Tue 25 Feb 2025 09:02:02 +0000
asID:                     9341
IP address blocks:        103.180.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl
                          rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:33:10:36:a2:22:a7:cc:19:b8:4d:19:99:3f:34:72:e2:3b:22:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4
        Validity
            Not Before: Feb 27 08:57:02 2024 GMT
            Not After : Feb 25 09:02:02 2025 GMT
        Subject: CN=BE13159463E955FEEF531E55A6DC3CDD24AC8A9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:79:cb:f7:f8:6f:4a:4e:8c:5e:38:da:7c:
                    3b:d4:07:54:c5:6c:25:6f:9d:df:39:3b:1f:51:a0:
                    8c:2a:1a:1b:c6:ab:df:51:1a:82:e4:2e:f4:50:d8:
                    16:8e:c1:7b:36:9b:c3:11:b9:8d:b0:c6:0a:20:fc:
                    1a:a7:d2:7d:db:ff:18:36:fe:f9:32:91:92:ce:30:
                    0a:eb:b2:78:03:ce:ff:f0:4a:30:b9:42:8b:91:bd:
                    19:d7:c2:82:17:dc:47:61:6a:6a:09:7e:36:f2:a7:
                    f9:ef:9e:32:26:26:c7:df:57:e0:5f:a1:b7:c3:d5:
                    f7:a1:ef:fc:6d:13:3e:b0:c0:71:7e:92:66:26:b0:
                    07:dd:dd:ab:f7:aa:b0:73:e8:10:ca:b7:0b:a6:71:
                    36:ed:c2:77:87:6c:db:d2:ec:28:0f:5e:a5:99:ba:
                    2e:cb:68:b0:a0:22:6c:54:db:7b:c7:e3:40:6a:a7:
                    9e:d9:52:30:d5:4d:0e:07:0a:b6:cc:e0:b2:f1:9a:
                    29:c4:53:30:d8:ae:87:a4:74:0b:99:0c:a7:51:f3:
                    60:5c:24:8c:0f:ed:8e:54:1f:dc:c6:03:5c:7d:6c:
                    80:00:84:b9:6a:32:5f:78:0a:53:5a:90:33:93:e5:
                    71:9d:7c:d0:78:8e:a0:0b:a6:98:15:1a:d2:40:1d:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:13:15:94:63:E9:55:FE:EF:53:1E:55:A6:DC:3C:DD:24:AC:8A:9D
            X509v3 Authority Key Identifier:
                keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b3:00:b2:63:44:10:ac:fb:99:11:ec:0a:6c:2b:2a:13:7b:
         2a:c6:98:9f:eb:72:ef:ca:9b:5f:f6:1c:06:6c:42:74:3d:6d:
         f3:30:49:7a:4e:1e:42:50:4b:c5:0a:17:44:df:d7:02:bf:fc:
         ce:87:bb:47:b9:7a:73:00:81:d7:b1:a2:a2:8c:d2:f5:ea:e9:
         0a:80:e9:a4:a6:d0:7f:0e:a3:2b:33:d9:88:bb:7c:3c:f9:25:
         62:4a:ff:1a:b3:cd:9b:95:28:55:6a:2a:b6:b6:54:d1:a1:fb:
         0b:7e:27:12:73:18:cc:b1:58:70:23:99:d1:05:5f:2e:57:28:
         88:1a:f0:84:0b:3a:36:ef:95:8a:f6:23:e6:53:ea:3f:a7:02:
         1f:34:60:1b:6f:b1:24:9f:f1:c7:cc:d8:cc:af:c2:35:5b:43:
         86:6a:9b:8f:40:6d:3b:ed:96:02:f6:c9:c3:ba:b4:e9:4e:78:
         8e:00:c5:83:32:24:97:ee:a5:b6:92:4f:d8:4c:4d:e0:34:59:
         9b:15:86:94:cd:2f:c0:32:18:7d:e0:85:fb:1e:c2:02:c6:23:
         5e:94:1b:c3:49:c8:cf:8a:8d:e7:1d:8a:a5:0f:1a:34:6f:4e:
         86:f8:30:32:ce:d1:43:ab:e2:77:1c:8b:2c:5b:c4:cf:08:00:
         c4:3f:26:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:08 2024 by rpki-client on console-fra.rpki-client.org