Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
File:                     3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (raw, json)
Hash identifier:          3bNEKZyFof8GShIAzYncYW93j2k38jfEN9GmffkQaPs=
Subject key identifier:   78:B6:D3:F1:4F:4A:CD:A7:B0:17:0C:70:73:E9:8B:87:14:C8:20:0F
Certificate issuer:       /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Certificate serial:       3ADFD669111A77393FC9743C450F5772CA7D2A0B
Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
Signing time:             Sun 26 Nov 2023 15:00:00 +0000
ROA not before:           Sun 26 Nov 2023 14:55:00 +0000
ROA not after:            Sun 24 Nov 2024 15:00:00 +0000
asID:                     149342
IP address blocks:        103.179.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl
                          rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:df:d6:69:11:1a:77:39:3f:c9:74:3c:45:0f:57:72:ca:7d:2a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
        Validity
            Not Before: Nov 26 14:55:00 2023 GMT
            Not After : Nov 24 15:00:00 2024 GMT
        Subject: CN=78B6D3F14F4ACDA7B0170C7073E98B8714C8200F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:76:23:34:c2:b8:ff:59:f9:09:a7:76:cc:
                    b2:58:c1:e6:5e:2a:d7:9e:d5:b2:5f:ce:3b:4a:ef:
                    0c:6f:c9:1f:9c:41:c3:88:7b:09:17:8f:11:16:a3:
                    96:9d:f3:e1:12:8e:bc:fe:6e:ad:33:10:8e:4b:cd:
                    f6:89:f2:76:a1:f5:a7:30:bc:66:68:b0:bd:6c:46:
                    23:f1:8f:1c:9e:4b:c9:a3:77:07:c5:a2:b5:5e:0f:
                    c2:5a:74:65:b9:c6:3b:42:7f:7b:13:56:7c:84:a2:
                    20:8f:f6:f0:a1:da:bc:7c:38:b7:91:1b:00:8f:53:
                    a9:52:2c:d4:08:c9:5f:46:d4:63:2b:32:e6:9f:dc:
                    ce:cf:35:bf:81:79:b0:cb:18:53:45:06:4d:21:b4:
                    8d:7c:1a:1e:34:a5:2d:83:36:08:b7:b1:f9:dc:e8:
                    24:93:2e:1a:e0:8a:ab:c0:5a:72:bd:c5:9f:56:88:
                    3a:d1:b8:c0:e5:aa:49:b6:0b:66:27:b2:b2:6b:1c:
                    17:33:e4:04:a1:d5:24:11:a9:d7:88:bb:35:1f:fd:
                    ae:b5:4e:69:d4:ec:84:d6:d5:1a:52:23:57:78:d2:
                    11:e1:8b:14:0e:38:c9:b5:45:55:c5:b7:7a:e7:5a:
                    bc:e7:0d:48:20:87:ec:e3:c6:10:aa:7c:a8:58:5c:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:D3:F1:4F:4A:CD:A7:B0:17:0C:70:73:E9:8B:87:14:C8:20:0F
            X509v3 Authority Key Identifier:
                keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:3b:3d:64:5b:0a:51:b8:d2:77:f4:04:c6:e4:b4:bc:a5:
         7f:51:ba:e6:2c:59:05:d5:f7:97:1b:98:ca:8d:33:f8:ed:04:
         3b:39:a8:93:bd:bf:2c:56:28:f9:b2:71:f3:dc:e7:a0:c7:21:
         f5:ed:55:e5:38:18:66:5a:50:ff:0d:02:55:79:d9:76:49:7c:
         0c:b9:11:46:77:b7:29:00:b1:c9:98:de:bb:1b:7e:4b:66:69:
         d3:8b:42:f8:47:18:dd:36:20:75:56:62:1a:33:0d:c8:8c:89:
         ce:9c:9b:18:7b:5a:27:35:88:d3:14:68:b5:13:d8:b6:d0:81:
         a0:24:37:5e:c1:6e:2f:c8:f4:96:01:83:8b:14:dd:bc:79:c1:
         df:9f:95:60:d6:23:ad:be:88:aa:e2:86:df:19:a0:18:8d:6a:
         e7:64:fc:34:c0:e2:23:67:6b:94:80:ce:9a:69:00:bb:53:72:
         2a:a3:05:68:d6:8d:13:0f:1a:3c:35:75:31:6e:0a:65:6a:da:
         b7:c8:bf:0a:ee:47:06:5e:1c:de:05:75:ad:ac:4d:31:89:b0:
         e9:ea:96:df:ab:41:78:7f:4e:8c:bc:5f:7d:04:bb:0f:92:82:
         f6:c8:5d:88:3a:4b:cb:ff:69:30:7a:b5:2a:6a:99:88:44:f8:
         e9:4b:7b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:28 2024 by rpki-client on console-fra.rpki-client.org