Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
File:                     3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa (raw, json)
Hash identifier:          WzQyswXSwMjXUbCDUIIF0PkevxcLaE+CYPcmOj6X+is=
Subject key identifier:   9A:08:35:33:B8:8B:73:AE:F2:7C:9A:34:73:FE:C4:72:F6:86:EF:47
Certificate issuer:       /CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
Certificate serial:       14DC3766585F0BE87B9E070B9877C613FA52224D
Authority key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa
Signing time:             Sun 27 Oct 2024 15:00:00 +0000
ROA not before:           Sun 27 Oct 2024 14:55:00 +0000
ROA not after:            Sun 26 Oct 2025 15:00:00 +0000
asID:                     149342
IP address blocks:        103.179.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl
                          rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:dc:37:66:58:5f:0b:e8:7b:9e:07:0b:98:77:c6:13:fa:52:22:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD
        Validity
            Not Before: Oct 27 14:55:00 2024 GMT
            Not After : Oct 26 15:00:00 2025 GMT
        Subject: CN=9A083533B88B73AEF27C9A3473FEC472F686EF47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:2e:67:9f:48:c3:93:95:cb:63:2b:a1:b0:
                    3a:8e:de:3f:b7:89:bb:12:b1:f8:7c:30:35:86:1e:
                    9a:bf:89:bd:b3:d8:e0:05:39:07:0f:88:71:0f:5a:
                    22:98:ef:71:00:ed:e7:cb:ef:83:f5:4f:c4:70:1d:
                    e9:1c:90:04:5d:57:78:fb:86:cf:39:06:e0:b9:d0:
                    03:81:2f:f0:73:57:f9:fb:ab:f6:e0:7e:b4:2d:f7:
                    0e:68:a0:d1:6c:44:79:63:01:64:da:8c:f8:9d:83:
                    01:3d:20:f8:a4:71:4f:2b:dd:9a:b0:ba:bc:32:12:
                    58:0f:6a:cc:25:d1:ed:c6:ec:57:da:f8:04:c1:b2:
                    94:23:6f:82:aa:31:20:8f:4b:7d:f8:85:27:b6:df:
                    2a:43:de:f2:e4:06:fb:ec:ba:91:c9:ea:ac:2d:92:
                    57:3c:31:cf:3a:ce:96:d1:f8:bd:3b:0a:51:e7:0b:
                    e6:b6:c6:84:5a:44:70:7c:e8:0c:0d:0d:ac:7a:e1:
                    c8:27:a3:06:73:73:64:1d:f8:f8:32:ba:6b:fc:88:
                    be:47:21:82:49:b3:03:bd:cb:ab:f0:ba:f0:74:de:
                    15:ab:01:bb:1e:ba:47:85:ac:c4:0d:e1:39:76:88:
                    59:14:61:a2:82:cb:50:91:95:0a:ba:c7:4e:b5:5a:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:08:35:33:B8:8B:73:AE:F2:7C:9A:34:73:FE:C4:72:F6:86:EF:47
            X509v3 Authority Key Identifier:
                keyid:73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/3130332e3137392e38392e302f32342d3234203d3e20313439333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:74:e9:db:00:5c:02:59:e2:1d:04:cf:f4:cb:7a:49:54:a8:
         f6:ca:d8:36:1a:d8:c2:56:fc:5d:ff:95:a9:a1:b4:db:f6:70:
         03:96:d5:6f:ee:d9:dc:f7:a5:8c:ba:ef:b9:7b:f2:1c:06:d1:
         8d:aa:17:2f:d5:64:10:02:4c:b3:58:33:5c:84:55:12:3d:68:
         d5:ea:48:72:94:f7:84:c5:30:88:1d:ab:63:ca:fc:4c:52:33:
         6d:3d:c8:f9:62:1d:a5:b6:2e:bb:23:42:9d:7b:53:fd:90:af:
         4a:23:c9:22:61:ec:c4:66:e0:93:da:0b:e7:a2:c9:54:aa:10:
         dc:f6:44:34:df:62:98:7d:6b:ae:18:e1:3f:32:cf:33:52:09:
         e0:a6:e3:41:6c:a1:4e:5f:42:1c:5c:99:65:45:20:a3:cc:d1:
         d2:03:b8:76:81:bc:05:c7:eb:39:6a:bb:10:03:4c:27:d5:c7:
         2c:8d:86:fb:43:99:27:9a:92:9a:2e:8f:f9:2f:16:2f:51:6e:
         02:fa:df:12:ff:5c:d0:1c:9e:7d:02:f8:42:17:86:51:36:1e:
         ab:45:82:56:b5:57:d6:09:cd:63:d6:ba:d0:f0:83:bc:cb:3a:
         c1:e4:50:12:c3:cd:18:08:62:8b:47:21:47:ad:e7:48:61:ae:
         71:d8:48:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org