Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          oEGvz5ekNRTmyT1q5mWcENYutpVCXsuKwR/aZOFrdsI=
Subject key identifier:   23:35:14:E3:AD:C1:00:E5:F7:91:A1:FA:DF:D5:F4:D4:B7:88:1A:7B
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       57DFCD65A636C0347408467F9941109563A3FCAB
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa
Signing time:             Thu 04 Jul 2024 08:00:00 +0000
ROA not before:           Thu 04 Jul 2024 07:55:00 +0000
ROA not after:            Thu 03 Jul 2025 08:00:00 +0000
asID:                     9341
IP address blocks:        103.179.72.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:cd:65:a6:36:c0:34:74:08:46:7f:99:41:10:95:63:a3:fc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Jul  4 07:55:00 2024 GMT
            Not After : Jul  3 08:00:00 2025 GMT
        Subject: CN=233514E3ADC100E5F791A1FADFD5F4D4B7881A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:90:35:54:33:13:f7:4c:d1:d3:88:a0:53:
                    00:eb:f3:d3:76:0e:62:07:51:96:50:6d:e4:c2:0e:
                    5b:51:6b:29:64:d4:ce:0b:2d:c8:d1:d3:6a:43:6f:
                    c8:af:3b:fa:ce:4b:14:1f:9a:71:2a:ea:a5:8f:46:
                    0f:35:6e:83:7c:9c:f1:c2:71:aa:65:5b:13:07:20:
                    13:8c:a4:99:ff:0c:14:39:f1:34:d2:b8:a4:3e:cf:
                    4c:4c:f6:a9:cb:39:62:27:b2:f6:04:94:41:68:92:
                    ae:aa:8e:12:ba:b2:4c:a0:44:de:0e:ed:0f:e2:a1:
                    03:10:a9:e0:41:4d:25:5a:47:bd:ce:33:e3:e4:08:
                    dd:d4:9c:94:2d:44:7b:ed:75:cb:4d:1a:98:bf:a5:
                    01:f9:be:1c:a5:a5:d9:c5:e3:cb:0b:b9:ff:88:21:
                    1d:08:08:f1:8a:1b:30:35:ab:6d:e4:78:23:f0:c5:
                    11:92:b3:07:90:cc:e4:94:95:f4:98:18:95:05:01:
                    10:2a:39:54:45:f3:9c:9b:db:99:11:11:e8:96:29:
                    11:b6:a2:af:1c:4c:90:24:44:af:79:b5:70:40:1d:
                    69:df:d5:ee:24:f5:67:b0:cc:34:2a:97:69:1e:8b:
                    b9:88:94:9b:5c:a5:5a:a6:4a:f7:b5:b7:85:84:ba:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:35:14:E3:AD:C1:00:E5:F7:91:A1:FA:DF:D5:F4:D4:B7:88:1A:7B
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:e3:1b:bb:02:96:7f:63:fe:1b:11:32:14:25:d9:aa:d8:
         15:42:c6:4b:42:e7:34:74:0a:f8:54:49:bc:58:4b:3c:85:e5:
         70:3c:4f:0e:57:97:65:31:16:0f:ac:0f:a1:0d:4f:82:d1:4d:
         15:c9:81:3a:6a:e7:82:93:63:80:86:e4:6e:87:cf:6a:6a:ac:
         66:e8:e6:91:6a:4e:89:71:7e:5d:c6:00:7d:1c:de:09:86:1b:
         d7:a5:6f:a4:2e:63:43:f8:52:a3:98:cc:63:a8:9f:15:0a:d0:
         d7:fa:82:d8:60:4b:93:a8:c3:69:81:d6:09:0e:83:00:49:a1:
         ca:f9:b4:16:99:1f:27:69:8b:d3:e7:16:70:b0:ec:48:e4:0d:
         e8:ff:cf:21:31:66:6f:03:3a:17:e6:74:c2:57:7a:ac:28:e0:
         a6:8b:88:ca:7a:33:35:56:94:ec:28:36:2e:5f:d3:a8:ca:76:
         89:3c:9d:6d:30:d1:be:98:aa:11:15:c1:9d:12:0a:b6:25:e0:
         f3:4f:9d:41:7c:5f:24:dc:f8:af:b4:a3:8e:96:bb:10:14:85:
         7d:61:70:1b:8d:e4:1e:77:f3:23:bc:19:16:2f:71:b3:1e:55:
         bf:cb:f0:ce:e7:87:aa:60:17:b6:de:5b:f6:6b:02:25:23:3b:
         28:f6:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org