Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          KQr7FT5BTt34iZBSKfWuQXM57WNoh3bm/oXmMRuQ3Ho=
Subject key identifier:   4B:63:81:68:93:90:BF:27:45:33:2F:ED:04:DB:E8:20:AE:60:6D:33
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       76BB9C09C329EDD98D188D261E54680EC1ED25D1
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 04 Jul 2024 08:00:00 +0000
ROA not before:           Thu 04 Jul 2024 07:55:00 +0000
ROA not after:            Thu 03 Jul 2025 08:00:00 +0000
asID:                     9341
IP address blocks:        103.179.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bb:9c:09:c3:29:ed:d9:8d:18:8d:26:1e:54:68:0e:c1:ed:25:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Jul  4 07:55:00 2024 GMT
            Not After : Jul  3 08:00:00 2025 GMT
        Subject: CN=4B6381689390BF2745332FED04DBE820AE606D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:b9:d2:53:eb:c9:84:5b:d5:b9:ac:43:40:
                    0d:4a:24:15:c2:92:bc:74:93:75:0b:4b:00:37:05:
                    d5:a9:93:11:43:94:7b:93:b9:7a:30:36:ec:a4:fb:
                    cd:c6:6b:b5:8f:43:9a:3d:e8:6b:df:0d:94:c1:50:
                    3e:46:41:9c:2a:72:67:e7:15:10:bd:1c:c3:d0:73:
                    14:9a:d9:bb:ab:e5:73:8c:d5:ce:5e:4a:2e:7c:b7:
                    99:9b:1a:2d:28:5d:d9:84:08:e8:a1:c6:b2:b2:9b:
                    c7:fc:ab:22:89:03:d0:a6:ec:70:7d:d8:7a:98:92:
                    c3:a9:a5:0d:67:5e:33:17:8c:86:21:f0:f8:73:87:
                    7f:f7:f7:d3:87:16:b8:66:44:b0:4a:c0:8b:c7:7b:
                    aa:9c:12:d6:a0:8b:aa:f0:ad:e5:39:a6:ad:a3:fb:
                    23:04:81:66:01:6d:51:7d:65:89:5b:ad:f6:33:37:
                    0a:a1:c5:58:ce:43:62:60:47:3e:fd:bc:2e:4c:13:
                    1d:01:c1:26:83:63:76:69:de:94:51:4e:a9:ca:cd:
                    35:d2:b3:aa:fd:60:24:d7:52:75:a3:72:22:54:21:
                    ae:39:fa:41:80:12:39:0b:39:60:8d:47:49:c7:50:
                    a1:64:09:75:60:28:a0:1f:0f:b3:f8:db:1a:7c:09:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:81:68:93:90:BF:27:45:33:2F:ED:04:DB:E8:20:AE:60:6D:33
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:ea:75:d0:b7:c2:d0:ee:ec:89:4a:56:fc:14:08:ba:98:
         04:ef:ac:99:b6:fb:a8:ce:a3:97:55:4c:be:40:d4:4b:91:74:
         ce:39:7a:f8:4a:cc:8b:66:c0:1b:eb:fc:a3:84:3e:ec:b4:18:
         95:44:a7:5c:ba:c2:ce:69:a6:a5:47:61:42:f2:ba:1b:c8:df:
         39:12:11:ed:13:db:01:c9:5b:e6:65:0e:75:7e:84:ab:d4:bc:
         c3:82:63:b7:35:4c:86:00:8c:90:4d:78:be:1e:9e:7d:94:16:
         39:c9:70:26:94:2a:42:ce:7d:22:e9:f1:f2:94:32:a0:d1:cb:
         90:75:bc:0c:11:ed:96:69:0f:b7:4a:7a:9f:9f:61:cc:c7:c8:
         15:42:0e:fa:bc:3d:38:0a:d2:f9:6a:64:d2:ec:b0:21:88:25:
         56:b1:d7:f9:78:92:b1:64:59:27:c2:d2:f5:c7:6c:76:ce:87:
         e0:9c:00:b8:29:0c:a3:e4:8c:e8:04:9e:df:0b:83:d8:aa:77:
         2c:47:3e:31:ae:de:47:c2:54:5a:c1:6d:77:d6:68:9d:46:a8:
         68:d9:19:0c:d5:27:4a:6f:d6:d0:32:9e:64:cb:94:24:15:83:
         3d:79:0a:7b:b2:6f:02:47:0f:0c:45:b9:15:29:ed:52:3d:ae:
         6a:76:9e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org