Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          33M4AKrRxuDG1r3li9VruqV6aPA7ivLQEtGmUJVChn0=
Subject key identifier:   1B:77:3D:4E:93:90:B7:09:76:9E:F0:28:A1:F7:06:4E:7B:50:85:14
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       0E00995C81301B6025CF0FB5E7B876440DF12855
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 03 Aug 2023 07:00:00 +0000
ROA not before:           Thu 03 Aug 2023 06:55:00 +0000
ROA not after:            Thu 01 Aug 2024 07:00:00 +0000
asID:                     9341
IP address blocks:        103.179.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:00:99:5c:81:30:1b:60:25:cf:0f:b5:e7:b8:76:44:0d:f1:28:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Aug  3 06:55:00 2023 GMT
            Not After : Aug  1 07:00:00 2024 GMT
        Subject: CN=1B773D4E9390B709769EF028A1F7064E7B508514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:6a:c4:39:b1:0f:22:50:79:35:4a:59:1c:
                    17:c2:60:1e:a4:6e:1c:f3:ee:d5:72:59:36:e9:43:
                    7b:31:67:8c:bd:c6:88:7e:3d:7a:c9:33:c1:6d:7a:
                    6e:a2:26:17:63:e9:04:ab:db:7b:39:7b:7b:6e:ee:
                    8c:08:0e:0b:f2:fa:b8:cc:3c:b1:c9:20:9a:1b:17:
                    e7:69:a9:42:d3:4c:e8:d3:b2:3e:06:d1:89:83:07:
                    fb:81:c2:6f:d3:6a:8a:14:73:86:5f:c2:1e:b8:33:
                    be:f5:1f:b5:9c:d4:79:1c:1d:5c:d4:fb:6c:b0:17:
                    90:3a:d2:e8:7e:d0:7b:9c:af:3e:75:db:66:12:b5:
                    7e:7a:c5:12:4e:7d:9e:7b:6e:ff:31:a0:f2:22:c4:
                    09:a5:20:11:02:92:9b:17:64:6d:91:b2:11:b8:b9:
                    68:c1:7e:1e:ca:ff:9d:7f:78:fd:c0:6c:ee:29:a8:
                    70:49:b6:ae:79:0d:3f:64:9b:fe:08:4f:b2:4a:28:
                    46:0d:82:e3:fd:8e:ba:26:54:4c:fe:82:bc:d7:da:
                    6e:95:f5:9f:ce:09:7b:1e:7c:52:99:2e:9e:ce:d4:
                    7a:65:2f:1a:91:d7:63:42:17:cd:94:6f:7f:e4:d8:
                    78:ed:8b:b8:f4:2b:45:5e:62:77:64:6f:65:19:ec:
                    13:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:77:3D:4E:93:90:B7:09:76:9E:F0:28:A1:F7:06:4E:7B:50:85:14
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:50:49:c8:9a:e0:d0:85:39:ed:87:8f:21:10:cc:36:40:e0:
         2e:d4:6f:f1:a6:1c:41:19:12:57:85:b2:4b:37:87:21:86:95:
         e3:aa:4c:5f:4c:03:62:59:70:ba:7d:80:86:fb:86:e9:53:c7:
         b6:47:be:8a:bd:92:38:d3:e5:e7:8a:98:c0:6d:04:09:83:cd:
         ab:81:b6:be:a0:ce:ae:47:cf:46:1d:96:60:22:e5:ed:a2:e2:
         3d:97:95:55:49:eb:ca:ba:ca:6e:14:f6:9e:72:86:77:92:77:
         d6:39:1f:1b:f1:bc:81:24:17:6b:f3:9b:11:51:6e:31:5f:48:
         23:93:1d:03:a1:fb:08:d7:4d:3b:a4:a0:24:1f:6a:ba:c8:79:
         93:20:54:22:d3:1d:5b:aa:35:a1:7e:21:38:ac:e7:89:a5:87:
         50:c2:18:ab:91:bc:b7:be:1e:0b:2b:c4:88:17:bb:db:f2:1f:
         2b:0e:b7:50:14:70:79:f6:a1:f0:7c:ef:6d:6d:fc:22:37:6a:
         99:d1:86:4d:e9:6b:4c:02:bf:96:ac:af:d5:2b:84:03:f5:58:
         c4:29:dd:17:5e:56:ac:03:45:ae:ad:7a:74:5e:c6:23:20:df:
         0c:b8:f4:a4:b2:9a:77:cd:33:f5:d8:dc:90:d3:d4:5a:a2:a2:
         e6:f1:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org