Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          g4PKHZmnKpavtsuSJMsF2PYbJyBS2V/nDYQxkb5Lx0g=
Subject key identifier:   2B:B5:33:40:8F:28:85:43:5E:33:2B:86:71:E8:0F:58:ED:3A:D2:F7
Certificate issuer:       /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
Certificate serial:       45B0A6B76AC1FAC1A486FB598515917B1294B447
Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa
Signing time:             Thu 04 Jul 2024 07:00:00 +0000
ROA not before:           Thu 04 Jul 2024 06:55:00 +0000
ROA not after:            Thu 03 Jul 2025 07:00:00 +0000
asID:                     9341
IP address blocks:        103.179.73.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl
                          rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b0:a6:b7:6a:c1:fa:c1:a4:86:fb:59:85:15:91:7b:12:94:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE
        Validity
            Not Before: Jul  4 06:55:00 2024 GMT
            Not After : Jul  3 07:00:00 2025 GMT
        Subject: CN=2BB533408F2885435E332B8671E80F58ED3AD2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:1b:c4:34:d4:23:c4:b8:04:f7:cb:3c:17:
                    b2:91:dd:1d:ad:58:f2:36:31:d1:a3:63:05:74:1f:
                    c3:61:75:99:11:ad:a8:56:95:ba:7e:bc:59:db:ce:
                    79:1b:7c:64:c8:aa:dd:71:95:e8:5b:35:60:4c:bc:
                    6a:55:57:f1:4f:15:47:16:33:ef:a2:54:fc:e8:c0:
                    22:b6:38:39:46:5e:c4:55:61:d3:32:35:e3:b4:7f:
                    68:94:81:b4:a2:38:b1:ab:be:a6:53:63:25:f8:8d:
                    1e:58:d6:b5:e2:b7:e2:f5:8f:97:bf:29:8e:16:0a:
                    01:b0:d0:b1:d4:ba:b3:1d:80:bc:7a:25:d2:7d:20:
                    ac:74:ce:4e:62:11:6a:8c:40:47:20:1b:58:4d:84:
                    f2:58:92:ba:a8:6f:4f:51:4f:67:26:ce:9c:aa:83:
                    33:39:fc:b0:46:fa:41:d4:91:1e:e0:6d:e7:c6:11:
                    8b:d7:ce:88:32:da:fd:18:41:a6:80:48:f5:61:2f:
                    00:4b:8f:42:b4:b2:bc:21:d0:6d:48:4a:a2:bf:7b:
                    5b:43:b8:5a:a0:e9:da:ed:83:af:70:07:50:43:57:
                    74:9a:af:4c:ce:34:7f:2d:88:8c:de:a0:c4:26:b8:
                    3f:40:92:ca:b4:36:a8:cf:97:cc:2b:a2:e2:fd:5f:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:33:40:8F:28:85:43:5E:33:2B:86:71:E8:0F:58:ED:3A:D2:F7
            X509v3 Authority Key Identifier:
                keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:90:cb:33:2a:10:f4:39:6e:2c:f9:e3:6b:12:44:c8:11:b3:
         7b:ac:a3:29:f3:a5:93:8c:50:e9:86:ca:3d:1e:14:29:07:1d:
         d0:05:7e:19:f1:68:f6:ba:70:7f:b7:08:dc:90:d3:34:94:23:
         57:e0:78:86:ad:b1:f9:05:42:6b:7e:ab:92:1a:df:1d:0b:46:
         27:7d:d7:07:96:97:46:82:b6:b5:06:51:40:97:23:b7:f9:bc:
         d8:4c:c3:43:38:d4:ab:1c:53:c4:3e:36:68:bc:1a:7f:78:51:
         01:b9:4a:07:37:4d:2e:c6:cd:ac:50:c2:59:73:a8:a6:73:a2:
         04:68:0f:96:4a:bc:0a:6c:5e:63:e3:0b:c8:fc:0a:55:41:18:
         59:3b:b0:84:66:e2:0e:2a:be:f4:b0:be:8e:ab:5e:2d:e0:af:
         b7:b7:32:10:31:ee:61:18:1d:14:ab:40:66:89:6d:8c:94:ab:
         7d:f2:a4:c1:2e:93:a3:c7:ee:16:8d:c6:a3:1b:ea:29:17:23:
         69:09:b6:d0:02:81:8c:07:f6:58:55:c1:44:e3:0c:c8:61:83:
         9d:93:5c:3e:ae:5a:28:0f:da:39:cd:e4:89:8d:18:2d:be:ca:
         3e:94:d1:03:fc:8a:64:85:6d:9f:f6:0b:b3:25:83:72:08:11:
         5d:54:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:41 2024 by rpki-client on console-fra.rpki-client.org