Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
File:                     3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (raw, json)
Hash identifier:          4Frv4b0FeQva7zWj/csKzadh7w8z0KSzCmC9G167IFY=
Subject key identifier:   29:03:EA:C4:BA:08:D5:21:68:8B:B0:34:54:51:70:F1:95:FA:20:9B
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       66930B8611BA103005AB2CF9071259254176977D
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
Signing time:             Fri 01 Dec 2023 08:00:02 +0000
ROA not before:           Fri 01 Dec 2023 07:55:02 +0000
ROA not after:            Fri 29 Nov 2024 08:00:02 +0000
asID:                     149333
IP address blocks:        103.179.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:93:0b:86:11:ba:10:30:05:ab:2c:f9:07:12:59:25:41:76:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Dec  1 07:55:02 2023 GMT
            Not After : Nov 29 08:00:02 2024 GMT
        Subject: CN=2903EAC4BA08D521688BB034545170F195FA209B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:26:2d:c1:79:7e:86:7f:0d:66:c0:ad:81:8e:
                    0f:10:45:63:1a:6d:72:9b:07:71:6b:15:d1:ed:95:
                    2a:eb:7e:4a:9e:39:e8:1d:46:ad:e9:fd:30:e3:70:
                    54:b6:4a:b3:e6:40:25:b0:57:4c:d0:13:23:39:b6:
                    dc:45:c6:bf:9d:cd:80:6d:50:8f:70:1f:af:91:f3:
                    f7:5f:cc:3c:31:89:06:12:55:da:ed:c7:0b:b3:ca:
                    ca:5d:b1:57:90:4d:27:8b:49:6a:f5:4a:7c:2f:89:
                    18:fb:58:76:6a:43:30:62:dc:1e:b4:de:85:43:16:
                    1c:3e:45:3e:ef:45:2f:96:12:88:ea:58:b4:23:6f:
                    97:ae:42:ed:da:ff:a5:35:77:1c:88:78:46:26:fe:
                    bb:26:44:0c:31:89:38:fe:3f:d7:b7:b7:af:95:75:
                    74:b7:9a:0d:47:50:cf:3c:0d:f2:b3:f4:4b:ea:96:
                    a0:bf:7d:7d:c4:e1:34:15:c8:d7:db:37:9c:44:8c:
                    6e:65:69:96:eb:38:2b:ca:96:54:ea:4b:88:43:62:
                    ca:d6:09:ff:bf:ed:cc:21:e7:a6:e8:23:a9:f3:7f:
                    5e:77:ed:d0:0e:a7:73:2a:78:03:a2:54:d6:6f:f1:
                    a8:4e:2c:54:57:70:05:7f:d5:d6:f6:f4:dc:98:61:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:EA:C4:BA:08:D5:21:68:8B:B0:34:54:51:70:F1:95:FA:20:9B
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:e1:ef:70:de:3b:c6:d5:33:08:39:f2:b4:fb:2d:01:f9:27:
         12:51:53:47:be:89:3e:c8:b0:47:71:19:c8:c6:2b:38:3f:3c:
         ea:1b:9e:3b:ff:95:71:a9:83:36:fa:32:95:c7:40:6b:8a:0c:
         0f:f1:dd:4f:56:9c:ef:8f:11:c0:3f:62:e5:c2:e3:09:ec:04:
         e9:4d:aa:ca:92:4e:48:e8:c6:0a:fb:76:60:45:4e:5d:67:22:
         26:e8:2b:a0:fb:67:21:ad:27:a0:67:27:82:57:12:15:a8:ce:
         8e:9c:78:6f:bd:ed:5e:aa:9c:81:8e:fe:1d:06:e1:cf:00:9a:
         56:24:c6:cc:80:03:59:84:3f:18:66:c2:96:36:ef:aa:34:e2:
         45:5c:54:62:ab:1c:37:69:e4:0c:d7:d3:fe:b7:88:75:97:d8:
         92:c3:31:17:1f:c2:6e:af:7c:47:9b:38:71:8d:7e:3e:13:e8:
         d4:46:b7:3b:da:e3:2a:c7:07:dd:c1:10:6b:ed:ee:9c:94:7b:
         17:5f:f5:ee:76:d0:38:9b:50:57:ab:7d:c4:bc:4c:96:88:e7:
         5a:4a:6e:fe:72:8d:ff:38:8a:f6:ee:fd:a8:f1:e0:65:98:ca:
         52:a4:37:97:dc:68:b5:90:52:52:33:8a:c9:52:5d:bf:6f:0f:
         35:98:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:52:38 2024 by rpki-client on console-ams.rpki-client.org