Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
File:                     3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (raw, json)
Hash identifier:          5kFi2Zjm0HSxKxfG0nxq+nY/Xj+QjtSf1kqVqzgY+8E=
Subject key identifier:   20:32:FA:4E:E3:09:4B:DB:47:8A:33:5B:E0:98:CC:3D:1C:CA:74:0C
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       188BA493FF70DDF2B6EE335E5FB2F2B42FC432BD
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa
Signing time:             Fri 01 Nov 2024 08:00:33 +0000
ROA not before:           Fri 01 Nov 2024 07:55:33 +0000
ROA not after:            Fri 31 Oct 2025 08:00:33 +0000
asID:                     149333
IP address blocks:        103.179.26.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8b:a4:93:ff:70:dd:f2:b6:ee:33:5e:5f:b2:f2:b4:2f:c4:32:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Nov  1 07:55:33 2024 GMT
            Not After : Oct 31 08:00:33 2025 GMT
        Subject: CN=2032FA4EE3094BDB478A335BE098CC3D1CCA740C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:fc:9e:e6:9a:57:a1:21:d2:b0:45:fb:a2:
                    0e:a2:2a:59:46:95:c8:cc:c3:bb:84:2a:f7:fa:ba:
                    21:3d:0c:0f:3a:ac:3d:ae:8d:eb:c2:f5:b8:eb:f0:
                    92:5b:bb:00:c4:fb:94:cc:7f:88:7f:aa:ed:01:b9:
                    c8:fd:71:52:fb:7c:7e:ad:28:bb:fe:c1:2f:9c:04:
                    7e:f1:c5:54:9c:31:1f:c6:03:0a:2a:b8:3c:91:49:
                    18:8c:b3:1d:76:c8:ed:ae:0d:61:d8:f4:12:e9:ca:
                    8d:1c:c4:01:82:06:a7:50:f5:d5:4c:ab:71:9e:2b:
                    d5:d0:98:7c:04:f1:d9:df:8a:72:ed:f9:11:76:d1:
                    43:96:d6:98:46:08:7b:9f:28:2b:75:ee:db:c3:ba:
                    b5:6d:60:f7:4b:b1:da:db:25:43:f2:a7:fa:cf:05:
                    4a:16:f1:de:f1:84:a7:88:27:7e:eb:8c:ca:e5:66:
                    57:49:fe:4b:f5:4c:35:cc:a1:8e:4c:38:7b:e8:35:
                    ac:55:42:cd:1a:54:64:df:bb:1f:c3:c0:01:38:c1:
                    a4:8b:8d:64:47:05:63:aa:f9:6d:f2:ea:ab:61:df:
                    e3:ef:72:4e:0c:44:eb:03:c8:55:87:cf:4b:48:cc:
                    95:6e:94:66:d9:5e:91:ee:19:0e:a6:ff:73:bd:d3:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:32:FA:4E:E3:09:4B:DB:47:8A:33:5B:E0:98:CC:3D:1C:CA:74:0C
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:33:02:13:51:b1:fc:29:44:98:57:2f:ee:12:f7:0a:c6:
         26:d3:48:86:18:86:f1:15:fc:6a:be:c4:4a:22:58:d5:1d:14:
         aa:24:af:0f:39:9a:bc:06:41:f0:70:6a:82:34:ef:ce:09:75:
         7e:ba:ff:4a:83:46:47:18:bf:18:71:5e:f6:a7:f7:90:15:42:
         1c:f2:6c:15:e0:58:9c:fb:a0:04:67:2c:c3:be:22:b0:f1:e8:
         62:4e:d2:9e:b4:ba:52:a0:e8:ce:51:68:38:5a:24:8a:c1:e1:
         f8:35:8c:ed:fb:1f:74:59:c9:b4:03:13:99:82:77:54:01:56:
         fb:35:ba:9a:18:9d:56:22:d2:0c:a7:cf:02:bd:69:bb:db:7f:
         0f:76:44:7b:d1:ca:36:a1:14:a0:8c:5d:71:9e:09:04:6c:a7:
         df:0d:e6:b5:90:5a:7b:df:ec:c5:11:b9:46:cf:5f:85:5b:9c:
         c4:21:21:64:c0:bb:c6:cd:bb:b2:61:c5:4f:2f:30:e3:e5:de:
         79:20:a0:89:7f:a1:78:76:bf:4f:87:bc:a2:33:3a:56:d9:48:
         06:93:54:c6:ba:c5:9c:09:f5:e2:e4:ca:a8:5c:0b:1b:ae:1d:
         f5:64:75:49:5f:a1:3c:9c:bc:b9:8a:f0:ac:08:02:81:35:8c:
         43:85:f8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org