Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa
File:                     3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (raw, json)
Hash identifier:          6RmwxCOBsekmMUVSpZ16YquAdw89i0Ul307jUWjjc+w=
Subject key identifier:   10:6A:78:EE:9C:0A:16:82:11:29:B3:13:4D:D0:A5:55:78:37:6C:CE
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       561706A07DF770ABDBC529D19900EC4B0F5F2012
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa
Signing time:             Fri 01 Dec 2023 08:00:02 +0000
ROA not before:           Fri 01 Dec 2023 07:55:02 +0000
ROA not after:            Fri 29 Nov 2024 08:00:02 +0000
asID:                     149333
IP address blocks:        103.179.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:17:06:a0:7d:f7:70:ab:db:c5:29:d1:99:00:ec:4b:0f:5f:20:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Dec  1 07:55:02 2023 GMT
            Not After : Nov 29 08:00:02 2024 GMT
        Subject: CN=106A78EE9C0A16821129B3134DD0A55578376CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:96:d1:78:29:3b:73:56:c2:2d:ed:be:5b:
                    93:3b:f1:e4:00:87:12:73:3d:48:d8:bc:81:da:89:
                    8c:50:a2:e0:22:60:1a:31:db:54:cf:05:4f:4f:c4:
                    e7:73:46:8d:0e:07:3c:fc:7d:28:9f:97:b3:49:8d:
                    90:70:eb:41:a9:28:9e:ee:60:11:4e:5c:35:e0:a9:
                    8f:ef:e0:fe:25:2e:56:e3:2f:74:88:db:c0:f5:d2:
                    24:5d:da:aa:a3:67:5f:6e:e4:96:93:ec:78:fe:34:
                    aa:38:96:c8:53:c0:15:92:b9:d7:99:75:8c:ba:a2:
                    ae:57:7c:94:97:36:fa:f5:14:fb:38:89:7a:26:02:
                    00:23:f2:9c:5a:90:12:b0:b2:20:36:ac:7a:97:bb:
                    86:54:ac:5a:c4:59:16:14:0e:3a:ab:c0:50:73:88:
                    a9:8e:c8:b6:8a:88:b6:db:87:f4:ee:8b:87:85:23:
                    f7:b5:23:4a:eb:8a:10:db:3b:a0:b8:91:13:7c:d0:
                    f6:ab:36:b9:ca:79:4b:64:a7:f6:c6:52:79:46:ac:
                    e4:5f:8f:da:e4:da:77:de:8d:75:22:f5:e6:86:50:
                    42:50:a0:96:ce:9b:cd:43:30:a4:65:a8:5e:65:df:
                    da:cd:38:83:1f:9f:48:df:0f:db:df:c0:0e:6f:ec:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6A:78:EE:9C:0A:16:82:11:29:B3:13:4D:D0:A5:55:78:37:6C:CE
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:af:9c:d9:fa:46:bb:5d:94:fe:6e:6f:53:6a:80:3f:89:2f:
         83:8f:1e:36:16:9b:5d:0d:e4:df:ff:07:24:8d:4d:4a:69:e3:
         e6:e5:5b:83:9c:f5:1e:72:21:bb:25:3f:ce:2a:0f:e9:1b:bf:
         8e:4a:be:59:ee:45:fe:b2:72:b0:34:11:3e:ae:b0:f0:3c:95:
         e5:8e:2e:1a:66:64:11:13:a1:6b:ee:ad:6b:05:64:fe:6c:bd:
         da:4a:6c:63:a2:9b:61:96:01:34:ef:40:6f:fb:cc:4a:ac:96:
         be:f7:45:7f:a4:0e:c9:94:58:d9:0a:ee:aa:98:b0:e9:8a:55:
         2a:e3:a1:3d:90:de:be:de:0e:5b:01:4b:76:f6:55:99:b3:5b:
         90:4b:49:1d:da:ba:0d:05:27:2c:a7:ec:0c:e2:05:2b:61:d1:
         1a:6d:9b:82:c2:80:50:11:68:4a:c0:b5:34:8a:2e:a2:e1:ba:
         9c:eb:a4:00:a9:fc:56:86:31:87:0c:e2:83:7b:80:39:1d:8c:
         40:41:3c:65:dc:b3:be:81:42:2e:ad:4e:33:39:1a:fd:ce:2c:
         c9:06:f1:a4:c1:47:6a:92:64:8d:dc:e8:89:29:79:b2:6f:77:
         f3:44:0f:64:aa:4d:0d:e9:fd:39:ac:85:0a:50:36:22:b3:8f:
         7a:48:c8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:52:42 2024 by rpki-client on console-fra.rpki-client.org