Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
File:                     3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (raw, json)
Hash identifier:          GdVfCQn6dQGq1F9ipshJ09p9fq9k0WWYuyFocuMsy5E=
Subject key identifier:   C2:D3:1E:09:CE:A2:B3:93:F4:71:8D:D1:E6:D5:33:73:2D:B7:39:35
Certificate issuer:       /CN=34D90463B7D23555C6F77AA2464E508E3F913994
Certificate serial:       4F82BA602B1882FFBC45EBD4180BAC85C0BED7A3
Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa
Signing time:             Fri 01 Nov 2024 08:00:32 +0000
ROA not before:           Fri 01 Nov 2024 07:55:32 +0000
ROA not after:            Fri 31 Oct 2025 08:00:32 +0000
asID:                     149333
IP address blocks:        103.179.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl
                          rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:ba:60:2b:18:82:ff:bc:45:eb:d4:18:0b:ac:85:c0:be:d7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994
        Validity
            Not Before: Nov  1 07:55:32 2024 GMT
            Not After : Oct 31 08:00:32 2025 GMT
        Subject: CN=C2D31E09CEA2B393F4718DD1E6D533732DB73935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:11:5d:0b:15:82:96:d4:47:67:12:63:a2:
                    4c:a9:80:14:11:96:40:a3:fa:94:ee:76:40:ff:03:
                    a4:97:59:15:71:a4:08:a3:c9:3f:da:92:c7:5f:56:
                    15:76:d6:2c:05:75:eb:3c:a6:db:65:1b:3d:8f:1d:
                    9c:f0:84:00:5b:67:5d:35:01:9e:ad:77:c2:22:74:
                    21:2e:00:88:bb:bf:15:8b:a8:f0:25:00:93:01:9c:
                    58:1b:90:5c:dc:7e:7f:03:af:15:35:15:eb:f5:4a:
                    7d:b9:f2:e8:f5:05:6b:e6:6d:ad:fc:71:36:f9:84:
                    ac:a4:5d:4e:5e:3f:2a:ee:d2:2e:f1:c8:46:1a:a7:
                    f8:c8:94:ad:43:ac:d4:c0:67:6f:49:36:fc:c7:b8:
                    d5:63:10:e0:6d:ec:c5:10:44:f7:7a:d4:f5:1c:7c:
                    81:80:03:1c:32:3d:6d:03:df:cb:84:02:78:02:9b:
                    06:bb:d9:18:da:1d:8b:09:74:d7:6e:c3:f8:d5:d8:
                    c9:f5:df:c1:a8:6c:b2:ea:2d:f6:26:87:21:96:e5:
                    ff:ac:15:25:ef:9f:fb:8a:02:0e:2e:d8:24:e4:3b:
                    a8:ad:de:5e:33:a8:ec:99:20:26:0d:86:e5:b9:5a:
                    c3:64:18:3b:96:2c:b5:50:06:a5:c6:bf:82:90:a4:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D3:1E:09:CE:A2:B3:93:F4:71:8D:D1:E6:D5:33:73:2D:B7:39:35
            X509v3 Authority Key Identifier:
                keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:59:69:e7:9c:ae:24:9f:6b:5c:f7:41:1d:37:86:6c:35:
         fc:4f:29:5a:29:cf:d1:0d:03:a6:ae:60:cb:84:f6:70:7b:c6:
         7a:83:64:b3:33:f2:1a:1c:82:a3:09:c5:18:bb:9a:89:f3:e2:
         f1:98:23:2a:06:b3:ae:3d:78:29:47:21:1c:6a:98:07:81:7c:
         be:99:c5:ce:38:26:fc:92:da:e5:46:7d:79:98:d8:13:da:04:
         eb:e3:eb:75:ed:0f:cd:03:a6:b2:8d:da:fb:bf:1b:7d:7e:be:
         20:ce:1f:83:78:41:61:28:31:20:5b:2a:52:78:a0:c1:07:51:
         f4:0b:cd:7a:4d:b9:37:bc:d4:71:69:19:bb:9b:83:71:1c:ca:
         2e:2f:8d:f5:3c:88:37:99:e9:12:d4:cb:96:96:49:b7:9d:14:
         e8:8b:ba:a3:53:50:37:69:72:d1:e7:07:92:fb:87:5e:9a:e2:
         2f:bc:28:86:af:69:74:fb:da:ba:bd:82:be:34:c1:6d:12:0c:
         2d:18:96:85:0e:e4:cd:a2:58:a7:19:fa:c4:8a:f8:56:7f:79:
         b6:21:c4:bc:3d:7f:99:0f:87:05:40:69:da:e7:24:3d:3c:51:
         67:17:45:fc:4d:27:ae:62:8a:d3:30:9a:41:59:4a:33:80:ae:
         0d:96:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:21 2024 by rpki-client on console-fra.rpki-client.org