Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          jlg9DdFt651d9uTLeIWJcRtXO4Q0k6n6AJ9ax19sQPs=
Subject key identifier:   0F:C7:F6:2D:BE:06:E8:25:11:4B:97:B8:D5:D3:C1:C8:CA:85:93:D2
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       766C61401420708EACF5ACCA62233B4640FD6039
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 11 Feb 2024 09:00:01 +0000
ROA not before:           Sun 11 Feb 2024 08:55:01 +0000
ROA not after:            Sun 09 Feb 2025 09:00:01 +0000
asID:                     9341
IP address blocks:        103.179.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
                          rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6c:61:40:14:20:70:8e:ac:f5:ac:ca:62:23:3b:46:40:fd:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Feb 11 08:55:01 2024 GMT
            Not After : Feb  9 09:00:01 2025 GMT
        Subject: CN=0FC7F62DBE06E825114B97B8D5D3C1C8CA8593D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:a3:ba:1c:ce:72:e7:c2:bc:e6:ff:2c:c1:
                    2a:6a:75:40:f7:34:4f:82:fa:40:68:f0:97:bc:2c:
                    21:26:bb:b5:86:4c:88:60:b7:67:60:34:7d:9b:93:
                    59:f3:fc:2b:ed:4b:fc:2a:80:36:5f:1c:3f:c8:f3:
                    10:89:e7:06:87:11:3d:0f:57:31:b4:a0:b7:0a:05:
                    3f:46:a6:1d:32:2d:75:48:00:ac:a6:df:31:1b:af:
                    52:81:9c:92:7f:11:2b:1f:3a:a5:f4:70:32:9f:bc:
                    ed:bb:0f:e9:28:13:98:d8:0f:a5:bb:fb:e2:bd:8c:
                    3e:53:ad:00:df:96:e7:b8:67:16:67:51:c3:78:5a:
                    07:be:ee:19:cb:de:7d:db:9a:c9:f8:7a:d5:ac:9e:
                    38:1f:d2:b4:99:20:46:f3:47:2b:54:0d:cb:4d:dd:
                    58:58:1b:41:5b:f6:c5:c9:53:ab:0d:56:c9:7e:6a:
                    89:27:35:80:06:ca:cc:06:13:f5:67:6f:12:e9:22:
                    da:7f:6c:b4:2c:d7:de:31:00:e4:e9:18:7e:b9:2a:
                    8a:69:ec:66:32:c6:91:a9:70:00:7a:54:2e:fa:41:
                    f6:f5:f1:83:fb:52:71:fa:88:f6:4d:75:40:d6:ae:
                    2f:13:76:0e:31:30:76:17:41:ec:f0:f7:46:dd:07:
                    48:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:F6:2D:BE:06:E8:25:11:4B:97:B8:D5:D3:C1:C8:CA:85:93:D2
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:81:f4:32:37:8f:d9:dc:41:7a:67:ac:83:a5:8b:54:55:62:
         57:fc:85:93:f3:30:7f:5a:0f:00:5d:74:59:98:14:27:54:71:
         e7:75:0b:61:d8:7e:72:84:47:5d:da:25:e7:e2:a9:b8:54:7b:
         f0:64:0c:fc:da:ee:e8:0f:a6:c7:13:4c:a8:7a:12:ef:39:30:
         aa:3b:57:3a:a5:41:00:f8:2d:09:68:cb:fe:12:04:dd:ae:28:
         30:09:6d:00:46:d8:75:18:45:53:ca:dc:06:03:c3:0a:bd:fd:
         11:7b:ce:4e:47:ad:43:a8:45:07:e1:1b:a8:de:ab:a8:9e:54:
         5d:a5:ba:72:58:07:f9:e8:3e:94:dd:6c:3f:30:60:2b:94:43:
         c4:4d:64:d2:65:06:30:97:87:ef:a4:ca:03:d4:2e:9d:08:f9:
         46:52:e9:e2:0b:5d:e6:15:55:28:c3:dc:88:72:da:39:be:5a:
         5e:ac:83:8e:68:55:b1:1f:e2:f0:3c:20:37:bd:f0:5c:0a:6a:
         82:36:34:31:cb:6c:bf:55:04:15:94:54:d6:af:23:21:17:4a:
         fe:86:da:41:2b:30:92:7e:9b:2b:9f:32:ac:a8:92:39:07:7a:
         97:16:37:58:b8:21:61:23:a5:1f:69:5a:b6:4f:a4:6d:0f:ee:
         92:61:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org