Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          AGzpxxOSa4ZUdRdxbFMmluw0k71hm4y4+gb34fO4bCU=
Subject key identifier:   6B:30:8E:59:D9:1A:C9:F9:A3:40:69:EA:1F:27:36:80:BF:74:EA:2B
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       593EF64EAF7969167DD0AB20CB8283160638EB5B
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 11 Feb 2024 09:00:01 +0000
ROA not before:           Sun 11 Feb 2024 08:55:01 +0000
ROA not after:            Sun 09 Feb 2025 09:00:01 +0000
asID:                     9341
IP address blocks:        103.179.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl
                          rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3e:f6:4e:af:79:69:16:7d:d0:ab:20:cb:82:83:16:06:38:eb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Feb 11 08:55:01 2024 GMT
            Not After : Feb  9 09:00:01 2025 GMT
        Subject: CN=6B308E59D91AC9F9A34069EA1F273680BF74EA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:71:46:08:7c:4e:19:2c:d0:a3:50:50:c1:
                    2c:98:7a:f1:5f:f9:4a:82:39:01:02:8f:fd:ee:7f:
                    74:93:96:5d:a8:12:0a:71:1a:46:08:d3:a9:9a:0e:
                    0e:fd:b3:4f:9b:4b:b8:d8:6b:df:45:f1:3e:6b:38:
                    e1:ce:7a:77:62:84:1f:76:8e:0c:73:22:de:c6:30:
                    09:5e:5a:cc:20:ae:be:33:2d:da:f0:1e:1e:f2:37:
                    14:b3:2e:c2:b7:4d:04:a9:08:3c:21:31:4e:ca:a3:
                    46:c7:da:78:bb:11:79:52:5c:4a:31:3f:7b:5f:67:
                    9f:5f:ee:5d:3c:89:7e:44:95:8e:9f:6c:7d:da:5b:
                    63:c6:10:b4:2e:bb:75:ba:6d:02:21:ac:91:13:59:
                    33:ae:17:06:ab:14:74:e4:c8:65:29:87:cf:61:0e:
                    5a:6a:90:5f:f6:aa:d7:69:17:4c:12:9b:c3:33:c5:
                    0b:a2:1f:0c:56:bd:92:3e:ac:0c:6e:79:bb:9d:83:
                    ff:30:66:fc:94:20:fa:36:f2:92:cc:f2:96:58:e5:
                    26:93:1f:64:fc:f9:9c:13:f2:8c:03:09:7f:6b:ba:
                    dd:04:3d:58:e8:b4:21:da:4d:58:d6:8e:ca:b1:27:
                    ff:7f:5b:be:ba:95:15:b6:20:7c:84:6f:52:ff:7e:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:8E:59:D9:1A:C9:F9:A3:40:69:EA:1F:27:36:80:BF:74:EA:2B
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1d:ac:61:91:7f:96:df:86:a1:f6:7e:e7:07:6c:0f:b4:d2:
         5a:ba:3e:96:79:4d:0b:18:97:a3:89:94:1f:7e:0e:45:30:b1:
         6d:55:e7:2e:89:9d:38:cb:23:03:26:8f:66:23:29:ff:cc:d8:
         7f:40:13:e4:5f:c6:42:3b:52:9f:7a:15:0d:1a:36:a7:0d:b9:
         34:21:e9:eb:27:a9:e3:fc:a3:9c:f6:ac:0e:12:08:b7:67:df:
         29:4b:3c:7f:0c:31:a1:ac:44:43:83:61:9a:a8:aa:4b:48:4a:
         86:f5:b2:94:a2:9f:ad:b1:66:e6:b6:ff:c4:91:0b:e8:b7:3f:
         a5:f8:ae:94:e4:5a:7d:57:ab:21:bc:dd:e9:fe:86:20:cf:40:
         5f:8d:ae:a5:36:10:f9:f5:f1:78:6a:13:1b:f0:59:2e:74:52:
         fb:f7:e6:b7:49:16:5f:3e:3b:2d:04:22:57:50:b1:a8:de:2c:
         47:63:2e:c1:aa:4b:b3:cf:23:56:e1:83:b6:0e:cb:68:af:17:
         9b:69:0f:c2:12:03:7e:59:b8:e0:5a:d9:dd:e9:2d:70:76:e4:
         8d:65:a7:c0:4b:f3:8d:d9:a3:7e:f6:03:7f:db:68:d5:60:04:
         95:01:28:9c:c7:17:59:5b:48:18:43:4f:ed:a3:5d:5c:1a:4e:
         f9:34:00:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:50 2024 by rpki-client on console-ams.rpki-client.org