Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
File:                     3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          EGzM2PGl/cXVYP2zY4v3vgwFh56tSuxI2KyBde1s8Qw=
Subject key identifier:   83:60:93:5C:96:BA:30:FB:0B:C3:B1:EF:55:59:0E:27:35:CA:24:75
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       293E8531BCCAB287D516C097B85F02FBA1F91052
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
Signing time:             Tue 12 Mar 2024 09:01:58 +0000
ROA not before:           Tue 12 Mar 2024 08:56:58 +0000
ROA not after:            Tue 11 Mar 2025 09:01:58 +0000
asID:                     45289
IP address blocks:        103.241.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
                          rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:85:31:bc:ca:b2:87:d5:16:c0:97:b8:5f:02:fb:a1:f9:10:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Mar 12 08:56:58 2024 GMT
            Not After : Mar 11 09:01:58 2025 GMT
        Subject: CN=8360935C96BA30FB0BC3B1EF55590E2735CA2475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:56:c0:22:f6:28:5c:ed:2a:9a:9d:b2:8d:
                    3d:fa:c3:71:98:b5:f9:9e:e6:83:16:15:fd:93:d9:
                    e0:b7:0a:16:35:e6:aa:87:5e:37:ea:83:65:2b:c8:
                    a5:5d:1d:05:fd:fe:99:68:87:cb:d0:6d:e3:1d:d4:
                    c8:72:9d:aa:48:4a:3b:85:94:8b:86:ed:65:de:9a:
                    e0:55:dd:5f:2a:8e:35:ac:78:e0:4e:58:f3:7b:97:
                    c5:3c:41:74:95:7b:7a:c3:90:07:ad:f4:d6:89:db:
                    10:5c:ca:08:02:75:79:f2:b5:07:59:8a:e9:2b:d3:
                    9b:9e:36:80:f7:81:7e:ab:b8:c4:22:5d:f7:1c:1c:
                    6f:63:b4:4f:83:26:3a:d0:41:17:ae:1d:34:ff:af:
                    21:57:1d:23:8e:ee:4b:df:37:02:7b:06:48:1b:b1:
                    d5:37:71:d8:18:31:5c:61:33:0f:7a:c1:eb:48:c3:
                    92:bf:c4:29:e0:0f:aa:bb:7b:3a:eb:60:ce:ff:dd:
                    5f:b4:f0:90:7a:3e:90:81:19:db:d5:2b:8c:6e:c1:
                    94:c3:be:fb:27:12:f2:2a:af:81:d9:6d:75:96:0a:
                    94:8f:4a:48:89:d4:09:b8:fa:4f:b7:b3:a6:66:d8:
                    e2:8e:25:1c:56:17:27:68:84:1b:05:fb:b8:7f:b0:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:60:93:5C:96:BA:30:FB:0B:C3:B1:EF:55:59:0E:27:35:CA:24:75
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:be:96:36:36:77:b9:06:fa:f6:9a:6e:6e:46:bb:29:f4:b0:
         77:a4:b1:53:01:96:c0:d4:1e:34:3a:05:5a:c2:d3:6b:1f:46:
         31:f3:3c:db:12:50:c3:2f:6f:4f:fe:95:9f:38:c3:91:8c:4e:
         60:9e:04:e5:cf:bc:04:1f:88:b5:eb:66:39:35:fd:61:a4:eb:
         e1:d0:1c:dd:25:f3:36:27:26:ff:60:48:c2:34:ef:c6:6f:15:
         74:22:e4:04:b2:8b:75:89:21:09:57:3f:e7:ab:23:9f:81:d4:
         12:d9:1f:d5:55:b8:a0:d2:bf:01:e7:d8:0e:e2:5a:c1:8f:af:
         19:9d:64:b3:04:53:01:e1:a4:1b:84:bf:d1:bf:9c:41:cb:66:
         ae:a1:66:bf:02:ca:5f:23:5f:7f:23:0a:35:ea:68:d3:1b:c7:
         3a:91:71:ce:ad:e6:9e:8c:41:9c:ff:eb:83:13:38:fd:4d:a7:
         3b:0e:8d:c7:92:83:a6:ea:10:f4:87:8a:cc:9e:f3:8c:6b:8f:
         44:66:6c:4d:25:45:eb:2c:c9:ff:28:f3:6c:a6:90:78:4b:b3:
         f5:e6:1a:3b:47:86:4c:9f:f6:9a:4d:60:09:af:21:3b:27:3a:
         36:fa:33:4c:a0:4e:e1:1b:d1:94:06:c7:e8:52:4e:e6:e6:fd:
         6c:f0:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:29 2024 by rpki-client on console-fra.rpki-client.org