Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa
File:                     3130332e38392e37392e302f32342d3234203d3e203435373031.roa (raw, json)
Hash identifier:          qa7QfUczq7E13MteALse3+HcU+CRKGoztPl8KJpsjxc=
Subject key identifier:   33:62:D2:48:F7:2D:B3:60:03:12:93:8B:2C:28:2F:F7:5A:A0:9C:5F
Certificate issuer:       /CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
Certificate serial:       346CB12FD2B3423EE7C61ABC9FE9600A94429EE1
Authority key identifier: FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa
Signing time:             Thu 16 Nov 2023 06:00:01 +0000
ROA not before:           Thu 16 Nov 2023 05:55:01 +0000
ROA not after:            Thu 14 Nov 2024 06:00:01 +0000
asID:                     45701
IP address blocks:        103.89.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl
                          rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 10:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6c:b1:2f:d2:b3:42:3e:e7:c6:1a:bc:9f:e9:60:0a:94:42:9e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E
        Validity
            Not Before: Nov 16 05:55:01 2023 GMT
            Not After : Nov 14 06:00:01 2024 GMT
        Subject: CN=3362D248F72DB3600312938B2C282FF75AA09C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:2e:4a:69:4d:d6:84:ec:20:fd:d5:cc:a3:
                    8f:65:23:d9:ec:fe:f9:bb:c6:9f:0f:1c:0a:19:c4:
                    42:6f:cb:09:27:f6:d4:ce:3c:c0:86:f9:ea:0b:e4:
                    f4:4a:8b:a2:b2:b4:e1:7d:d4:0e:ad:9d:be:73:b8:
                    a5:22:ba:b0:4a:05:8e:a6:8d:a2:30:1d:b6:4e:44:
                    b2:27:62:fc:03:39:18:9d:55:5c:76:00:d8:96:20:
                    04:a6:00:23:1e:1c:86:4b:f0:5b:f8:33:47:30:ed:
                    0e:ae:8a:4f:f4:23:cd:21:92:1c:17:eb:d1:b7:4e:
                    b0:ad:0c:03:f6:62:22:6f:6f:4d:8b:af:69:38:41:
                    30:95:a4:39:18:08:fd:9e:ae:eb:d7:2b:3a:88:47:
                    30:13:8c:83:ff:74:6b:ce:ba:81:9b:99:87:04:b0:
                    c3:23:4b:ea:b0:6b:6c:f1:78:98:93:6b:b7:15:fa:
                    10:e9:fb:23:11:da:d4:f6:32:18:79:99:03:f0:16:
                    1d:a8:72:83:da:0d:1f:fe:f9:e8:04:17:7f:13:10:
                    71:1d:ce:90:e7:30:1b:49:a4:a1:e5:7a:d3:bd:c2:
                    0a:58:57:d7:e9:96:ac:8f:77:83:ed:6c:01:10:f9:
                    61:57:9c:d5:dd:0a:f6:49:54:94:e5:d4:fc:cf:4d:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:D2:48:F7:2D:B3:60:03:12:93:8B:2C:28:2F:F7:5A:A0:9C:5F
            X509v3 Authority Key Identifier:
                keyid:FB:88:A8:85:25:16:DB:CE:AC:42:9C:5B:6F:9B:7F:98:FA:A0:14:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB88A8852516DBCEAC429C5B6F9B7F98FAA0140E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b1cdd5-2b3d-461a-9a72-0031f0bfb45d/0/3130332e38392e37392e302f32342d3234203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:69:e8:de:f6:03:d0:2f:eb:f5:46:dc:29:e3:c1:5d:1e:51:
         66:95:0d:29:76:ca:99:40:bd:4a:6c:9f:75:8f:e6:9e:a7:85:
         26:63:8e:2c:1b:bc:4d:df:88:54:de:17:d2:ff:9a:e2:07:e6:
         c8:e4:21:0b:1d:9a:af:97:46:da:68:92:ee:6b:e3:2f:1a:f4:
         9f:16:f5:5f:e0:68:0b:74:04:30:3c:5d:f6:d7:c5:fa:10:38:
         8d:42:8c:b7:2c:72:8e:09:f5:6f:26:27:e1:10:11:23:a4:94:
         3b:98:e9:f2:15:f8:47:c2:53:4e:17:a0:06:ba:16:00:51:71:
         af:85:ac:75:7f:f0:96:65:70:df:7f:7c:49:fe:be:9f:6a:a7:
         74:a0:27:8a:d6:e4:f6:45:09:ec:9c:1c:0c:c0:1e:b5:91:64:
         44:52:81:71:d4:83:12:98:71:cf:2f:e6:8d:e8:7e:85:fa:6f:
         e6:8e:cc:13:0f:f0:9f:50:da:e5:ee:24:70:ef:4d:26:d7:5f:
         af:1b:ec:1f:8c:86:6f:de:65:83:d8:85:4f:0d:5e:db:b3:ab:
         d4:e6:64:52:ee:0f:c7:03:e5:66:fe:ea:b5:58:64:9e:51:1f:
         99:30:5c:c5:94:9b:d3:7e:3e:9d:32:bf:26:25:67:ec:f5:c4:
         14:c3:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:20:48 2024 by rpki-client on console-fra.rpki-client.org