Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          pGDR6rhScn8r5O3Q0Nc/rhXEPBOf1EMfYizva6sFkRQ=
Subject key identifier:   81:3D:B1:58:A1:51:5C:09:91:16:F6:0E:FB:53:9B:90:45:0B:56:56
Certificate issuer:       /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial:       75B908FE6C668F268F7A6CAE65D49C0BF7CCF5BE
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
Signing time:             Tue 23 Apr 2024 05:00:01 +0000
ROA not before:           Tue 23 Apr 2024 04:55:01 +0000
ROA not after:            Tue 22 Apr 2025 05:00:01 +0000
asID:                     17995
IP address blocks:        103.164.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
                          rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b9:08:fe:6c:66:8f:26:8f:7a:6c:ae:65:d4:9c:0b:f7:cc:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
        Validity
            Not Before: Apr 23 04:55:01 2024 GMT
            Not After : Apr 22 05:00:01 2025 GMT
        Subject: CN=813DB158A1515C099116F60EFB539B90450B5656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:ce:0a:d0:16:0b:7e:33:b8:cb:6b:d5:ef:
                    ec:97:71:95:51:ce:2a:b7:73:67:63:1b:c8:c7:d4:
                    9e:74:06:dc:93:bd:79:b9:19:3a:5f:89:da:e2:63:
                    a0:43:78:33:7e:f1:e0:89:5f:ed:e9:97:b0:30:d3:
                    10:7b:5f:7f:82:ca:1d:56:55:e7:6a:cd:ed:44:13:
                    6c:50:54:8b:00:f6:b9:56:88:33:bc:10:05:da:93:
                    6e:da:03:2f:e1:a0:1d:53:0f:96:04:79:4f:07:fa:
                    92:76:4b:63:87:59:e8:f7:8c:55:3d:6b:57:66:ae:
                    c5:25:28:b4:bb:98:85:ab:a4:ff:6d:56:84:6b:16:
                    52:a1:f3:4e:4a:d7:0b:d8:82:50:45:8e:47:37:bd:
                    d3:b8:bc:40:b9:13:82:e3:05:cf:f2:fa:fb:38:91:
                    26:ac:83:5a:7f:50:96:33:84:81:15:8b:89:bd:68:
                    e6:fc:65:1e:a6:ad:69:d4:03:f3:78:c5:35:ac:23:
                    c2:fb:31:68:1a:5f:4a:1c:60:e5:61:1e:39:48:26:
                    6e:b9:40:70:e9:b3:d5:04:de:b5:15:51:00:d7:ab:
                    ef:d8:34:80:5e:3f:11:7a:c3:ee:1a:78:ec:4e:7b:
                    15:13:83:b3:99:87:38:4f:dc:2b:8f:fc:40:3b:02:
                    e7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:B1:58:A1:51:5C:09:91:16:F6:0E:FB:53:9B:90:45:0B:56:56
            X509v3 Authority Key Identifier:
                keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6f:f6:a4:19:ef:4e:5d:86:8a:89:43:80:ad:80:6b:95:b9:
         19:3d:51:43:09:f4:08:d7:0c:2a:14:29:4d:bd:0e:cb:80:27:
         9d:91:ad:60:37:23:67:4f:81:48:b7:04:c5:86:d2:ed:c4:d5:
         e4:f8:8b:69:72:36:bd:6c:ec:ea:8b:b2:46:c5:39:83:97:1a:
         a0:b0:84:b5:e8:bd:ad:ed:54:19:27:35:24:a0:a1:93:70:65:
         5c:08:8e:92:65:34:89:53:4c:b0:53:6c:ac:a9:f4:9c:51:d9:
         6d:a3:f2:ca:d0:26:73:34:80:ed:1f:58:8c:aa:e4:24:f3:65:
         4c:ee:b7:87:0c:4d:cc:cc:d8:27:61:51:85:1d:97:77:12:37:
         64:27:65:55:86:35:0a:7e:f0:65:ed:41:41:25:e3:af:5e:76:
         6e:58:8a:27:5b:07:c3:21:8e:0a:50:f6:82:28:04:4c:de:9f:
         fc:c8:31:75:1e:f7:61:53:26:70:2d:1f:2d:f3:b8:2f:b0:d3:
         5b:7f:58:74:b7:9e:fe:1e:ea:73:88:b9:08:66:db:35:35:4c:
         9a:eb:0f:ba:b4:b6:82:40:3a:e9:0d:46:8a:2f:93:a6:53:0c:
         9f:6f:19:fd:17:4c:28:67:de:29:9f:3d:fe:f2:ab:54:5a:1b:
         da:12:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 21:40:13 2024 by rpki-client on console-ams.rpki-client.org