Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa
File:                     3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (raw, json)
Hash identifier:          MtXpjeyO4y7dpOGK7wcGQ6khKC9SV/UKJmzfwP1lOcY=
Subject key identifier:   5C:C4:C1:10:D0:B8:19:F1:24:37:EC:49:2E:2C:F7:F2:60:30:4D:F1
Certificate issuer:       /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Certificate serial:       4602B97F6ABBEC087A2840B55883E85C6543C5DC
Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa
Signing time:             Tue 07 Nov 2023 07:00:01 +0000
ROA not before:           Tue 07 Nov 2023 06:55:01 +0000
ROA not after:            Tue 05 Nov 2024 07:00:01 +0000
asID:                     141616
IP address blocks:        103.161.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
                          rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 01:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:02:b9:7f:6a:bb:ec:08:7a:28:40:b5:58:83:e8:5c:65:43:c5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
        Validity
            Not Before: Nov  7 06:55:01 2023 GMT
            Not After : Nov  5 07:00:01 2024 GMT
        Subject: CN=5CC4C110D0B819F12437EC492E2CF7F260304DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:28:b6:0e:47:0f:77:8a:2b:06:75:00:04:
                    dd:ac:0c:5a:e5:1c:62:09:7d:bb:9c:bb:a0:e0:b9:
                    ac:70:fe:4d:61:7e:ec:64:78:ef:36:57:d9:2e:91:
                    4d:84:26:c4:5c:14:e2:1f:a6:d1:06:84:c3:13:2e:
                    ec:ba:f6:11:12:1b:89:fc:0f:d6:1b:54:b8:41:3c:
                    c8:4d:50:ac:49:a3:f8:cc:af:94:76:98:b3:ce:b3:
                    d9:44:b7:e5:64:e8:a8:43:34:b6:05:97:50:5f:90:
                    f7:b0:29:96:2b:79:86:f7:89:59:fa:8e:73:bd:2e:
                    ea:ec:8c:37:56:93:24:80:d5:ee:d5:2d:d2:d7:80:
                    e2:ff:2a:11:60:db:2a:77:61:e7:5e:c7:ce:07:8f:
                    6c:4a:2d:50:61:c2:99:f3:4a:33:c8:62:03:05:4d:
                    8d:5e:f4:0a:5a:12:51:4c:a6:c5:5d:6d:04:cb:ae:
                    6b:12:e2:d8:1e:88:38:3b:9e:9d:63:34:9a:16:a9:
                    03:b5:37:3d:ba:0a:ef:6e:39:b6:5a:0b:cc:de:16:
                    11:94:87:f8:02:b7:ed:e3:7c:6d:7a:6d:e2:99:3f:
                    86:16:ec:44:ac:11:3d:17:55:b3:32:69:56:22:97:
                    18:9c:4a:62:03:21:2a:a7:8a:12:c7:19:ab:3b:fa:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:C1:10:D0:B8:19:F1:24:37:EC:49:2E:2C:F7:F2:60:30:4D:F1
            X509v3 Authority Key Identifier:
                keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:b6:31:3c:78:61:96:f9:c7:e0:f0:5e:80:92:af:5b:d6:
         eb:fa:ff:8f:0e:42:f8:2d:ae:b7:19:16:f0:f8:c3:e6:71:55:
         61:0a:d9:3b:cb:98:8d:32:c0:3d:ed:58:b8:e3:d5:71:63:69:
         98:96:ef:f5:e1:e6:b1:d7:4f:e8:d7:a9:f8:2d:1c:16:65:c0:
         2d:4b:32:5e:53:13:1a:23:07:ad:7f:b7:06:c0:11:05:ac:0d:
         4c:b4:52:29:78:34:a3:d0:6c:ee:19:d0:55:a9:7e:0f:99:71:
         b6:aa:a1:f0:7b:2f:67:32:fc:35:1b:f4:f0:8c:f3:e5:01:bd:
         fa:c7:62:cc:52:65:7e:9d:23:38:ec:98:28:93:d3:b1:9e:64:
         e4:41:a2:d4:0b:46:a8:57:2d:65:e3:3d:f9:1e:04:98:c8:2f:
         bf:7c:49:5f:c3:a3:c3:05:a1:3a:83:95:30:60:5d:ca:3b:15:
         d7:bf:81:0f:11:fc:62:95:b6:ce:0c:91:bd:dd:56:96:53:b3:
         83:25:68:a1:60:06:f2:c4:e0:2f:81:a4:93:c5:75:47:3f:b4:
         b8:34:ef:2d:d9:de:8c:9c:0c:d4:89:fb:13:e3:85:57:ae:be:
         30:ed:b3:95:ab:e4:59:c8:d4:35:e9:5f:08:fb:a4:e8:51:c8:
         2e:91:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 21:04:33 2024 by rpki-client on console-fra.rpki-client.org