Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa
File:                     3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (raw, json)
Hash identifier:          9ZvE9qSG2bZjSJGBo6dQqN4pOg0vmjgb5oCQXZIPiJg=
Subject key identifier:   1E:B6:81:BA:57:43:91:74:BF:40:58:2D:6C:7B:DE:E6:F0:0B:89:31
Certificate issuer:       /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
Certificate serial:       37EFE5A0494E22D876C766643D46EB5225F2D5AC
Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa
Signing time:             Tue 07 Nov 2023 07:00:01 +0000
ROA not before:           Tue 07 Nov 2023 06:55:01 +0000
ROA not after:            Tue 05 Nov 2024 07:00:01 +0000
asID:                     141616
IP address blocks:        103.161.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl
                          rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 07:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:e5:a0:49:4e:22:d8:76:c7:66:64:3d:46:eb:52:25:f2:d5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F
        Validity
            Not Before: Nov  7 06:55:01 2023 GMT
            Not After : Nov  5 07:00:01 2024 GMT
        Subject: CN=1EB681BA57439174BF40582D6C7BDEE6F00B8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:bc:5c:11:45:50:90:5a:26:6e:ad:0c:b5:
                    a1:0a:86:34:1e:4c:da:48:5e:21:ee:a8:c4:5f:97:
                    9e:2c:e4:a4:6c:a3:64:d1:17:2a:a1:0e:b4:99:79:
                    ee:89:0d:dc:3b:0f:23:f0:4d:ae:9d:2a:44:f6:97:
                    64:ff:73:63:5a:79:5e:65:13:e8:ca:aa:07:6b:87:
                    4f:8a:92:7f:ed:a5:98:06:68:15:94:92:e6:b2:90:
                    43:22:53:4f:78:47:ea:07:62:52:ba:52:8c:6c:fb:
                    5d:41:fa:54:85:55:34:b4:ac:bc:5a:ee:c3:85:36:
                    12:2a:21:96:e3:82:7c:c9:c5:15:0a:02:ba:27:5d:
                    8a:8e:03:dc:b0:0c:46:c3:14:82:eb:93:e5:25:18:
                    48:d4:38:2c:b9:c8:62:9f:70:b9:cf:f8:28:85:ad:
                    c8:3e:84:a6:0b:cd:c9:a0:7f:1a:50:f3:10:8f:ca:
                    f6:83:77:cd:c2:31:80:3b:0c:80:53:fc:27:9d:f3:
                    5f:61:76:1b:de:30:ed:55:fc:f0:bf:d3:95:f0:3a:
                    c9:1b:7a:e0:ce:3f:32:c2:9d:3b:47:e2:ab:80:9f:
                    41:48:63:3e:9f:a5:65:88:1d:08:3b:c6:71:49:98:
                    0c:b3:e8:66:4c:40:9a:5d:67:f1:b2:1d:c6:c3:98:
                    d8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B6:81:BA:57:43:91:74:BF:40:58:2D:6C:7B:DE:E6:F0:0B:89:31
            X509v3 Authority Key Identifier:
                keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:37:38:90:55:a5:dc:d2:9f:69:ec:ea:44:33:28:98:28:0f:
         88:e1:4e:08:98:74:14:35:8c:44:7b:ef:f9:21:fc:39:53:24:
         99:1a:ad:d9:0d:13:9c:27:df:e2:e7:45:8e:b0:c1:95:e1:94:
         00:b5:b4:2e:36:e1:64:da:28:8b:60:29:24:71:31:b0:83:ee:
         e6:28:3d:40:2a:c2:33:6b:cb:b2:ab:d7:cc:d7:82:4e:e1:46:
         e1:f1:66:7e:e6:45:f8:37:b9:f8:70:42:c5:2b:53:18:7e:ca:
         ad:4a:dc:14:47:b0:5a:01:31:65:4a:c5:11:d2:68:49:e0:cb:
         70:ed:e1:eb:bf:5d:12:6c:84:c9:62:ce:a3:3c:b5:a6:d1:56:
         97:ae:dc:87:80:a2:ea:5c:d2:2b:42:f5:25:50:ec:b0:1a:1b:
         30:97:fc:ee:4a:c1:2f:d7:2b:9e:7b:05:4a:68:b4:1a:80:8b:
         72:c9:25:dd:bb:3e:b0:df:24:33:fa:77:7f:f5:7f:df:fc:f0:
         ec:f6:71:17:24:de:cf:07:3e:ff:85:b9:e5:4e:53:27:d2:ae:
         4f:5d:32:00:e3:e9:82:22:41:3a:cc:8f:c2:4e:73:bb:02:98:
         12:1a:95:a6:62:b3:40:e7:e4:a5:de:76:62:1d:ee:f6:41:a7:
         b6:f0:27:f4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUN+/loElOIth2x2ZkPUbrUiXy1awwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz
ODI3MjI2RjAeFw0yMzExMDcwNjU1MDFaFw0yNDExMDUwNzAwMDFaMDMxMTAvBgNV
BAMTKDFFQjY4MUJBNTc0MzkxNzRCRjQwNTgyRDZDN0JERUU2RjAwQjg5MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwbrxcEUVQkFombq0MtaEKhjQe
TNpIXiHuqMRfl54s5KRso2TRFyqhDrSZee6JDdw7DyPwTa6dKkT2l2T/c2NaeV5l
E+jKqgdrh0+Kkn/tpZgGaBWUkuaykEMiU094R+oHYlK6Uoxs+11B+lSFVTS0rLxa
7sOFNhIqIZbjgnzJxRUKAronXYqOA9ywDEbDFILrk+UlGEjUOCy5yGKfcLnP+CiF
rcg+hKYLzcmgfxpQ8xCPyvaDd83CMYA7DIBT/Ced819hdhveMO1V/PC/05XwOskb
euDOPzLCnTtH4quAn0FIYz6fpWWIHQg7xnFJmAyz6GZMQJpdZ/GyHcbDmNgvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUHraBuldDkXS/QFgtbHve5vALiTEwHwYDVR0j
BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG
MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3
MjI2Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMDk0ZDNlLTA4OWMtNGM2OC04
MGEyLTU2YjVjYmZjMTAzZC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaMwDQYJ
KoZIhvcNAQELBQADggEBAIQ3OJBVpdzSn2ns6kQzKJgoD4jhTgiYdBQ1jER77/kh
/DlTJJkardkNE5wn3+LnRY6wwZXhlAC1tC424WTaKItgKSRxMbCD7uYoPUAqwjNr
y7Kr18zXgk7hRuHxZn7mRfg3ufhwQsUrUxh+yq1K3BRHsFoBMWVKxRHSaEngy3Dt
4eu/XRJshMlizqM8tabRVpeu3IeAoupc0itC9SVQ7LAaGzCX/O5KwS/XK557BUpo
tBqAi3LJJd27PrDfJDP6d3/1f9/88Oz2cRck3s8HPv+FueVOUyfSrk9dMgDj6YIi
QTrMj8JOc7sCmBIalaZis0Dn5KXedmId7vZBp7bwJ/Q=
-----END CERTIFICATE-----
Generated at Mon May 13 22:00:17 2024 by rpki-client on console-ams.rpki-client.org