Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
File:                     3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          XaBc0ozUYa3rWeagf3S+THTjeXiPFEV2r91XPsTK6QA=
Subject key identifier:   40:62:D5:8C:11:8E:7D:57:6A:9D:9A:08:1A:89:4B:31:8E:F8:97:BD
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       6B3516070E54AB0EF32010DBE3200BF41740FF4B
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa
Signing time:             Thu 22 Jun 2023 04:22:57 +0000
ROA not before:           Thu 22 Jun 2023 04:17:57 +0000
ROA not after:            Thu 20 Jun 2024 04:22:57 +0000
asID:                     59282
IP address blocks:        103.161.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 15:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:35:16:07:0e:54:ab:0e:f3:20:10:db:e3:20:0b:f4:17:40:ff:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jun 22 04:17:57 2023 GMT
            Not After : Jun 20 04:22:57 2024 GMT
        Subject: CN=4062D58C118E7D576A9D9A081A894B318EF897BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:1a:9f:11:2e:f4:38:00:f1:e8:49:fb:06:
                    51:f8:c1:b2:67:26:f6:be:19:e8:1a:b4:ad:ca:c3:
                    c0:75:10:be:17:ce:bf:4f:50:03:06:70:9c:0b:8d:
                    8d:cb:b6:50:bc:ad:f8:b9:fa:b0:64:09:e2:0f:09:
                    a7:66:e5:50:fa:9e:8a:a7:d1:88:e0:67:1d:50:01:
                    97:40:29:2f:e2:65:d8:df:94:43:a2:1a:51:22:40:
                    4b:d1:d5:d6:fc:52:45:a9:d4:e4:6c:9e:90:d8:af:
                    da:e0:8c:d2:1c:0f:16:ae:94:77:87:a2:c6:48:28:
                    08:f9:48:7c:24:f3:29:14:1d:29:34:62:7d:16:48:
                    2b:66:9f:70:4f:77:7f:79:71:18:cd:85:5c:b3:57:
                    73:b4:3a:72:f1:61:eb:ac:88:5b:7f:7b:51:2b:87:
                    fb:d5:e4:7d:91:a0:7c:f0:79:b7:2a:d2:d3:36:a7:
                    02:a5:b6:46:ba:97:38:e7:cd:bc:4b:ed:45:a3:77:
                    18:d6:a1:ee:f2:aa:5d:02:cd:57:42:84:5a:b2:9b:
                    01:1a:1b:c3:c5:8f:ee:d9:71:0e:55:de:1d:c1:e0:
                    e5:c5:95:95:ce:fd:b1:fe:b4:28:d7:67:1a:3b:f2:
                    c1:aa:60:ab:2d:5c:a2:de:e2:da:79:63:51:58:6d:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:D5:8C:11:8E:7D:57:6A:9D:9A:08:1A:89:4B:31:8E:F8:97:BD
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:2d:26:e2:f1:54:c2:ad:53:5b:aa:32:ea:7f:b6:6a:0f:
         3c:3b:f6:4a:27:05:b4:17:6f:1d:bb:4c:81:c7:40:49:0d:d7:
         e7:93:4d:cc:5c:f5:94:e5:eb:28:3f:4f:63:3b:fb:a1:53:94:
         63:c9:01:d3:47:12:ec:8c:0e:4a:9b:36:52:74:af:a2:ec:d3:
         c1:94:6e:5b:36:68:4a:89:ad:53:fe:3f:f4:77:27:e7:00:8a:
         fc:55:60:37:6f:5f:cb:38:55:ed:df:68:33:17:ee:39:f8:c1:
         ce:e5:c5:37:58:f2:90:bf:83:6c:a9:2c:ab:2f:5a:69:e9:72:
         34:40:99:b2:58:ab:ca:1c:48:61:5a:30:94:0b:ba:ad:33:2b:
         bf:fb:41:e5:67:cd:98:ba:77:92:8f:ef:88:ef:ff:63:77:f1:
         9b:35:31:37:3b:78:d6:ea:c3:71:68:b8:07:b6:1b:12:d9:49:
         15:e1:25:72:d2:ca:9a:b6:76:8e:1f:0f:2d:e0:e1:f8:85:32:
         3b:ee:ef:2f:12:81:26:3f:f1:f3:ef:ec:30:3d:73:f6:03:1d:
         48:91:79:0a:ed:7e:5e:9f:f2:00:0c:b2:0a:ec:f9:c5:07:20:
         78:30:00:65:02:aa:d6:7e:56:44:91:e5:c2:2b:50:1c:ef:61:
         de:99:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 15:35:30 2024 by rpki-client on console-ams.rpki-client.org