Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
File:                     3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (raw, json)
Hash identifier:          peneJHYvhq90jDluQhSOdNvN0hYgFgQvJvCEmEu7tWo=
Subject key identifier:   3B:F8:02:FA:60:C2:D6:27:8C:22:54:B7:AD:7C:05:E9:2D:8C:2D:8C
Certificate issuer:       /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial:       78E456A4166D7054EF02F747B54E22E5189E6848
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa
Signing time:             Wed 10 Apr 2024 12:35:55 +0000
ROA not before:           Wed 10 Apr 2024 12:30:55 +0000
ROA not after:            Wed 09 Apr 2025 12:35:55 +0000
asID:                     141928
IP address blocks:        103.166.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
                          rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e4:56:a4:16:6d:70:54:ef:02:f7:47:b5:4e:22:e5:18:9e:68:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
        Validity
            Not Before: Apr 10 12:30:55 2024 GMT
            Not After : Apr  9 12:35:55 2025 GMT
        Subject: CN=3BF802FA60C2D6278C2254B7AD7C05E92D8C2D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:76:d2:91:ef:82:cd:50:e7:7c:bc:1c:1f:
                    c0:5f:65:08:91:ea:ba:1e:88:a1:73:28:8f:03:ab:
                    1b:8d:3c:ec:29:c9:db:94:81:0c:05:22:34:cd:9c:
                    33:c4:85:c8:e7:b3:8f:a9:b8:a2:22:fc:e8:17:cf:
                    ac:61:40:13:e0:61:26:71:38:6f:20:24:09:e7:67:
                    9c:05:fa:d0:cb:f1:f4:19:16:fd:e9:5c:11:6c:b3:
                    6d:f7:9c:2f:da:54:de:47:29:8c:ef:ff:07:07:84:
                    81:86:88:24:c4:7e:7c:c7:c7:6a:90:d3:c8:91:73:
                    d9:60:4b:3c:c1:51:dd:80:0c:0e:68:d2:64:64:e7:
                    dd:24:d8:74:c8:c0:23:af:a6:2a:bc:51:e6:da:a4:
                    b6:a8:80:9f:fa:a7:8f:a2:47:88:d7:5d:64:ab:e8:
                    f1:70:7c:9d:5e:79:95:84:b6:ac:1f:6d:05:79:7b:
                    f4:e4:9b:0b:af:69:a3:43:a8:48:c5:44:28:66:7f:
                    95:94:22:8c:06:d4:77:97:23:b0:7c:08:6c:e4:96:
                    26:aa:90:88:71:14:0a:8a:7c:89:c6:a3:89:cc:67:
                    30:14:68:b9:37:74:2c:98:83:bb:a5:b5:30:b7:e2:
                    b0:28:4c:15:c0:9e:89:3a:1d:68:be:8c:36:63:9e:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F8:02:FA:60:C2:D6:27:8C:22:54:B7:AD:7C:05:E9:2D:8C:2D:8C
            X509v3 Authority Key Identifier:
                keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/3130332e3136362e312e302f32342d3234203d3e20313431393238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:71:47:3a:2a:82:0a:1a:87:8b:fc:25:e8:f9:71:a3:b0:25:
         d7:e6:56:f5:75:8c:85:f0:2f:38:43:a4:d8:ea:95:93:00:e0:
         12:30:32:c8:87:e6:43:ba:eb:94:65:d8:6a:9f:f6:7e:6e:13:
         4a:ae:83:65:57:2f:f2:0c:2f:33:47:96:bc:a7:07:de:56:b0:
         56:14:2d:75:7b:e0:3c:be:78:98:13:7c:ec:84:e2:8c:ed:7e:
         03:4b:31:a6:ec:c6:c0:28:c1:46:8e:82:87:0f:da:df:d1:b7:
         a4:6f:5e:44:36:e7:39:3e:77:c4:3d:b3:e5:9d:88:c1:10:0f:
         a8:ed:e5:06:3d:d9:cd:99:3f:89:60:95:29:f3:6f:7d:40:be:
         41:2f:d5:e0:64:89:c3:43:10:ce:c4:db:17:74:9d:46:a7:23:
         72:82:59:af:b5:0a:c2:66:82:a8:a0:4c:68:dc:4c:3d:82:8e:
         0b:45:45:42:f3:24:b7:c1:ec:7e:20:77:75:65:27:7b:63:05:
         dd:19:e9:e3:ac:7b:8c:6d:87:04:a3:c6:21:68:4d:2b:9d:21:
         d5:a4:75:32:22:b2:34:99:ea:d7:6e:a9:c1:57:4d:0b:ca:d1:
         cd:2c:7f:84:fa:8a:eb:ee:31:bd:d9:20:42:ba:13:68:be:2f:
         58:ae:ba:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:14 2024 by rpki-client on console-ams.rpki-client.org