Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          M812Lv0X3Nes93FyydCNMviRm48nar6LmkckI2wrws8=
Subject key identifier:   B2:DB:57:29:77:81:E6:20:8A:F3:FC:2B:A4:65:5C:29:77:15:91:A5
Certificate issuer:       /CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7
Certificate serial:       13A06E59082C23EA2784AFF4C78A669B01927DBF
Authority key identifier: 6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa
Signing time:             Thu 23 May 2024 04:00:00 +0000
ROA not before:           Thu 23 May 2024 03:55:00 +0000
ROA not after:            Thu 22 May 2025 04:00:00 +0000
asID:                     131111
IP address blocks:        103.158.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl
                          rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:6e:59:08:2c:23:ea:27:84:af:f4:c7:8a:66:9b:01:92:7d:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7
        Validity
            Not Before: May 23 03:55:00 2024 GMT
            Not After : May 22 04:00:00 2025 GMT
        Subject: CN=B2DB57297781E6208AF3FC2BA4655C29771591A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:12:a1:8e:d7:55:fc:12:4b:91:3b:85:da:
                    af:79:c2:40:a4:60:d8:a9:93:31:3f:8e:3d:53:e6:
                    f7:a2:82:58:9f:9b:61:ea:0b:dd:82:e6:7f:d5:21:
                    eb:70:9d:dd:af:6d:c5:e6:b6:61:aa:bf:3c:c0:0e:
                    cd:f4:53:db:1e:99:87:2c:04:bb:09:12:7f:73:e3:
                    fa:3e:a8:8f:40:22:46:2d:31:e9:46:56:06:4d:d8:
                    a1:e2:8b:b4:c5:b9:01:0b:fd:ef:a3:10:f7:e3:30:
                    ca:3a:fb:96:b7:5f:07:ba:5e:87:6a:7f:fa:1e:1c:
                    52:76:30:e0:17:db:5b:00:ae:56:af:7f:7b:ad:c9:
                    78:9f:cc:93:07:01:2b:a4:6b:23:ae:e9:55:9f:e2:
                    4d:d6:40:7b:8d:ad:fd:fe:15:04:a6:a6:f7:c6:d6:
                    c6:28:82:65:8b:1a:42:83:7e:52:b5:2f:8d:a2:64:
                    97:1f:1c:b8:b9:8f:90:4f:e7:73:50:e2:6d:85:a4:
                    ac:44:56:39:c8:e4:32:7b:b3:7f:32:89:49:14:39:
                    70:97:7f:3a:3b:4d:0f:54:cc:60:cb:42:a1:a6:c8:
                    30:b8:23:b4:b9:d7:b5:c0:b7:62:bd:c9:dc:8c:02:
                    cf:e1:c0:c2:35:d9:c7:aa:4b:bb:64:a7:c5:d6:60:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DB:57:29:77:81:E6:20:8A:F3:FC:2B:A4:65:5C:29:77:15:91:A5
            X509v3 Authority Key Identifier:
                keyid:6A:02:DC:10:F4:1F:CE:0E:B4:97:98:DD:BC:F3:1F:C9:C0:F2:E3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A02DC10F41FCE0EB49798DDBCF31FC9C0F2E3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a46bdad-f130-48a9-8534-54ba3e8ed61f/0/3130332e3135382e3139352e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:2b:d4:cd:e3:9a:df:2c:a9:be:11:14:59:c7:c3:bd:85:
         6f:74:f9:90:b3:1a:58:56:3d:40:04:df:1f:95:58:03:6f:23:
         2a:0e:24:8a:0c:1e:22:62:19:9c:7a:36:70:56:d4:e3:29:cd:
         90:d5:45:87:8e:14:1a:d7:e6:86:00:34:63:d5:03:c7:b0:f8:
         2b:6f:9a:07:37:7c:48:0b:ac:e2:7d:0c:dd:9a:f0:f3:9f:cb:
         ef:8c:1b:af:b9:74:14:e6:1a:c4:c8:8d:1d:e4:dc:83:2c:1e:
         8e:99:28:0f:aa:72:62:c4:7c:41:9d:48:65:39:67:84:08:3f:
         a8:4a:a9:cc:23:c0:b3:f4:9f:b6:e6:4a:b6:9d:42:88:bb:a6:
         94:a6:aa:d2:0d:75:94:76:b9:c3:d0:ce:e8:57:af:d7:67:b1:
         b3:93:c1:4d:0c:0c:0b:4e:2d:fe:13:d5:a0:3f:94:48:a8:7e:
         7a:4c:32:43:e8:f7:62:20:ac:e4:45:1e:87:83:16:2e:36:38:
         99:b3:c5:d3:cf:c2:b3:35:9d:0d:92:04:2b:79:90:1b:a4:58:
         e8:1e:4d:f1:3b:f7:28:60:e7:a4:17:bf:85:bc:65:00:76:bc:
         1c:0d:7e:60:bf:2d:25:4c:d2:cb:57:c3:9a:e8:13:78:ad:5e:
         c1:72:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:10:55 2024 by rpki-client on console-fra.rpki-client.org