Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa
File:                     3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa (raw, json)
Hash identifier:          EujBjxRJYNH/sI1Xc4HHljSrMpppuOLQjoCrFaHP+ps=
Subject key identifier:   EF:2D:35:D1:41:FA:B5:F6:97:7F:CD:6B:EF:57:35:23:2E:68:AA:C8
Certificate issuer:       /CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
Certificate serial:       566893E02596E8A7B4B0497AE7301992BA421DF5
Authority key identifier: EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa
Signing time:             Wed 01 May 2024 07:01:50 +0000
ROA not before:           Wed 01 May 2024 06:56:50 +0000
ROA not after:            Wed 30 Apr 2025 07:01:50 +0000
asID:                     142315
IP address blocks:        103.168.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl
                          rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:93:e0:25:96:e8:a7:b4:b0:49:7a:e7:30:19:92:ba:42:1d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCC7BEA840185763FF7624CF3DDE00563137A27
        Validity
            Not Before: May  1 06:56:50 2024 GMT
            Not After : Apr 30 07:01:50 2025 GMT
        Subject: CN=EF2D35D141FAB5F6977FCD6BEF5735232E68AAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:d1:1d:29:33:7a:44:e6:55:11:6e:6e:71:
                    e0:cb:62:a9:7b:be:60:44:22:45:88:60:f0:f3:12:
                    ea:74:f9:58:7f:23:f2:c7:bd:26:5d:31:71:a6:8e:
                    40:2b:9b:21:eb:9f:87:0f:7b:d6:c4:f1:74:df:27:
                    57:c7:9e:3a:15:52:b3:1c:a6:3c:6e:a2:6d:70:2a:
                    c2:98:5a:4e:c8:88:9a:41:35:20:f0:2d:c5:e1:41:
                    b0:14:06:0b:7e:ca:e8:17:3d:24:3e:fd:61:4d:07:
                    43:c5:5c:84:78:c4:87:4f:99:3d:d9:f2:fa:7e:f8:
                    22:1c:1f:64:b5:09:d2:5e:24:87:55:7b:49:66:3f:
                    d7:5d:21:08:6f:96:05:6b:21:e1:b9:19:ae:43:d1:
                    81:37:bc:d1:89:c7:d2:06:3b:06:f5:96:30:a3:04:
                    ef:17:35:74:54:81:cb:30:3b:ff:0c:4e:ce:3f:84:
                    d3:b5:f5:1b:cc:13:b9:45:1f:7d:14:2b:34:26:9f:
                    45:00:bb:c9:7f:46:fc:28:81:e0:54:60:48:98:b6:
                    59:9a:f5:e7:fb:e7:97:f1:0c:a0:75:7f:6b:00:84:
                    10:d2:70:f8:6b:66:0c:ba:a4:70:98:03:00:8f:9a:
                    41:ab:22:73:99:17:78:3c:45:80:ac:6b:06:66:5a:
                    9a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2D:35:D1:41:FA:B5:F6:97:7F:CD:6B:EF:57:35:23:2E:68:AA:C8
            X509v3 Authority Key Identifier:
                keyid:EF:CC:7B:EA:84:01:85:76:3F:F7:62:4C:F3:DD:E0:05:63:13:7A:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/EFCC7BEA840185763FF7624CF3DDE00563137A27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFCC7BEA840185763FF7624CF3DDE00563137A27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0dd078fe-0930-45dc-b403-3ce4e863f8b5/0/3130332e3136382e3134392e302f32342d3234203d3e20313432333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:79:fc:ab:4c:b1:72:9e:f3:ff:64:8c:cd:bc:28:79:e2:ac:
         32:09:a5:1f:97:24:b8:2e:ee:2a:d6:9a:9e:4f:ec:dc:5e:8b:
         4d:86:5f:c7:5c:d9:f1:3a:d3:a4:fa:f0:05:14:9d:27:a9:0d:
         2e:ca:18:24:e4:98:0f:f0:6e:69:c3:9a:fe:56:a1:18:a4:81:
         94:4d:5a:f8:bf:54:e2:7c:a0:98:8b:f0:b0:75:09:18:4f:f2:
         c7:2a:0b:9f:c4:66:01:ec:06:aa:01:f8:e8:50:9d:d3:c8:27:
         50:da:ad:3c:00:0d:ad:6c:82:5b:d4:36:ab:4a:6a:ff:d3:0f:
         33:60:fc:7d:0c:b4:42:80:ef:90:9e:a9:6f:7d:7d:9a:63:43:
         21:0e:89:42:d0:56:2b:f0:3c:63:81:a6:71:6d:19:e3:73:fb:
         90:e6:44:db:8f:c3:55:b6:a5:68:46:c4:41:55:48:14:94:6e:
         f7:d0:14:58:e3:f0:76:29:78:cc:ae:e5:92:26:49:5e:b8:bf:
         3f:e3:c1:75:be:9e:85:0f:a2:b3:e3:ea:67:50:d2:53:af:06:
         47:02:2e:0b:7d:d7:20:9f:b8:68:f3:af:32:c5:79:ff:9d:a0:
         fd:49:47:18:38:d1:70:ae:54:5e:36:ff:dd:d4:8a:69:fb:cf:
         c3:3e:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org