Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa
File:                     3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa (raw, json)
Hash identifier:          PVZ1yYGC/jgslayhCKgLwQXUE5218uVNFMeRwwnLhxs=
Subject key identifier:   1D:31:DA:83:83:6E:E4:8D:F0:8C:CB:53:78:23:58:F0:1E:8B:68:CB
Certificate issuer:       /CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
Certificate serial:       1729FBF4C0E093EC5BFE1EA86EC1CEB6AE545196
Authority key identifier: 64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa
Signing time:             Mon 27 May 2024 09:01:51 +0000
ROA not before:           Mon 27 May 2024 08:56:51 +0000
ROA not after:            Mon 26 May 2025 09:01:51 +0000
asID:                     141146
IP address blocks:        103.158.208.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl
                          rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:29:fb:f4:c0:e0:93:ec:5b:fe:1e:a8:6e:c1:ce:b6:ae:54:51:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64B46651D7B0C757E4AEDE01691F062FEEF15DB6
        Validity
            Not Before: May 27 08:56:51 2024 GMT
            Not After : May 26 09:01:51 2025 GMT
        Subject: CN=1D31DA83836EE48DF08CCB53782358F01E8B68CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:5c:61:62:f8:3b:4a:34:54:88:ec:b3:43:
                    be:f8:24:68:0f:00:3d:e4:70:80:31:26:ec:98:e3:
                    48:92:56:bf:6d:11:96:5b:cc:5f:7b:57:16:49:b0:
                    af:a6:93:0c:a0:48:58:6f:7e:a2:be:11:53:e7:71:
                    ed:b0:70:e2:69:34:19:af:d6:f9:77:59:33:ed:5e:
                    04:6d:a4:2f:43:09:b6:2d:2c:ad:b7:a8:f4:d9:2c:
                    f6:0d:84:b3:7b:93:0b:ac:e6:96:a9:3e:d7:61:b1:
                    c9:f4:73:6f:75:7a:87:2e:80:0f:5c:5c:bc:fe:ad:
                    80:29:32:ea:ea:c7:4f:d3:dc:25:6e:e6:a0:12:cf:
                    af:44:7a:65:a4:59:4c:d5:f3:3d:48:b5:56:37:5d:
                    d7:32:c3:29:ac:a4:84:0b:e2:3e:59:b1:35:74:4e:
                    0e:97:ab:d2:6e:ec:ad:4a:e9:ac:c7:9d:6d:92:ee:
                    bb:37:25:74:b0:c3:83:a7:ba:d5:27:e5:60:b6:dd:
                    84:ce:e1:ce:f8:ad:97:41:09:3e:56:6f:aa:84:70:
                    65:be:94:dc:42:47:d4:68:dc:1d:b5:9c:ef:57:78:
                    47:8a:ee:d6:4d:63:3f:26:b5:4d:06:ca:8f:ed:8e:
                    bb:b6:a2:3c:78:f3:3a:03:d8:c4:a6:77:57:2b:5f:
                    b7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:31:DA:83:83:6E:E4:8D:F0:8C:CB:53:78:23:58:F0:1E:8B:68:CB
            X509v3 Authority Key Identifier:
                keyid:64:B4:66:51:D7:B0:C7:57:E4:AE:DE:01:69:1F:06:2F:EE:F1:5D:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64B46651D7B0C757E4AEDE01691F062FEEF15DB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e705927-ec64-44f5-9c9e-c9a55a523b64/0/3130332e3135382e3230382e302f32332d3234203d3e20313431313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:41:40:1b:6f:21:eb:cc:85:00:99:8b:ac:4b:27:bf:43:
         e4:59:33:23:ef:2f:f6:ac:38:39:8c:fb:f5:4c:5b:64:83:3f:
         8d:38:01:ba:a5:33:c3:cf:4a:70:e8:d0:e3:1c:9a:73:d5:06:
         43:7c:2b:8b:67:79:c8:07:1a:4b:49:11:68:bd:41:ff:23:92:
         55:81:0f:57:85:9a:33:74:62:3d:45:31:8b:1c:ef:17:3f:74:
         65:88:3f:98:ae:76:83:8b:76:13:5f:51:48:c4:33:45:6c:92:
         a7:27:83:b5:4f:4a:48:3d:43:7b:7d:4b:ff:bb:9f:1b:85:6d:
         6d:69:2f:7e:94:74:f4:2b:0c:11:bc:da:d1:03:f1:96:49:95:
         a3:f6:2a:19:25:fc:5c:5c:02:34:13:d8:de:20:40:07:89:ba:
         c4:f7:18:de:be:f5:1a:19:b7:33:d5:e9:ee:6a:c2:74:b1:a0:
         50:a4:ac:3e:df:da:7a:90:d9:45:1b:d1:55:8e:b3:3e:98:c7:
         b3:b7:af:b3:f8:5d:b8:d9:11:43:6d:2c:93:a5:1e:9e:92:43:
         0b:24:69:d4:27:15:0d:4c:90:ff:01:be:64:06:85:79:91:51:
         0b:3b:47:76:2a:61:83:17:42:ee:9c:c5:04:67:64:69:b2:63:
         a2:c2:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org