Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa
File:                     3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (raw, json)
Hash identifier:          4RriOrJrgRmm8TVWDrA9B41vx60bIoOBHkOPfEn1Ot0=
Subject key identifier:   8F:C5:97:48:A1:FF:5F:2A:98:D1:96:CE:73:49:0E:48:37:B0:C1:64
Certificate issuer:       /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7
Certificate serial:       14F2E62DCA891837D85859E3A2E7FAE7ADAFF313
Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa
Signing time:             Mon 13 May 2024 09:02:09 +0000
ROA not before:           Mon 13 May 2024 08:57:09 +0000
ROA not after:            Mon 12 May 2025 09:02:09 +0000
asID:                     138096
IP address blocks:        103.160.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl
                          rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f2:e6:2d:ca:89:18:37:d8:58:59:e3:a2:e7:fa:e7:ad:af:f3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7
        Validity
            Not Before: May 13 08:57:09 2024 GMT
            Not After : May 12 09:02:09 2025 GMT
        Subject: CN=8FC59748A1FF5F2A98D196CE73490E4837B0C164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:52:ca:bf:a5:b1:89:6b:be:fe:17:37:01:31:
                    ac:30:0b:5f:4d:4b:40:18:a8:a0:42:46:4a:d3:42:
                    97:81:0d:f3:5d:7f:50:24:3f:74:df:c7:3d:43:7b:
                    8c:5e:f2:c3:ac:96:be:76:62:14:26:19:01:16:02:
                    aa:9a:8a:15:98:a8:f0:2a:e4:5c:53:8a:fd:6d:d3:
                    5c:c3:33:fe:bd:c6:63:b8:66:07:2f:36:30:76:81:
                    06:9e:e4:60:a0:63:ad:17:df:29:56:22:87:72:b3:
                    01:5c:0c:98:53:a4:c0:4f:eb:80:e0:79:c9:e3:6b:
                    62:9d:9c:50:05:bb:2e:04:88:eb:c3:43:76:d3:46:
                    da:6f:03:b4:54:6d:d7:9a:e7:e0:89:b1:33:1c:0a:
                    28:43:d6:c0:b8:e5:45:47:29:63:06:6c:66:b1:a4:
                    90:62:2f:f3:fa:f0:f0:3c:df:89:30:8b:2f:4c:10:
                    0b:49:5f:23:83:ad:78:71:e0:da:77:8b:16:eb:f9:
                    7f:5a:34:be:c3:88:83:03:3c:17:e1:c7:8a:f5:20:
                    27:fd:78:3e:40:86:ae:25:89:ae:54:9b:53:1f:68:
                    69:65:5f:d8:d8:aa:bf:bf:f2:d0:6d:a5:24:41:c0:
                    68:f8:a4:bf:b3:eb:1d:e5:cd:e0:b1:3b:a0:27:99:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C5:97:48:A1:FF:5F:2A:98:D1:96:CE:73:49:0E:48:37:B0:C1:64
            X509v3 Authority Key Identifier:
                keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:33:14:e4:68:d1:8b:c3:9b:3e:c0:ff:16:a1:7d:c8:87:
         74:39:40:a9:84:cd:33:a3:7e:86:b3:f3:bc:4c:6d:9e:f0:2c:
         45:51:8d:cb:4b:03:85:4b:48:f0:8e:61:d1:1a:7d:3c:07:6b:
         07:7e:a5:ff:80:72:a9:cd:a1:11:17:7f:5b:59:85:ea:bd:d9:
         57:d3:ea:a4:f2:53:6d:2b:c3:c6:d1:f6:73:7b:51:c7:cf:8b:
         61:a1:dd:6b:78:4d:b0:af:98:57:c3:9d:ea:bb:eb:fe:77:2e:
         05:6d:ed:56:1a:b5:81:52:e8:92:99:34:e4:99:b9:c6:66:36:
         94:cd:d9:98:a8:d6:07:1a:0c:32:92:35:48:c5:6e:28:79:f5:
         f5:fd:20:8f:9a:a9:d7:bb:af:2e:29:85:3c:cf:8d:c3:cb:98:
         9a:17:b3:1f:6f:cd:bd:11:eb:d4:79:cf:2c:4b:4d:68:34:7b:
         fd:8a:42:93:22:ea:bf:a6:ac:03:aa:df:72:8e:f1:6d:b6:4e:
         2e:43:23:2f:e3:2e:74:a6:28:52:e2:7f:6d:dc:75:90:63:26:
         80:1f:0b:00:23:9d:bf:40:f7:0b:f8:f5:02:58:bf:23:6a:2e:
         b8:bd:f1:2b:6d:dc:a4:61:eb:05:14:b3:17:b7:e5:c4:22:92:
         49:e7:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org