Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa
File:                     3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa (raw, json)
Hash identifier:          N1Q6k13UXvmF0UVW2Laxw5/1EHOb2sIrXdVmfolof9I=
Subject key identifier:   CE:DB:79:DD:5F:81:BF:09:CC:2D:F2:86:EF:7A:B6:F8:2A:C2:EF:89
Certificate issuer:       /CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34
Certificate serial:       3A868EC7E1900B64D29F31A333021A2E9EFAF799
Authority key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa
Signing time:             Sat 17 Aug 2024 11:00:00 +0000
ROA not before:           Sat 17 Aug 2024 10:55:00 +0000
ROA not after:            Sat 16 Aug 2025 11:00:00 +0000
asID:                     141921
IP address blocks:        103.165.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl
                          rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 00:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:86:8e:c7:e1:90:0b:64:d2:9f:31:a3:33:02:1a:2e:9e:fa:f7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34
        Validity
            Not Before: Aug 17 10:55:00 2024 GMT
            Not After : Aug 16 11:00:00 2025 GMT
        Subject: CN=CEDB79DD5F81BF09CC2DF286EF7AB6F82AC2EF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a8:49:bc:90:1c:3b:a5:3a:99:dc:83:36:e5:
                    09:7b:67:69:c4:37:38:c9:f9:3d:5d:5b:23:c3:17:
                    c9:56:b4:70:53:a3:93:e2:2e:e5:7f:37:8e:f6:d9:
                    4d:0e:67:98:af:9e:92:c2:45:fa:d5:28:b3:41:e6:
                    36:19:62:d5:5f:51:68:c0:7a:c6:63:d6:25:d5:1f:
                    96:3f:e4:ec:92:a7:61:c5:03:3f:ce:1a:ee:99:d5:
                    15:55:19:ff:91:40:db:b9:48:57:1e:66:8b:e4:28:
                    80:07:73:02:f2:c4:a1:31:a0:a6:40:d6:2d:40:70:
                    6f:ac:ed:7b:3e:ef:69:cf:c5:10:c4:ba:7e:50:c0:
                    8f:90:8a:d8:c6:55:e5:db:b7:51:52:05:14:7d:4d:
                    3c:40:27:6b:3a:50:28:12:9c:f3:a8:7e:06:0e:5b:
                    4e:74:af:d8:74:4f:f2:86:60:6f:c3:63:c3:71:c3:
                    d4:c5:a2:bf:6a:9b:6e:91:1c:38:69:15:98:9b:96:
                    0a:55:bb:4b:40:9e:76:98:e4:9b:e4:a8:3d:ba:23:
                    de:25:c1:62:98:cf:7c:2f:aa:ff:9f:eb:77:f7:d7:
                    2e:ab:5c:67:a2:42:b2:c6:04:71:e1:26:06:0f:c6:
                    ac:66:7f:eb:e2:b9:f1:fa:6b:c5:58:67:7a:c0:b0:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DB:79:DD:5F:81:BF:09:CC:2D:F2:86:EF:7A:B6:F8:2A:C2:EF:89
            X509v3 Authority Key Identifier:
                keyid:9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/3130332e3136352e3135352e302f32342d3234203d3e20313431393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:93:ea:02:34:16:a6:f5:43:49:85:49:aa:0f:d2:68:4e:2c:
         a2:75:7f:2f:31:7d:f4:d0:15:9c:af:f4:9a:84:11:38:46:6f:
         e8:7f:4d:34:8b:18:c6:3b:42:8d:61:3d:85:a9:22:9e:8c:ff:
         ec:94:de:3d:99:ce:86:9c:d8:38:e3:68:cb:85:60:ad:2a:18:
         bf:66:5b:3f:19:2c:0f:da:f3:8c:5f:fa:a2:f4:d4:3b:d3:10:
         ed:5d:76:85:14:a9:f8:c2:46:c0:b3:c4:05:37:a3:53:2c:c1:
         fb:61:ed:02:db:a0:05:e6:d9:cd:3f:0c:ab:f6:5a:7f:03:35:
         33:63:cb:ff:5f:72:25:6f:ee:12:e5:2a:df:a2:57:6d:2a:ff:
         2f:bd:9f:0e:98:bb:83:bf:27:13:fe:f2:ce:98:25:49:3e:3d:
         2a:0c:81:12:2b:4d:1a:e9:41:28:5a:94:24:e0:fc:50:95:9b:
         c3:f2:d5:2f:93:ce:82:df:70:8d:13:6f:ce:47:21:62:70:b9:
         5a:85:18:8c:10:13:92:3b:67:55:6a:29:e4:44:73:a9:28:1c:
         ca:20:56:27:eb:c0:e9:a6:a9:ac:a7:c2:96:87:6f:7e:bf:c8:
         8f:08:29:04:0b:bf:78:a1:56:7b:ca:68:44:67:3f:8d:01:a7:
         ef:4e:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:05 2024 by rpki-client on console-fra.rpki-client.org