Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          NSww3I5p+NiZ7Rf6DK77P+3eiZ3xQlaEPT4qgCWJsgg=
Subject key identifier:   7B:99:7A:6B:B1:3D:20:FC:FD:C2:9E:DC:BA:25:A2:F2:16:82:C3:60
Certificate issuer:       /CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
Certificate serial:       01390E93EBF1E9F6AD648244E71C6AE924D52CCF
Authority key identifier: 67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 02 Aug 2024 10:03:50 +0000
ROA not before:           Fri 02 Aug 2024 09:58:50 +0000
ROA not after:            Fri 01 Aug 2025 10:03:50 +0000
asID:                     17995
IP address blocks:        103.167.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl
                          rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:39:0e:93:eb:f1:e9:f6:ad:64:82:44:e7:1c:6a:e9:24:d5:2c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
        Validity
            Not Before: Aug  2 09:58:50 2024 GMT
            Not After : Aug  1 10:03:50 2025 GMT
        Subject: CN=7B997A6BB13D20FCFDC29EDCBA25A2F21682C360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:eb:18:cc:61:c6:2b:1f:ba:9b:d4:dc:7e:
                    2b:28:1d:c7:ca:4e:2e:90:f0:15:69:99:89:ce:84:
                    6b:d3:9f:12:69:05:49:2d:b4:42:e8:49:c4:f3:31:
                    9f:9b:4b:7d:02:fe:a2:94:1a:db:31:ca:80:7e:70:
                    5e:2b:cc:f2:76:dc:ed:5d:06:8e:1f:66:ed:08:24:
                    e0:0e:8d:45:75:86:c2:2b:c8:6e:0d:35:d5:de:cc:
                    05:1f:17:6e:ff:a9:36:a9:61:e9:b3:b5:14:6c:58:
                    7f:46:ac:35:ec:54:44:16:6b:94:50:a6:53:f5:8a:
                    38:10:f8:6e:3c:9b:5f:a1:1c:72:94:7b:85:1c:ab:
                    9e:ef:ed:86:c8:0c:84:c5:38:7b:f2:c5:a7:6f:bb:
                    04:7e:c3:98:a9:8d:aa:88:65:ad:08:83:68:be:c0:
                    1e:17:31:9f:d7:bd:b4:57:59:78:d8:cb:91:d9:74:
                    03:73:87:f3:7b:a4:c9:b7:cb:26:67:34:8e:d4:c9:
                    e2:3b:0c:89:99:e2:9a:99:55:71:3d:1e:8e:3b:93:
                    e0:ab:d5:36:18:0b:91:78:00:11:23:b7:17:a2:4a:
                    28:ad:27:20:d2:5a:68:9d:cd:74:f9:73:4f:a7:46:
                    c0:45:52:b5:85:cb:85:ea:3b:b7:79:a5:b5:a9:e0:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:7A:6B:B1:3D:20:FC:FD:C2:9E:DC:BA:25:A2:F2:16:82:C3:60
            X509v3 Authority Key Identifier:
                keyid:67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:4e:86:8b:a1:77:3f:f6:98:f4:96:16:14:25:a0:bc:af:
         a3:30:a5:f8:36:82:c5:23:dd:94:7f:a0:1e:cd:5c:dd:7c:69:
         d2:f0:11:9b:6c:be:9b:fa:77:3b:05:8b:27:4c:00:52:9a:48:
         1a:d2:8d:08:28:89:61:46:85:c7:4a:e5:3e:a5:74:64:1d:d2:
         53:d8:c1:a4:fb:e1:60:8a:e9:79:80:a9:de:9c:b9:e3:87:03:
         33:86:33:63:78:ed:95:86:77:7e:10:7c:bd:d5:6b:01:32:21:
         7f:4f:a2:fd:0b:52:e8:7b:f9:a4:60:c6:50:b5:7b:75:f3:23:
         13:8f:13:54:64:65:f1:d8:63:b3:99:4d:0a:79:fb:00:44:d2:
         cb:e4:12:44:3c:2b:f0:85:e6:99:48:0a:5c:4c:79:6b:07:24:
         bc:2e:40:09:43:ec:70:27:16:97:1c:e6:89:d8:66:e7:54:fa:
         13:f2:33:78:32:8e:de:58:b1:aa:81:dc:61:1e:f7:cb:0f:4b:
         48:14:b3:16:f1:e6:0f:a9:72:49:9a:e2:02:2f:6a:ae:37:ca:
         80:4f:48:e7:68:2a:97:df:9d:10:df:6b:3f:ee:3d:ef:22:36:
         97:c7:b4:f0:05:0f:89:1a:67:ed:53:42:ab:1e:ea:7d:50:c5:
         9f:fc:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org