Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          h0k8rz1v/+LMLzPa9cwssYfHs5GKBPWBZA56yzocfIs=
Subject key identifier:   60:86:36:CD:8E:70:D4:EB:95:90:42:3D:17:93:0C:92:C0:1C:D2:3C
Certificate issuer:       /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial:       5DEA18A2DA11DB4A28B92CD7A256C5952FBFF187
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa
Signing time:             Fri 17 May 2024 16:00:01 +0000
ROA not before:           Fri 17 May 2024 15:55:01 +0000
ROA not after:            Fri 16 May 2025 16:00:01 +0000
asID:                     141674
IP address blocks:        103.171.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl
                          rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ea:18:a2:da:11:db:4a:28:b9:2c:d7:a2:56:c5:95:2f:bf:f1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
        Validity
            Not Before: May 17 15:55:01 2024 GMT
            Not After : May 16 16:00:01 2025 GMT
        Subject: CN=608636CD8E70D4EB9590423D17930C92C01CD23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:38:65:af:6c:ce:f8:81:6c:49:67:04:2a:
                    64:ef:48:b4:b9:e8:9d:79:df:1d:fe:47:8f:b7:e9:
                    97:03:50:53:ca:18:e1:4e:0d:da:05:e5:0e:b1:1b:
                    40:88:e6:1f:12:76:a5:72:56:79:fb:36:91:6b:f5:
                    2c:69:21:7d:aa:16:eb:ec:47:bd:cb:dc:fd:75:5d:
                    1c:1f:85:28:c6:ad:a2:77:34:26:9c:b8:89:f5:5e:
                    f1:6b:3d:3e:6a:05:53:18:60:be:a5:5c:51:27:5e:
                    ef:14:09:3c:c6:11:b8:2e:fa:98:bc:50:bc:12:95:
                    48:ff:75:f4:48:b7:85:aa:d7:84:89:c3:0c:22:4b:
                    27:d1:d2:ab:60:27:17:e8:fe:4f:78:ed:09:ac:51:
                    b5:ac:ed:30:f3:cd:f0:8c:55:67:47:46:b9:62:4e:
                    db:79:87:f0:16:2e:96:eb:76:bf:42:77:9a:74:66:
                    93:bc:b7:e0:08:1d:47:c1:dc:64:f6:e7:52:db:8a:
                    7b:90:49:47:37:c9:c7:e5:64:f3:1e:c6:3d:bc:b4:
                    c2:2e:8b:95:e3:e3:db:36:46:85:c0:f0:f6:2e:8c:
                    4e:ed:88:23:cd:b8:82:c2:22:4b:c4:f7:2a:33:61:
                    aa:82:63:02:1b:12:9d:5d:7a:4c:dc:bd:26:f6:d7:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:86:36:CD:8E:70:D4:EB:95:90:42:3D:17:93:0C:92:C0:1C:D2:3C
            X509v3 Authority Key Identifier:
                keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:d4:23:aa:a9:07:8b:e9:4d:ad:d0:29:3f:73:ee:1e:c1:
         59:b6:25:68:91:b9:cd:b5:e2:2c:e9:ef:1b:2b:44:3a:9d:ee:
         25:8b:1a:32:32:82:5b:4c:87:d3:4e:1b:7e:cf:88:5b:a0:8b:
         19:3d:a4:24:00:3a:d9:d0:0b:22:1f:1b:a9:d3:64:00:16:71:
         a9:fe:df:37:0b:b8:d5:8e:08:d6:32:8a:ab:b5:a6:27:8e:2b:
         05:cb:16:93:dd:10:a1:f4:05:1d:e8:5c:fa:5d:43:54:0e:56:
         bb:69:1f:24:d5:8a:d9:22:83:80:00:bd:a1:3b:c3:f9:3e:c5:
         9b:21:df:d9:55:83:5b:33:8f:f4:83:05:dd:a4:bb:d7:a4:ed:
         4d:32:28:ae:5f:f7:76:69:91:8b:b9:56:8c:8f:62:c8:d9:42:
         54:ad:a8:61:9f:fb:88:ef:fa:22:b1:6e:db:63:a2:bf:3d:1d:
         34:e2:d4:83:38:ec:92:b5:4c:1f:9a:24:a5:30:a2:a5:ff:ee:
         b3:3b:91:1c:f5:3b:92:cd:6e:41:24:b4:d3:49:6c:61:a1:04:
         b6:39:5d:bd:ac:84:c1:44:19:ca:48:83:f0:57:b7:49:9e:2f:
         ac:e0:09:aa:92:dc:47:e3:a9:d1:08:ed:27:a4:be:4a:01:43:
         d2:90:3d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org