Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa
File:                     3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (raw, json)
Hash identifier:          jXDgy/eb14qmJfmNT0dKlIUN6+pIglpydCTus9xQXkw=
Subject key identifier:   91:9A:90:36:7C:D8:AE:BD:A2:5D:0F:53:7C:6E:CA:87:93:95:F7:D6
Certificate issuer:       /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial:       565363080BB8E63901B8FEDA4B91BBC4D9053B19
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa
Signing time:             Sat 08 Jun 2024 12:00:01 +0000
ROA not before:           Sat 08 Jun 2024 11:55:01 +0000
ROA not after:            Sat 07 Jun 2025 12:00:01 +0000
asID:                     149705
IP address blocks:        103.158.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl
                          rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:53:63:08:0b:b8:e6:39:01:b8:fe:da:4b:91:bb:c4:d9:05:3b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
        Validity
            Not Before: Jun  8 11:55:01 2024 GMT
            Not After : Jun  7 12:00:01 2025 GMT
        Subject: CN=919A90367CD8AEBDA25D0F537C6ECA879395F7D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:39:69:8c:04:14:80:c0:5e:5b:33:71:0d:
                    55:42:fe:d1:08:8b:80:55:7b:74:f0:2e:ee:d4:ef:
                    3e:51:61:14:8a:6c:02:c4:a9:f8:12:84:29:4f:14:
                    24:c4:cf:76:2c:a8:03:3e:3a:ea:90:94:57:b6:a7:
                    4e:51:82:e8:21:b3:3b:ca:d0:44:6d:7c:71:91:59:
                    5e:06:f9:dd:aa:da:0b:16:72:9b:f0:9b:e9:39:49:
                    26:f0:30:76:a5:3f:2a:d5:3c:ab:8b:70:3c:de:80:
                    00:d8:f9:85:e0:4b:cc:2f:6d:96:8e:89:73:72:7a:
                    08:f8:c9:db:5c:b3:08:97:81:73:49:b5:f7:d6:db:
                    0a:23:0a:cf:03:c5:1c:13:aa:7e:64:2e:b2:92:f2:
                    23:8c:15:2b:95:b1:be:91:1e:84:53:f4:5d:38:a4:
                    e1:9e:58:a1:93:ac:c9:98:f7:8c:d8:c6:71:5f:9d:
                    b4:ab:cc:90:53:43:78:fe:e8:e9:eb:46:cc:20:c1:
                    0b:e3:da:24:fe:8e:fb:a0:db:56:fe:98:f7:17:58:
                    11:32:3f:b1:31:b7:76:22:0c:ff:c9:f4:d1:05:c0:
                    4f:51:53:cc:37:9f:64:40:5e:00:81:89:a9:e7:b0:
                    41:ad:e7:88:54:e9:ae:0a:01:05:2d:0c:d8:ae:d8:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9A:90:36:7C:D8:AE:BD:A2:5D:0F:53:7C:6E:CA:87:93:95:F7:D6
            X509v3 Authority Key Identifier:
                keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:ec:74:d0:73:b9:4c:05:2d:9c:ad:0b:59:f0:70:05:38:ab:
         b4:fa:30:3c:32:3b:c0:36:30:1d:17:bb:de:40:ad:6d:c1:44:
         09:39:27:ca:d6:cb:10:37:bb:73:51:4f:08:e3:a5:a2:15:5f:
         30:97:7a:35:16:d4:fd:d4:36:e0:99:76:29:df:d7:35:3b:fb:
         ae:5c:c1:18:d6:97:f9:33:96:24:e5:0b:80:27:88:f0:23:0c:
         0c:d0:cb:4d:ec:75:d1:a0:93:73:4f:5a:70:16:19:15:6c:b0:
         d7:19:66:47:a2:9c:84:98:9a:7b:f2:c4:c0:a4:eb:15:26:84:
         69:ed:a0:3a:97:5b:fb:f7:8e:9b:b8:bd:1a:a1:3c:54:de:5e:
         b4:c5:22:b3:5a:27:e9:64:f4:3c:7e:ae:50:23:da:ae:6a:79:
         17:cb:33:b7:d7:05:6f:b7:95:e7:03:1f:b2:51:5e:17:2b:bf:
         bd:4b:7a:24:99:bf:9d:ee:e2:70:bb:da:dc:a2:5d:c9:92:f8:
         7f:64:35:45:5b:41:3b:4c:0e:12:e4:2b:e0:01:13:44:04:e4:
         54:76:dd:b6:08:12:c7:a7:14:3e:5e:c5:c0:2f:99:1a:50:2d:
         21:2d:0f:88:f0:00:ba:0e:53:fc:56:27:a2:18:28:eb:80:15:
         6b:0d:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org