Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa
File:                     3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          EKtGUZIRCpNoGmhtlhOhyqc0zqoMHDxaoCUYH4QDF8w=
Subject key identifier:   26:13:D2:D4:3C:04:EB:38:78:AF:29:D3:CA:37:9A:B4:13:D4:C6:AF
Certificate issuer:       /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
Certificate serial:       564F7BF4BADBDEBBBA54074A273D5D4F1A69F685
Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa
Signing time:             Tue 23 Apr 2024 05:00:01 +0000
ROA not before:           Tue 23 Apr 2024 04:55:01 +0000
ROA not after:            Tue 22 Apr 2025 05:00:01 +0000
asID:                     17995
IP address blocks:        103.164.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl
                          rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4f:7b:f4:ba:db:de:bb:ba:54:07:4a:27:3d:5d:4f:1a:69:f6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30
        Validity
            Not Before: Apr 23 04:55:01 2024 GMT
            Not After : Apr 22 05:00:01 2025 GMT
        Subject: CN=2613D2D43C04EB3878AF29D3CA379AB413D4C6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:ac:a9:06:95:67:1a:5b:71:57:13:f5:a1:
                    98:77:87:ff:ff:6c:ce:ff:13:19:10:9f:91:4c:17:
                    f7:22:4e:d8:83:ff:be:63:42:91:b7:39:aa:2c:54:
                    35:3c:58:e4:23:a9:ba:a0:74:67:0f:49:e6:f6:a4:
                    27:d1:4d:98:3c:b4:3c:4e:57:65:03:ac:83:63:9b:
                    43:44:90:53:6a:93:23:83:db:0d:a5:3f:c0:19:e8:
                    32:b9:ba:7d:b0:72:63:6d:8a:aa:2f:1d:0a:3d:62:
                    f7:0b:fd:3d:f6:1d:f9:b5:26:e4:3f:15:e3:77:ee:
                    fb:53:7d:84:41:29:53:33:9b:b7:1a:ce:d4:cb:d1:
                    f8:85:28:5e:92:15:d7:2e:1a:60:78:2e:f7:29:ab:
                    bc:6f:5e:24:be:74:9d:0d:5a:3b:bc:34:f6:3b:79:
                    7a:c3:db:55:cc:70:b0:f0:43:a2:05:59:d9:a9:93:
                    85:17:8e:c0:0d:4d:83:e1:76:f9:a8:7d:81:65:00:
                    72:8f:ee:60:11:aa:be:90:9c:36:9a:84:6c:3b:1b:
                    83:79:99:e0:3e:39:2a:37:7c:1d:4a:f3:d2:d5:41:
                    ab:37:e4:ed:83:2e:a4:b0:b0:61:c7:dd:a9:8e:e3:
                    d5:c6:2a:35:5e:ae:15:5a:e9:c4:54:fc:f5:05:43:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:13:D2:D4:3C:04:EB:38:78:AF:29:D3:CA:37:9A:B4:13:D4:C6:AF
            X509v3 Authority Key Identifier:
                keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31362e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:72:ad:d4:d1:15:d9:47:f8:bb:cf:43:28:97:98:40:1c:c4:
         f3:12:59:2f:7d:27:da:c5:ee:ec:c5:19:0d:2e:7e:b1:44:03:
         02:c6:72:8e:b5:74:18:40:8b:86:70:8b:b7:27:b9:38:9c:4f:
         d4:d0:91:6b:6d:fa:e6:25:66:18:f0:c7:27:08:26:7c:e2:9a:
         95:dc:c5:27:aa:45:f6:26:b5:85:c8:a2:38:32:d1:50:50:f6:
         b3:7f:77:c2:7b:b6:63:d8:26:f9:fe:90:ab:31:41:fb:54:51:
         1a:58:7b:d2:9e:ee:19:6b:d8:30:22:90:1d:64:5e:c8:21:f0:
         15:c0:4c:47:b7:81:a8:f3:6b:c3:58:9a:3d:33:36:4a:83:08:
         54:f1:89:32:d6:f1:27:22:c3:a0:cc:6a:a6:a8:8c:15:c7:ea:
         4d:aa:f4:3c:fa:9a:dc:43:58:b1:7a:10:24:0d:02:e6:22:b7:
         fb:06:0f:67:03:13:58:91:bd:92:2d:b5:47:8f:94:4e:03:cc:
         1a:b4:63:81:1b:a4:aa:b7:35:1c:6a:2b:7d:b8:98:ea:fa:5f:
         c9:18:a5:ab:dd:92:10:4f:79:b8:6b:2d:13:4f:11:47:5d:56:
         99:44:88:dc:7a:85:cb:bf:3c:86:67:6e:c8:06:74:33:07:43:
         71:3b:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:24 2024 by rpki-client on console-ams.rpki-client.org