Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa
File:                     3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (raw, json)
Hash identifier:          tPNYz7RNY9f6/naya32Z5Cu7LcYC7dUE3TJY0hUwFYA=
Subject key identifier:   BB:2B:3F:1A:85:53:BE:9B:81:06:C7:5E:9F:03:5D:2B:41:3B:BB:B9
Certificate issuer:       /CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
Certificate serial:       6D6DCE757CABE09C2B142DFFD280ACB8E71579CE
Authority key identifier: BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa
Signing time:             Tue 28 May 2024 02:02:00 +0000
ROA not before:           Tue 28 May 2024 01:57:00 +0000
ROA not after:            Tue 27 May 2025 02:02:00 +0000
asID:                     141935
IP address blocks:        103.166.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl
                          rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6d:ce:75:7c:ab:e0:9c:2b:14:2d:ff:d2:80:ac:b8:e7:15:79:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD9D1FA2782F66A5D2247CCF76F98733944DDB1E
        Validity
            Not Before: May 28 01:57:00 2024 GMT
            Not After : May 27 02:02:00 2025 GMT
        Subject: CN=BB2B3F1A8553BE9B8106C75E9F035D2B413BBBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:dc:df:ad:01:5d:b4:6c:0f:a9:3a:d5:d2:
                    bf:5a:6b:e9:d3:1f:45:27:b9:67:ff:30:35:0e:90:
                    5f:85:ba:82:b0:07:16:41:ba:bd:02:19:dd:ff:91:
                    3d:10:5e:b3:48:81:4d:03:37:4a:fc:04:a7:f7:82:
                    9e:e2:82:28:70:0b:70:a3:eb:6e:4d:b2:99:06:3c:
                    7f:0c:bb:1c:65:e5:50:8c:ff:5f:5e:3f:28:be:54:
                    5a:85:f7:fe:7c:0c:ad:97:84:07:3c:b9:11:96:3d:
                    e6:93:5c:ca:2e:4d:8f:71:65:7f:bc:04:73:fe:84:
                    0d:2a:63:f8:89:a1:86:be:4b:70:92:cd:68:74:92:
                    bb:7c:8d:e2:59:04:02:fd:9c:b5:85:cb:ed:e3:10:
                    65:e5:ce:4e:63:2f:e8:c1:40:61:27:6b:df:10:d0:
                    0c:4e:3c:62:fe:b6:ac:91:62:cb:7f:df:4c:22:bf:
                    5b:5b:22:8b:58:c4:62:68:9f:6a:f7:d2:bc:70:57:
                    a1:2e:95:b1:f3:24:5b:55:ae:0f:bb:3e:d5:a9:fe:
                    b4:67:80:55:9d:af:ef:2d:a5:95:8e:6f:f3:89:ee:
                    1a:6e:a2:74:1b:da:b7:cf:2e:44:48:19:ee:09:46:
                    e9:78:25:05:44:ca:78:3e:43:04:10:f5:37:72:ab:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:3F:1A:85:53:BE:9B:81:06:C7:5E:9F:03:5D:2B:41:3B:BB:B9
            X509v3 Authority Key Identifier:
                keyid:BD:9D:1F:A2:78:2F:66:A5:D2:24:7C:CF:76:F9:87:33:94:4D:DB:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BD9D1FA2782F66A5D2247CCF76F98733944DDB1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:53:67:72:72:92:07:b1:94:d6:75:07:12:5e:98:6b:ca:17:
         3e:53:b0:c0:bb:19:d9:64:94:9b:0c:42:71:0d:f9:0e:b7:f9:
         a0:07:6a:ad:6f:4e:8c:fe:31:b6:c8:2c:3f:a6:a2:99:1a:8f:
         f6:13:71:52:43:0b:35:e6:e4:43:d0:e8:95:62:8e:f6:66:2b:
         c4:a9:6f:c4:cd:5c:91:f0:34:d5:e7:02:4c:df:70:6e:bb:db:
         e9:52:f5:c5:04:15:1d:c0:3a:80:90:dd:3e:23:11:2e:15:be:
         7a:6d:f4:82:b6:5b:f5:6b:bd:d5:b0:8c:3c:51:ea:c3:55:db:
         8f:42:5d:71:43:01:1b:e2:df:dd:09:82:b1:8f:19:c1:2a:f4:
         e8:c5:b9:b0:6e:04:65:4f:f1:cd:b9:92:98:74:60:e4:1e:6a:
         9c:8f:47:f9:55:af:44:85:cd:31:66:ed:8e:36:02:b6:e0:99:
         8b:7f:1f:f6:ac:e7:1e:d3:13:37:4a:d6:63:dd:96:cd:81:fb:
         72:73:9f:12:87:23:04:ff:29:db:ad:2f:53:7c:a4:b2:9e:14:
         e4:d2:21:1e:c8:88:d1:3f:9a:58:d2:02:b8:04:40:e0:ce:5f:
         07:22:4b:ed:60:1c:d0:39:01:6a:0e:ea:7a:93:f2:e4:1b:dd:
         c1:0a:59:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:42 2024 by rpki-client on console-fra.rpki-client.org