Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          JSbemtw0sQDA/4qW32kvdNZGPKSK5JNVXpzWcYCFX30=
Subject key identifier:   3D:0E:E4:39:60:06:67:E9:8A:6F:8E:44:10:96:BC:EC:E2:3E:2A:74
Certificate issuer:       /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
Certificate serial:       43BB59D085618EEAC28E158FE63D5A266C6ED9A1
Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa
Signing time:             Fri 08 Dec 2023 11:00:02 +0000
ROA not before:           Fri 08 Dec 2023 10:55:02 +0000
ROA not after:            Fri 06 Dec 2024 11:00:02 +0000
asID:                     141909
IP address blocks:        103.164.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl
                          rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bb:59:d0:85:61:8e:ea:c2:8e:15:8f:e6:3d:5a:26:6c:6e:d9:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001
        Validity
            Not Before: Dec  8 10:55:02 2023 GMT
            Not After : Dec  6 11:00:02 2024 GMT
        Subject: CN=3D0EE439600667E98A6F8E441096BCECE23E2A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:22:a5:cd:59:7a:70:6a:d7:3e:ce:0c:c5:
                    f6:d6:bd:b0:7e:72:e4:d5:fc:cc:24:05:21:4b:1d:
                    71:34:ba:76:69:df:bf:1d:89:a7:28:f0:24:d7:18:
                    dc:64:7c:f6:cb:df:65:c7:bb:d5:f2:e2:92:aa:d5:
                    5c:7a:47:4f:23:2f:c4:eb:06:fe:5c:c3:4b:cb:06:
                    7f:07:0f:50:fa:ee:2c:46:96:ad:db:bb:55:e6:8c:
                    c0:74:6d:95:14:95:c4:25:15:70:6a:1c:a5:cc:34:
                    92:5b:c3:31:9e:45:10:f1:00:56:59:9a:6c:6b:f5:
                    fc:f5:d0:97:58:a4:d2:40:0c:62:7c:de:70:04:76:
                    82:53:34:01:8d:68:40:0a:8a:fd:cd:91:5b:cc:a0:
                    86:c5:6f:0b:be:bb:b9:b9:e6:04:c3:65:fa:a2:35:
                    bb:29:5f:14:6c:db:a3:55:a6:95:f4:1c:1b:32:77:
                    b5:8e:93:f6:1f:38:e6:d0:3c:c5:0e:7e:08:54:7c:
                    68:87:86:b1:a0:91:90:19:a3:0b:1d:3d:0d:22:ab:
                    20:ad:18:76:4f:ff:c2:c7:75:e7:8f:e3:d3:69:9b:
                    ea:4a:37:5c:67:66:f6:65:df:15:17:fd:42:f8:9c:
                    48:1b:91:73:ce:15:93:58:00:40:0d:6e:df:7d:87:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0E:E4:39:60:06:67:E9:8A:6F:8E:44:10:96:BC:EC:E2:3E:2A:74
            X509v3 Authority Key Identifier:
                keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:15:a0:bb:ae:4b:e7:a4:86:63:a1:c4:2d:42:75:f0:cd:33:
         20:7b:32:ec:31:67:ba:0c:66:87:cc:e6:e0:c8:13:bb:d2:58:
         d6:28:bd:55:8f:fd:11:2d:be:f2:65:83:66:df:59:7e:6f:e2:
         a0:45:df:c9:65:94:5d:79:43:83:4d:83:d6:fe:f4:a6:36:1a:
         a3:7f:a8:40:de:ed:43:bf:4a:c3:08:20:39:88:13:03:29:25:
         fd:ad:28:95:33:38:18:b0:3a:56:71:79:b8:de:06:3d:24:93:
         80:95:96:88:0a:6e:5f:0a:20:7b:32:63:54:e6:b6:88:90:1c:
         d6:11:1f:bc:68:d0:da:39:a6:cc:2f:30:36:ec:7b:8c:d4:cd:
         ce:bf:91:15:c0:a9:0f:da:e4:fa:02:6d:f6:99:34:35:fc:84:
         74:2d:8e:0e:4c:b3:c2:95:c9:de:20:9c:eb:7b:3c:b4:db:a2:
         f2:ba:35:11:5f:24:c6:a9:cf:63:35:25:2e:0d:c5:c2:4c:89:
         46:59:18:0e:58:d4:26:c1:ec:7f:89:35:4a:a9:48:22:b4:7d:
         71:af:b9:d4:ad:b4:d1:9c:d9:34:d2:50:48:75:c8:34:c9:f0:
         f8:05:ba:e7:ab:2e:75:3f:d3:71:6e:53:5e:2c:c6:88:ae:2f:
         a1:9c:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:29 2024 by rpki-client on console-ams.rpki-client.org