Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa
File:                     3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa (raw, json)
Hash identifier:          3U68Ts0RvOTu4OL5+30EcAQOOZavIjRUa6C3PA7I4ag=
Subject key identifier:   AD:D6:D5:C5:08:56:E9:BA:96:21:82:E9:E8:C7:49:CF:57:24:8A:C1
Certificate issuer:       /CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
Certificate serial:       53C755A8572579EAFA7B00F6AE2D443EA916BD01
Authority key identifier: B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa
Signing time:             Fri 22 Mar 2024 08:00:01 +0000
ROA not before:           Fri 22 Mar 2024 07:55:01 +0000
ROA not after:            Fri 21 Mar 2025 08:00:01 +0000
asID:                     149315
IP address blocks:        103.186.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl
                          rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c7:55:a8:57:25:79:ea:fa:7b:00:f6:ae:2d:44:3e:a9:16:bd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45
        Validity
            Not Before: Mar 22 07:55:01 2024 GMT
            Not After : Mar 21 08:00:01 2025 GMT
        Subject: CN=ADD6D5C50856E9BA962182E9E8C749CF57248AC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:30:c8:2a:f8:e5:a5:28:26:56:f9:61:61:
                    c7:fb:d8:7d:d7:47:2f:5f:ec:c8:f0:ac:f0:4b:ea:
                    ed:61:67:5b:d7:0b:00:59:36:18:a8:de:99:10:ea:
                    11:3d:7f:29:55:5c:94:cd:7e:5e:e5:f5:4d:93:95:
                    2b:7b:06:68:84:06:43:ad:7c:cf:6d:c4:0c:de:50:
                    cc:96:ff:87:99:b2:af:2d:a0:a7:4d:2b:da:28:8e:
                    c2:2b:bf:08:0d:74:22:09:64:e9:c1:9d:aa:9e:23:
                    da:1d:34:44:f7:ce:eb:df:70:b6:89:93:26:92:ca:
                    4b:44:79:a6:aa:f7:4a:e0:f4:81:94:36:cf:f8:31:
                    a0:19:87:68:3a:a0:c3:76:c7:fd:ef:cb:eb:99:45:
                    3b:a5:25:f1:95:c8:75:8d:62:1e:ec:20:63:b5:3d:
                    8b:cc:61:d8:a5:83:ef:85:9c:f1:b0:17:2a:ae:a5:
                    1c:42:a8:2a:10:10:1f:fa:f2:b2:97:7d:dd:f4:48:
                    b8:cb:21:bc:98:81:64:0b:6e:09:a7:58:12:0e:32:
                    76:ad:0b:79:8b:cb:ae:ee:ef:65:26:b1:cf:30:46:
                    1a:43:ca:68:5b:cf:12:a9:8f:2b:07:ff:41:cc:33:
                    55:57:08:9a:d0:f2:1b:73:31:e9:b7:73:a1:94:aa:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D6:D5:C5:08:56:E9:BA:96:21:82:E9:E8:C7:49:CF:57:24:8A:C1
            X509v3 Authority Key Identifier:
                keyid:B0:FA:6C:3E:D4:78:0E:03:2B:0A:3F:16:1E:01:8A:7C:8F:A8:2B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0FA6C3ED4780E032B0A3F161E018A7C8FA82B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42713a32-fada-484e-a68d-0cac0fffa33c/0/3130332e3138362e3136382e302f32332d3233203d3e20313439333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:06:66:9d:fd:9b:ce:dc:11:c3:9b:ab:38:69:82:e9:b4:
         2b:3d:c2:97:fb:59:1c:a4:8c:3c:f9:e5:c7:1c:45:ba:08:f5:
         ca:9c:c2:e8:33:f1:fc:e5:20:a2:fd:b1:84:c2:a5:57:9e:56:
         ae:53:8e:48:b7:91:cf:62:6c:ec:7d:44:e1:02:d9:ad:d9:a5:
         bb:5e:7b:99:4a:c1:e0:a1:d5:3b:c5:9e:ec:04:77:4c:ab:88:
         7b:10:7e:9f:2d:34:19:96:64:0a:6a:98:04:91:d6:2c:6e:35:
         ad:65:99:8e:80:4c:e5:cb:d8:c7:9e:e0:d1:9a:49:47:b8:72:
         30:8c:f8:b0:df:2e:84:4d:03:0b:6a:ff:0c:d0:1b:30:c9:a8:
         60:ad:84:5f:b5:3d:08:8d:85:3e:2d:49:ce:4f:b9:04:db:30:
         6e:8a:2e:8a:63:27:47:08:71:24:20:c6:d0:29:8c:31:11:a1:
         ba:b0:2a:9b:55:aa:f5:1f:24:b2:20:e8:de:0c:1e:1e:e7:fe:
         26:f8:bd:98:55:00:39:7b:93:23:bc:fd:6e:06:7e:e0:d3:7b:
         3b:75:7c:8c:3f:9a:b7:9b:8d:e0:11:4a:16:97:a6:85:39:a3:
         2e:bb:3d:9c:37:a4:83:c6:df:e4:16:1a:8d:18:1d:c3:80:47:
         72:fe:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:39 2024 by rpki-client on console-ams.rpki-client.org