Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
File:                     3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (raw, json)
Hash identifier:          zGPG1GzJe62mycRhj5hFCTf85aP4z1aKQIOi6ASWslw=
Subject key identifier:   3A:26:0E:36:61:C1:FC:B1:5D:A9:37:31:22:7F:5F:95:77:1F:34:B1
Certificate issuer:       /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Certificate serial:       2418DB554B7E27AA6F39ABBC061901499E441E41
Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
Signing time:             Sat 21 Oct 2023 07:00:00 +0000
ROA not before:           Sat 21 Oct 2023 06:55:00 +0000
ROA not after:            Sat 19 Oct 2024 07:00:00 +0000
asID:                     141617
IP address blocks:        103.161.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
                          rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:18:db:55:4b:7e:27:aa:6f:39:ab:bc:06:19:01:49:9e:44:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
        Validity
            Not Before: Oct 21 06:55:00 2023 GMT
            Not After : Oct 19 07:00:00 2024 GMT
        Subject: CN=3A260E3661C1FCB15DA93731227F5F95771F34B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d0:08:57:fe:fc:60:aa:81:ef:ea:8f:70:2f:
                    cb:a4:19:db:3a:c8:f6:81:c7:75:d1:51:2f:b3:9b:
                    a0:ea:7d:d7:f0:f5:a4:3c:ae:5f:95:f0:31:5f:08:
                    2a:4d:bf:39:57:a7:63:30:42:24:f5:c1:82:82:fe:
                    7d:18:01:e5:db:e8:e0:0e:35:ef:ec:7c:d3:1b:6c:
                    27:87:b0:bc:72:b8:b7:95:18:d2:53:d4:94:d0:11:
                    8f:db:b5:19:a2:d0:07:2e:5e:87:1a:d8:1e:cb:eb:
                    d8:13:84:a4:ba:1c:24:2d:b7:2a:f2:2a:c5:a5:b4:
                    87:41:0a:ea:e4:94:bb:ef:51:0c:36:da:9e:13:49:
                    98:aa:6b:3c:7a:fb:df:30:81:bb:58:4b:09:39:ff:
                    c8:8a:72:b1:d7:86:97:00:56:07:db:fa:04:e9:63:
                    9d:f8:db:fe:95:bb:db:50:b8:53:aa:5d:96:6f:73:
                    5d:1c:c7:cf:8a:62:d5:8f:ca:8b:b1:dc:b9:4e:34:
                    31:ea:51:25:74:dc:d5:f0:49:e5:3b:6d:38:72:43:
                    50:8b:1b:05:d4:ac:a0:29:12:ee:d8:9c:3b:02:a2:
                    c0:62:64:5c:28:f0:1b:26:26:37:4f:47:3f:ed:4b:
                    21:db:38:af:46:37:51:c2:c5:24:d4:2f:da:af:31:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:0E:36:61:C1:FC:B1:5D:A9:37:31:22:7F:5F:95:77:1F:34:B1
            X509v3 Authority Key Identifier:
                keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:b4:26:83:05:43:30:07:9d:d7:64:f7:58:4e:90:10:f7:
         29:bd:a0:ef:8b:aa:ee:30:7e:65:12:9c:e7:5e:60:ad:f3:86:
         ce:52:a8:c1:ac:a7:d3:db:06:9e:c3:a9:36:0c:88:04:25:25:
         b5:9b:f5:ac:90:a3:69:38:1f:46:f6:5c:ff:02:58:34:e0:a2:
         28:25:5a:a6:6f:12:aa:c0:e0:ad:2d:09:d2:ed:4f:c1:6c:f3:
         ba:37:6b:58:0f:6f:d5:87:16:c1:e4:86:8e:14:27:c3:8d:a9:
         b9:a9:2b:33:6f:d7:b6:cd:4a:aa:d9:b6:0b:c5:39:cb:06:c9:
         32:7e:88:86:ac:9c:87:56:72:f7:4a:e6:eb:71:0d:98:e4:66:
         2d:6f:c4:fc:8e:68:4a:fe:20:fc:9f:8e:f9:d0:05:1c:2e:4c:
         df:73:3e:38:f8:d3:b0:f3:b1:76:22:75:78:4e:5c:6a:1d:c1:
         03:c9:44:f3:04:ab:f2:f3:c3:2e:d8:55:45:33:da:08:26:a7:
         cd:b2:48:ad:a4:79:89:11:f4:0b:a5:be:f7:2b:1d:3c:44:c0:
         60:61:39:a5:6b:3d:1b:52:54:11:26:70:b6:d0:4d:d3:03:73:
         ae:3a:4d:ce:2e:bf:61:bb:8d:a2:09:b4:e3:0a:57:f7:47:72:
         73:6d:14:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:48:01 2024 by rpki-client on console-ams.rpki-client.org