Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
File:                     3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa (raw, json)
Hash identifier:          cPKbD0ckaDFSEpc9RQvjdQXKBtAJPiLm9+lhR0E/cUk=
Subject key identifier:   B3:9F:62:A7:FD:0D:7E:4B:2A:20:90:9A:55:17:90:9B:ED:66:C5:95
Certificate issuer:       /CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
Certificate serial:       5AC2262C1DC9A77AB2841414BB7CB22E52099FCF
Authority key identifier: EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa
Signing time:             Sat 21 Sep 2024 07:00:00 +0000
ROA not before:           Sat 21 Sep 2024 06:55:00 +0000
ROA not after:            Sat 20 Sep 2025 07:00:00 +0000
asID:                     141617
IP address blocks:        103.161.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl
                          rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:26:2c:1d:c9:a7:7a:b2:84:14:14:bb:7c:b2:2e:52:09:9f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA1FF21834CE2546B93FF7ABD7A24231492E6157
        Validity
            Not Before: Sep 21 06:55:00 2024 GMT
            Not After : Sep 20 07:00:00 2025 GMT
        Subject: CN=B39F62A7FD0D7E4B2A20909A5517909BED66C595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:5f:f6:42:85:3a:c1:e6:d1:19:6f:ea:07:
                    83:de:b3:af:95:35:7b:3b:8a:98:09:6b:a9:61:b6:
                    d2:ae:0b:46:ff:2f:70:37:ff:c7:28:24:6c:b2:fd:
                    b8:54:8f:19:cf:77:2d:33:88:bb:a8:d2:a4:0f:e0:
                    1a:d9:61:2d:42:f5:29:64:14:7b:5f:4e:7d:70:dc:
                    98:f9:6b:7c:02:64:47:ba:a2:f6:a0:b9:4f:bb:56:
                    a4:59:ed:62:6c:a2:cd:dc:fc:42:fe:c3:1b:3a:cc:
                    14:03:fa:8c:5a:6c:53:10:04:93:43:ea:01:a8:d9:
                    80:38:a6:ee:3a:70:8c:1b:eb:6c:42:87:9b:52:ac:
                    3c:64:b5:7e:b9:0c:58:53:7e:e9:dc:10:53:01:ad:
                    72:69:b5:4e:3d:a9:87:20:9a:c1:8e:71:28:db:02:
                    89:05:88:e6:4b:42:23:4b:8c:56:37:7d:2c:8a:1c:
                    a4:27:a4:eb:fc:2f:48:2f:75:4b:52:bb:0a:aa:0a:
                    21:13:23:0e:44:e4:c9:ff:66:97:d7:17:ba:9e:20:
                    d9:e3:56:2c:f6:9e:8c:f3:a7:b3:2e:6b:99:25:04:
                    3a:9e:9d:e3:61:51:97:2d:95:6b:ff:5e:8a:9f:7b:
                    ac:65:53:f6:c6:9f:7f:3d:83:2f:54:cb:3a:70:7e:
                    86:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9F:62:A7:FD:0D:7E:4B:2A:20:90:9A:55:17:90:9B:ED:66:C5:95
            X509v3 Authority Key Identifier:
                keyid:EA:1F:F2:18:34:CE:25:46:B9:3F:F7:AB:D7:A2:42:31:49:2E:61:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/EA1FF21834CE2546B93FF7ABD7A24231492E6157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA1FF21834CE2546B93FF7ABD7A24231492E6157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46118f2b-9f94-4199-a241-8fc51d17e0c5/0/3130332e3136312e3134392e302f32342d3234203d3e20313431363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:9c:ec:09:cd:c2:aa:1c:8f:dd:16:7d:67:a6:79:e7:80:
         ef:03:3f:b9:f0:7a:b9:aa:ff:07:ec:6e:5b:52:24:13:11:58:
         15:ed:20:ee:c0:c2:f2:09:ad:3e:20:a6:53:c0:06:4e:12:fe:
         d8:23:95:54:95:45:d7:fe:fc:6c:81:af:dc:5b:c3:41:5f:e5:
         26:8f:31:e1:71:e1:fd:2c:f3:ae:9c:29:44:44:4f:bd:43:29:
         c1:86:4e:82:46:69:e8:f3:d1:70:89:28:55:9e:e4:c4:8a:2b:
         bd:40:fd:75:95:88:00:59:a5:4b:8e:65:77:6d:fd:05:70:8e:
         47:ad:6a:c8:f5:b8:b1:f9:f0:e5:d5:da:c1:97:1b:98:d3:a9:
         91:20:d6:00:f1:64:79:2a:78:22:dd:94:b3:a6:26:64:ca:6b:
         2d:e4:97:73:06:35:64:4d:1e:92:33:2b:35:0f:57:53:43:de:
         cb:cc:c5:0f:3a:37:ab:d7:5a:76:a3:6d:2d:a0:15:25:05:64:
         d0:8e:b0:59:ea:4f:e4:fe:b6:74:50:b5:cf:e0:0e:c1:f9:21:
         ff:a3:12:be:c9:e6:52:b4:68:07:7d:99:28:0e:e7:d9:3b:3e:
         fd:20:2b:71:d7:2f:49:15:fd:71:13:a2:85:62:26:d0:46:30:
         0a:0a:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:13:38 2024 by rpki-client on console-fra.rpki-client.org