Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa
File:                     3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa (raw, json)
Hash identifier:          RFKIDrfqbUw0fDbqzxbLyzwqGZ4ITteoJKP95pUTKbo=
Subject key identifier:   C1:45:E5:81:B8:FD:D1:D9:BF:15:8B:C1:3F:49:28:64:1F:F2:C4:E6
Certificate issuer:       /CN=3703AC4154F05B1E642F31DEF71A238407E82D59
Certificate serial:       687BBB48867A0CF5FCBE097CE34F1E81006C6CCF
Authority key identifier: 37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa
Signing time:             Wed 01 Nov 2023 06:00:01 +0000
ROA not before:           Wed 01 Nov 2023 05:55:01 +0000
ROA not after:            Wed 30 Oct 2024 06:00:01 +0000
asID:                     141596
IP address blocks:        103.160.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl
                          rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7b:bb:48:86:7a:0c:f5:fc:be:09:7c:e3:4f:1e:81:00:6c:6c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3703AC4154F05B1E642F31DEF71A238407E82D59
        Validity
            Not Before: Nov  1 05:55:01 2023 GMT
            Not After : Oct 30 06:00:01 2024 GMT
        Subject: CN=C145E581B8FDD1D9BF158BC13F4928641FF2C4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:49:17:2e:ad:c4:91:1e:69:c7:aa:99:f1:
                    f1:1c:a8:37:8e:80:78:d4:d1:7b:00:c3:69:60:0b:
                    bb:7a:4d:17:9b:79:9e:5c:22:87:7e:0b:68:8f:13:
                    c1:02:38:44:75:61:61:01:e9:5b:f4:3f:a7:c5:9d:
                    cb:4e:13:22:86:4a:1f:6b:70:00:30:aa:da:85:17:
                    5d:25:af:fc:e6:6d:8a:1c:68:2e:d6:fe:d9:71:55:
                    73:be:b0:88:57:8d:ce:8a:a7:d9:84:6c:66:96:58:
                    a9:f4:ef:7d:c8:c0:d2:ad:a7:90:31:bb:86:b8:46:
                    7a:a9:c8:5f:9e:57:6c:4f:b4:f0:14:40:6c:2b:50:
                    c1:9f:50:ca:87:80:98:35:71:de:c5:f3:a3:46:09:
                    4a:e8:0f:40:5a:13:46:2b:8a:f6:45:f4:53:a2:70:
                    39:28:1d:55:ab:06:ba:56:a6:f9:17:3f:db:71:cd:
                    51:73:32:8f:9b:57:7a:04:74:d4:19:ad:6d:4d:71:
                    d5:44:0e:e1:8a:28:58:71:63:33:40:8c:1a:6f:43:
                    ff:26:d4:73:6b:5d:37:08:ee:ec:ed:dc:22:a4:43:
                    3e:1c:f9:71:dd:a7:5a:ad:d9:ed:8e:44:59:8c:67:
                    ae:32:df:8a:84:a3:94:d5:46:0f:18:c9:81:a9:1f:
                    a7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:E5:81:B8:FD:D1:D9:BF:15:8B:C1:3F:49:28:64:1F:F2:C4:E6
            X509v3 Authority Key Identifier:
                keyid:37:03:AC:41:54:F0:5B:1E:64:2F:31:DE:F7:1A:23:84:07:E8:2D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3703AC4154F05B1E642F31DEF71A238407E82D59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3703AC4154F05B1E642F31DEF71A238407E82D59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a099adf-7e12-4e83-95c2-dd7f77494788/0/3130332e3136302e34302e302f32342d3234203d3e20313431353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:82:2b:c5:e7:a6:d2:be:32:48:a3:96:be:2e:af:a1:a2:53:
         c2:c5:fd:3a:0b:97:a0:fb:71:e0:ef:b7:7d:49:b7:83:31:7e:
         18:f7:08:25:10:aa:8b:d6:14:09:b3:f8:eb:2b:60:51:25:e2:
         ed:4b:49:bd:dd:40:3d:6a:de:20:c5:81:5a:7b:34:a5:6d:ef:
         80:91:b2:f1:4c:26:c8:64:17:68:e0:97:18:33:75:63:71:3c:
         59:fa:d8:b4:e2:3e:8d:a8:ae:69:e2:8c:96:e6:e2:4c:94:7f:
         b0:dc:7d:3e:1a:15:1f:78:19:48:be:9c:e0:96:b5:50:ae:9e:
         5b:ae:58:f5:fa:51:80:87:dd:33:69:1b:2b:e0:e6:d9:dd:14:
         32:49:8e:61:90:ac:fe:58:8a:ce:42:a5:e9:0e:90:7c:b7:69:
         0a:27:73:91:c6:aa:2d:a5:df:16:46:49:f3:54:fd:69:8e:21:
         7a:54:c5:44:4a:d5:01:95:55:7f:fd:fb:34:98:e2:84:74:65:
         4a:ac:cd:95:4f:17:5b:c0:e9:1b:02:9d:07:be:25:22:8f:fc:
         ae:0f:de:5c:06:f1:29:49:c5:06:04:dc:7a:dc:24:65:c6:b3:
         a6:ce:8d:4b:bf:6e:5b:4a:41:80:fb:86:e1:84:9a:fb:b3:aa:
         fc:f2:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:59:26 2024 by rpki-client on console-fra.rpki-client.org