Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa
File:                     3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa (raw, json)
Hash identifier:          DZAhx842V2Xb8kqG+VDaatk7tq6SyHiJGKjEwD1sKhc=
Subject key identifier:   11:AA:24:94:3A:AE:0E:3F:8C:06:86:24:B8:50:35:45:84:8C:89:0F
Certificate issuer:       /CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11
Certificate serial:       108F02BC8F3BF0A76252601159C5DC68E91304D6
Authority key identifier: 6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa
Signing time:             Wed 20 Mar 2024 14:00:01 +0000
ROA not before:           Wed 20 Mar 2024 13:55:01 +0000
ROA not after:            Wed 19 Mar 2025 14:00:01 +0000
asID:                     141145
IP address blocks:        103.159.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl
                          rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8f:02:bc:8f:3b:f0:a7:62:52:60:11:59:c5:dc:68:e9:13:04:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11
        Validity
            Not Before: Mar 20 13:55:01 2024 GMT
            Not After : Mar 19 14:00:01 2025 GMT
        Subject: CN=11AA24943AAE0E3F8C068624B8503545848C890F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:58:ab:b4:88:92:0d:90:83:7c:34:66:56:
                    64:c6:be:b5:db:bd:e7:64:3f:94:8d:a8:f4:c7:9c:
                    ce:77:2d:31:c1:4c:b9:ac:49:23:e2:c3:23:4a:b1:
                    3c:41:9a:8c:0c:61:7e:e1:34:56:82:24:d2:af:ba:
                    ac:e7:6b:e0:1a:38:16:fd:48:32:23:18:fb:fb:69:
                    70:e6:69:fa:49:7c:ba:0b:98:e9:d0:ba:4f:9e:bc:
                    10:75:d5:fb:83:68:d2:68:9c:78:8a:62:71:ff:1b:
                    ae:2e:b1:08:07:df:37:65:88:fc:6a:34:a8:d0:2e:
                    8d:c2:aa:c6:26:dd:20:89:07:01:79:0e:41:b2:05:
                    da:fd:5e:de:b6:53:96:99:cf:f1:1d:77:fe:30:01:
                    d3:a3:62:37:39:51:60:c7:c2:36:b6:a9:cd:c6:1c:
                    32:89:ff:d5:fe:41:fa:ea:45:cc:0d:e4:69:05:cd:
                    88:83:9d:d9:ce:52:36:18:3e:08:08:2d:f2:49:8e:
                    d1:5d:3d:04:80:71:e0:8b:a1:d4:4c:0d:36:f8:aa:
                    d3:6a:26:72:6c:87:c3:8b:af:36:bb:45:36:65:b1:
                    5d:02:ec:7d:3b:cf:5e:f9:23:d7:cb:4c:83:ac:88:
                    4f:c2:4d:f0:34:31:8a:73:88:01:ed:34:1d:4a:cd:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:24:94:3A:AE:0E:3F:8C:06:86:24:B8:50:35:45:84:8C:89:0F
            X509v3 Authority Key Identifier:
                keyid:6F:C8:57:DF:7F:E5:35:0A:6C:05:A1:F1:13:F3:DC:2E:5F:E0:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6FC857DF7FE5350A6C05A1F113F3DC2E5FE0BE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a238a62-6a96-43bc-87af-02db641f7109/0/3130332e3135392e3139342e302f32332d3234203d3e20313431313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:06:c6:a3:2c:d8:1e:0d:20:21:93:a2:7e:42:22:ba:58:a9:
         9e:3b:4e:8e:85:74:fc:05:48:67:ca:33:42:6e:d9:8c:62:4f:
         a1:98:25:a8:94:e8:d0:6d:fb:01:57:5e:0e:9d:19:ed:9f:51:
         c1:e9:c6:e1:3f:79:d8:1b:66:50:da:ce:bc:8c:2c:c6:02:be:
         a7:43:98:df:2d:13:32:0a:cf:be:1f:aa:e5:5c:a4:9b:04:8d:
         16:c6:71:47:f6:5e:b0:ea:2f:5d:86:a8:4c:5f:08:f2:a9:4b:
         a5:d2:55:4a:60:ed:c7:fc:5f:f8:be:89:d5:49:8c:41:68:dd:
         94:fd:5e:a6:19:56:2a:6d:8e:a4:67:51:48:2a:68:f2:4d:b7:
         c5:09:52:02:9c:7f:21:39:ff:63:2b:c3:1a:b8:e6:08:fc:27:
         d9:9c:f5:2f:cf:35:d1:d1:ed:9e:0f:83:f6:4e:f1:36:3c:fb:
         1b:eb:f3:b1:bb:ce:f0:79:dd:19:3a:89:50:2b:e5:7e:84:46:
         f7:b0:a2:79:21:5e:c6:ec:30:16:b7:7a:bf:99:df:d0:4c:6c:
         ac:7a:31:b9:fd:82:d2:d9:5d:48:02:aa:08:b5:54:88:65:71:
         69:66:79:90:27:59:00:77:96:5a:62:91:5d:72:ab:24:70:df:
         d4:b5:e2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org