Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          iZAMnIuUrgIYHshhetHF0U3NPUY0+b+6EE6t2BUtZpk=
Subject key identifier:   CC:D7:16:41:7F:91:A5:60:BB:E4:6D:87:90:AE:49:8A:DA:C6:8D:DE
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       2DA7EB04C885D8B6DE2AB122B510EFDC7F2B5289
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
Signing time:             Thu 07 Nov 2024 12:00:05 +0000
ROA not before:           Thu 07 Nov 2024 11:55:05 +0000
ROA not after:            Thu 06 Nov 2025 12:00:05 +0000
asID:                     149365
IP address blocks:        103.180.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 16:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a7:eb:04:c8:85:d8:b6:de:2a:b1:22:b5:10:ef:dc:7f:2b:52:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Nov  7 11:55:05 2024 GMT
            Not After : Nov  6 12:00:05 2025 GMT
        Subject: CN=CCD716417F91A560BBE46D8790AE498ADAC68DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:98:22:2c:e5:a1:6d:b8:fd:88:65:2c:f8:
                    63:cb:3a:bb:8c:c8:7d:c9:01:5b:d0:b1:a6:37:52:
                    3b:6a:3d:95:1c:58:2f:b3:6a:ed:97:cf:14:87:81:
                    64:ef:ea:eb:6e:4a:1f:03:d3:7e:d5:1e:4e:67:1c:
                    62:50:75:22:05:83:d7:e2:07:0f:da:dd:84:0d:2d:
                    af:8f:58:da:ef:89:e5:8e:7c:62:10:84:23:f7:97:
                    b4:63:f0:4c:2f:47:1f:62:68:55:4d:c5:75:b6:d4:
                    c6:58:24:81:34:de:22:c5:40:52:03:4c:60:fb:d4:
                    c0:61:31:77:b4:e3:45:fb:c1:7d:f5:ef:f5:78:12:
                    42:49:8f:0d:5f:cb:86:fc:0a:81:08:80:f7:cf:79:
                    7c:c1:99:01:b8:1a:27:f2:21:2e:3c:d5:26:c7:0d:
                    f9:ae:2c:12:b9:c8:96:7f:85:e1:eb:2c:d8:e7:6c:
                    7f:92:b6:f5:5e:2b:42:04:ed:00:33:14:9c:ec:56:
                    49:58:55:32:2e:99:b7:21:47:b4:a9:d7:7a:9a:af:
                    c2:83:8a:57:1a:dd:21:e9:9b:9e:ac:8a:2c:74:41:
                    5f:a1:a0:51:ec:a9:8c:c1:b2:de:16:c1:0e:2e:b5:
                    cf:e8:27:d4:23:84:62:ec:63:2d:cb:54:b8:2e:01:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:16:41:7F:91:A5:60:BB:E4:6D:87:90:AE:49:8A:DA:C6:8D:DE
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:29:5c:53:31:db:f1:06:3e:e1:69:0f:8d:f1:8a:76:d5:
         26:6e:6b:cf:be:be:23:22:56:1a:14:9b:bc:1f:25:bc:87:3e:
         7d:d5:98:b6:98:e4:e5:6e:74:92:89:f7:18:2b:c5:31:bd:42:
         37:d7:b3:be:b2:5e:f6:8d:68:f0:f3:01:12:40:52:79:5c:b4:
         c8:c9:a8:ec:e6:c8:1c:20:83:e3:8b:4e:ee:37:14:25:5e:2f:
         ee:79:fc:eb:af:82:27:1a:3b:fc:e8:8e:1f:75:1e:c9:c1:97:
         52:1b:a4:80:4f:cd:32:6a:b8:9e:18:24:7e:39:76:4c:9c:d6:
         b8:b6:11:d3:0e:90:89:f0:62:bf:ec:cf:4c:f7:6a:a7:55:ef:
         31:9c:27:ee:67:83:18:48:36:7f:e2:b0:7f:cb:64:50:7c:63:
         63:87:15:be:f2:68:56:50:49:e5:72:03:a8:ce:e1:f3:0d:16:
         26:98:ee:9c:e3:db:c2:30:f8:d1:d9:64:85:ec:55:44:7e:1d:
         98:81:85:2b:fd:01:d8:9f:e8:61:83:c1:9e:a8:67:cf:19:cd:
         90:4f:ef:d0:ab:76:67:95:d0:ad:2e:46:9a:e2:e0:6d:ef:9e:
         85:2b:fd:75:b3:bf:03:e3:4f:5b:ad:e5:d6:c5:16:c9:30:fd:
         4d:78:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org