Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          DBXP+jIvEdKzECcd349+FS+ugD2yaPTKDI+zbBQ7050=
Subject key identifier:   B1:14:E1:FE:4E:12:05:B9:4A:68:92:64:05:5B:43:E2:6C:DE:30:6D
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       7222BDCB11028DCF69DECA9F0924F9BF3FE51D6B
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
Signing time:             Thu 07 Dec 2023 11:33:59 +0000
ROA not before:           Thu 07 Dec 2023 11:28:59 +0000
ROA not after:            Thu 05 Dec 2024 11:33:59 +0000
asID:                     149365
IP address blocks:        103.180.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 15:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:22:bd:cb:11:02:8d:cf:69:de:ca:9f:09:24:f9:bf:3f:e5:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Dec  7 11:28:59 2023 GMT
            Not After : Dec  5 11:33:59 2024 GMT
        Subject: CN=B114E1FE4E1205B94A689264055B43E26CDE306D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9d:1e:da:d0:84:98:e4:4b:54:c7:d9:f9:c4:
                    31:20:45:39:73:bc:04:f7:51:a2:27:07:39:15:21:
                    08:ee:a6:0a:f7:b1:bf:bf:e8:29:f6:67:45:9b:28:
                    1c:1c:54:38:46:a5:9f:c4:8d:5c:ed:c7:26:d4:f8:
                    eb:b1:b2:a2:72:ae:04:bf:88:0b:ad:3f:7f:dd:83:
                    2c:ec:35:2c:c1:7a:be:3e:16:aa:e5:5b:c2:a7:5f:
                    26:6f:7a:af:b8:37:26:f4:e3:35:c8:c0:66:8d:ae:
                    49:65:a6:43:6c:50:f8:92:59:14:83:d2:e2:71:31:
                    11:ba:34:72:8b:0a:7c:f1:43:bb:90:dd:03:27:3c:
                    60:3d:4e:d1:1f:7f:75:e6:0b:45:c7:57:b7:37:0f:
                    c9:1a:f2:e7:64:35:52:87:0f:96:d5:31:7d:4e:41:
                    dd:94:9c:8b:8a:1f:33:de:1f:4e:07:e3:5f:76:1d:
                    d5:c6:34:91:63:37:08:d6:fc:0c:f2:2c:ff:39:25:
                    85:3f:72:5c:63:c0:8a:fc:8b:0e:b1:ea:66:bf:9d:
                    3a:50:78:d5:14:77:3e:c0:3b:53:7f:21:84:bf:be:
                    8c:48:60:05:4b:b0:17:80:ca:11:4a:1a:b7:87:a9:
                    05:ef:3c:06:41:53:74:b3:59:b1:65:40:ab:2a:34:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:14:E1:FE:4E:12:05:B9:4A:68:92:64:05:5B:43:E2:6C:DE:30:6D
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:c0:5f:77:a9:b9:47:84:32:7e:35:93:3d:39:48:cc:e3:
         1e:1f:1a:db:c4:d7:ac:b4:87:f5:d3:79:ce:fb:e8:96:e0:29:
         d2:69:ea:bf:1c:e5:a8:4a:62:68:85:71:5b:01:b8:63:db:5c:
         65:4f:95:c8:90:c9:22:6c:ba:c3:7e:fb:a6:25:55:28:6e:bf:
         8c:fa:ce:bc:43:f4:ea:79:1a:a4:46:43:0b:6c:b5:27:e6:88:
         09:67:29:98:9d:8a:e4:f8:96:0b:77:c5:18:ce:ae:ff:26:a1:
         ea:80:92:ad:50:fe:06:5b:c5:8f:83:e6:2f:b7:62:8b:d1:b0:
         b2:b5:0d:f3:5c:8b:c9:be:4a:78:55:d5:a0:2b:41:e8:67:83:
         8f:55:11:58:79:4c:99:bc:e1:3d:2c:f4:52:fe:b5:5f:d0:bc:
         1d:94:bb:37:95:10:97:c6:44:42:03:7a:5f:8f:38:36:60:54:
         5d:a6:c3:3d:c8:64:06:af:3b:5f:41:ea:e4:bc:e1:dc:53:cd:
         46:6b:d6:0e:d3:ce:25:4c:f3:d8:a8:a2:d1:ff:09:4f:76:8c:
         d3:75:6f:65:ab:f5:d7:8f:55:8b:7d:39:95:d3:48:c0:66:9c:
         80:50:06:84:91:02:91:93:3b:f9:41:fe:b2:85:ed:35:56:b9:
         95:0b:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:02:30 2024 by rpki-client on console-fra.rpki-client.org