Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          Gc54guHdN+9DZ2l06ho4k3oXtYayA9HGIoZJrgPhLAs=
Subject key identifier:   3F:1D:D9:41:01:AF:10:E5:17:8E:CE:FA:8B:9E:CD:9F:B0:8D:42:A9
Certificate issuer:       /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial:       6E31D5B6BC51322481F453350781AAA8BA0FBC87
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa
Signing time:             Sat 09 Dec 2023 06:00:04 +0000
ROA not before:           Sat 09 Dec 2023 05:55:04 +0000
ROA not after:            Sat 07 Dec 2024 06:00:04 +0000
asID:                     133823
IP address blocks:        103.161.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
                          rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:31:d5:b6:bc:51:32:24:81:f4:53:35:07:81:aa:a8:ba:0f:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
        Validity
            Not Before: Dec  9 05:55:04 2023 GMT
            Not After : Dec  7 06:00:04 2024 GMT
        Subject: CN=3F1DD94101AF10E5178ECEFA8B9ECD9FB08D42A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:12:b1:10:62:cf:47:e5:e9:70:bc:c3:0e:
                    c2:a5:88:7a:c0:90:3a:73:08:06:cd:99:2b:44:f8:
                    16:af:44:a3:48:74:53:03:e7:25:41:4d:e9:4f:3a:
                    58:a5:01:f6:0a:50:a8:d8:4e:be:0f:a2:f2:f4:cd:
                    1f:37:7c:4d:3b:03:b0:08:ec:52:2c:db:b0:01:57:
                    8b:83:ac:67:59:c6:3a:d3:f2:36:e0:fd:cf:52:67:
                    d8:b7:bc:2f:00:c8:36:7b:66:de:38:f4:64:e7:a0:
                    2a:fa:ae:d8:c9:6b:50:7c:29:6e:31:e3:37:f7:15:
                    f1:26:bf:06:b5:51:f6:88:76:bc:0f:61:37:67:06:
                    44:a0:f2:1c:45:a6:ff:4e:5a:79:74:0d:ab:93:e5:
                    53:0c:55:f6:f9:51:14:01:c0:d7:d8:99:a8:8a:b7:
                    85:f4:57:a2:d1:78:f7:b4:bf:26:3a:85:ac:c1:ef:
                    15:c1:b4:d3:01:d2:cd:a1:e5:2c:9c:c7:3d:ff:ce:
                    b1:d5:89:5d:dd:70:d3:ae:0b:d6:02:a7:7a:b9:5c:
                    79:71:7c:f1:c5:52:e8:27:ad:9a:9a:8e:54:99:b8:
                    25:74:d2:3f:ff:14:af:44:9b:b3:da:7f:8d:22:bb:
                    59:9c:02:d0:ae:5e:61:62:69:b8:79:dd:87:e5:2e:
                    b6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1D:D9:41:01:AF:10:E5:17:8E:CE:FA:8B:9E:CD:9F:B0:8D:42:A9
            X509v3 Authority Key Identifier:
                keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:8d:70:78:29:1a:a7:63:f9:00:b6:44:cc:8d:58:5e:0d:
         be:b7:e6:00:bc:2b:db:f2:27:7d:4d:2a:13:f9:cf:b4:7b:51:
         25:5d:4c:af:75:a1:1c:ae:79:ae:fa:a3:41:cc:b5:6e:2e:ed:
         d8:42:c0:b7:ed:a9:ee:5c:80:3f:80:03:f7:7d:92:72:ec:8b:
         dc:87:85:ea:d5:83:f3:27:aa:01:1b:94:3f:b7:ef:ab:c4:40:
         f6:e6:a6:3a:dc:ab:57:2b:e5:5f:3b:e4:7e:ef:bd:0f:6c:d7:
         5d:21:b2:88:64:39:7b:2d:11:b9:9a:c2:6e:c9:97:f7:12:10:
         e2:ec:2a:24:70:f4:df:21:9d:56:c3:17:91:35:70:85:d9:ae:
         e8:d8:69:0d:a5:3c:27:48:e3:7f:fa:e2:09:7d:a2:a5:24:f8:
         0e:ec:3e:ae:16:ba:32:74:68:56:8d:c6:4d:23:48:9b:d9:06:
         3b:73:c9:19:6c:c5:c6:e5:49:75:54:8d:2f:1a:e5:28:c7:00:
         43:43:eb:9b:32:09:09:50:dc:de:52:08:39:91:c3:d2:b9:0f:
         48:53:1f:d1:d7:22:1f:6a:dc:54:c8:b3:69:1f:f1:fc:16:24:
         d0:41:48:f3:93:04:e9:df:25:c3:2b:c5:0d:74:d9:34:28:1f:
         a7:27:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:37 2024 by rpki-client on console-ams.rpki-client.org