Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          lPVX9YFeqCqOWiyam2nqGD8TmGtdRDlDuInEa0POJWs=
Subject key identifier:   9E:45:5D:19:E6:3A:87:EE:4E:1D:8D:08:91:E4:2E:68:F4:EA:2B:1D
Certificate issuer:       /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
Certificate serial:       304E42AF5304DDCA22E115B7805A130872CFC08C
Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa
Signing time:             Sat 09 Dec 2023 06:00:04 +0000
ROA not before:           Sat 09 Dec 2023 05:55:04 +0000
ROA not after:            Sat 07 Dec 2024 06:00:04 +0000
asID:                     133823
IP address blocks:        103.161.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl
                          rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4e:42:af:53:04:dd:ca:22:e1:15:b7:80:5a:13:08:72:cf:c0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1
        Validity
            Not Before: Dec  9 05:55:04 2023 GMT
            Not After : Dec  7 06:00:04 2024 GMT
        Subject: CN=9E455D19E63A87EE4E1D8D0891E42E68F4EA2B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:2b:00:0c:aa:c6:81:6a:c5:2e:f9:da:49:
                    72:4a:24:8f:b4:22:4f:42:4c:27:2d:01:10:00:a2:
                    de:ad:ee:e8:ce:6d:7e:91:6e:50:c0:3b:a4:71:0c:
                    7a:24:8c:b3:18:3f:32:2f:e8:3c:df:bd:c6:44:ad:
                    e3:5e:60:7a:f2:95:06:9c:89:7b:9d:da:29:e8:32:
                    21:fe:56:90:87:ed:7a:83:78:da:c9:d0:d2:9c:19:
                    02:0e:4a:fd:a3:43:c3:df:7e:08:e0:1b:25:d9:cd:
                    76:63:a5:6e:dd:9e:f1:8a:03:f1:c7:75:dd:e2:63:
                    0e:d4:44:c8:f5:e5:bc:d8:30:7e:cf:c7:65:22:b0:
                    94:76:c7:1b:5d:46:23:55:da:65:a5:92:0f:b5:fc:
                    2b:97:e4:0a:81:81:e1:c7:bf:ce:8c:fc:fa:a0:8d:
                    ce:f0:a9:15:13:bb:e7:e4:e7:69:0c:3b:ee:c9:bc:
                    b0:96:5d:20:8f:f3:c2:c3:5a:e3:97:6d:bd:8d:19:
                    5d:59:b5:fd:3c:87:3d:65:c2:53:ea:4f:0b:a8:4f:
                    77:47:fb:97:97:3a:b7:6d:2f:e5:bb:27:8d:61:bd:
                    8c:ed:b2:26:97:a0:93:9b:38:46:b1:5c:87:94:2c:
                    4b:95:98:ac:98:84:6f:5c:cf:ab:b4:23:c0:fd:15:
                    b3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:45:5D:19:E6:3A:87:EE:4E:1D:8D:08:91:E4:2E:68:F4:EA:2B:1D
            X509v3 Authority Key Identifier:
                keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:05:87:51:d1:00:c4:a4:9a:16:f0:28:95:61:58:e9:ac:
         0f:11:a1:58:3f:1c:5f:aa:0a:e7:3c:e6:37:75:53:e2:0e:52:
         30:88:45:91:3c:f4:6b:92:d7:c9:f0:af:50:ac:66:67:8a:c7:
         19:f8:aa:33:41:f9:b6:09:b4:2d:73:54:c6:b8:c1:d9:ad:25:
         73:c7:e9:b3:30:d0:d7:3b:f2:e3:d0:e1:b8:23:88:76:65:90:
         99:28:85:78:68:19:4c:d7:69:52:c6:b4:4a:20:22:21:16:4a:
         42:28:34:c9:eb:bb:b2:12:7b:26:7c:9c:cf:7b:be:cf:ba:d7:
         6e:f9:9d:21:c9:09:b6:fe:b9:ab:33:a3:02:1d:df:f4:ba:11:
         52:25:fd:1a:e7:5b:c8:f8:cc:be:da:fe:62:ba:ed:f7:01:1f:
         e9:58:b8:5c:0d:6a:b8:7b:af:d5:3b:8e:fd:1f:7c:d2:90:b1:
         16:c4:51:7c:50:9f:57:a1:6f:d7:bd:72:da:fa:34:e7:5e:35:
         c5:2b:2f:1b:ef:1d:e2:71:8b:01:b7:1b:11:28:ba:ba:1a:44:
         ee:85:98:59:b5:06:f6:01:ed:11:17:97:69:ec:09:cc:20:6e:
         a5:af:a7:96:08:d4:81:d3:d5:d4:df:31:a4:ba:6f:d8:d2:6f:
         54:c5:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:12:37 2024 by rpki-client on console-ams.rpki-client.org