Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa
File:                     3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa (raw, json)
Hash identifier:          8kfCiwE7lWsFyYXGcnHRKO0L32+BxcdEaSGdcU3XadE=
Subject key identifier:   16:6D:1B:70:23:26:04:4F:D0:41:A4:8F:32:84:D3:8F:14:72:9A:12
Certificate issuer:       /CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
Certificate serial:       59F29AE57EDDC47FD19256A3FD9F911A2A8F6A25
Authority key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa
Signing time:             Mon 01 Apr 2024 09:00:00 +0000
ROA not before:           Mon 01 Apr 2024 08:55:00 +0000
ROA not after:            Mon 31 Mar 2025 09:00:00 +0000
asID:                     147130
IP address blocks:        103.176.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl
                          rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f2:9a:e5:7e:dd:c4:7f:d1:92:56:a3:fd:9f:91:1a:2a:8f:6a:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74
        Validity
            Not Before: Apr  1 08:55:00 2024 GMT
            Not After : Mar 31 09:00:00 2025 GMT
        Subject: CN=166D1B702326044FD041A48F3284D38F14729A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:27:67:f5:74:c6:ad:9a:19:e9:c2:f1:01:
                    ed:55:8d:5b:d4:46:40:bf:aa:01:bb:5e:d1:42:78:
                    f7:ac:73:50:19:fb:bf:7c:8e:af:88:0f:50:7c:61:
                    1d:eb:b3:24:6b:73:a5:37:41:6e:17:60:39:ac:9f:
                    6e:11:86:0b:0a:29:32:d5:f5:0a:99:1b:c3:f9:2d:
                    51:b7:32:9b:67:80:95:d7:13:bb:48:09:64:90:33:
                    37:c6:30:71:16:96:b3:6c:2c:43:7a:3c:45:46:01:
                    26:76:a8:fd:e7:c1:d9:05:e6:eb:ba:ec:68:76:b3:
                    19:63:cf:ce:38:20:91:4e:36:f9:b7:41:b8:f6:4c:
                    4f:e1:9a:71:cf:2c:60:a9:91:78:5f:c1:87:09:ef:
                    77:5d:27:98:36:15:bc:27:62:a4:02:6e:c9:64:79:
                    e8:15:45:5d:d1:78:79:54:b3:08:a4:83:c9:34:09:
                    a7:f6:6e:78:f5:a1:dc:de:cf:5d:fb:48:86:69:24:
                    fd:33:24:60:45:28:48:7a:3c:42:f0:36:04:73:22:
                    b5:05:8a:62:c3:6d:e2:da:9e:1c:95:b0:c7:14:6b:
                    9c:e6:b9:3b:0b:42:ad:3f:87:2d:28:cc:74:78:02:
                    d3:a1:ff:42:53:8e:c5:db:34:40:dd:b5:41:20:71:
                    62:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6D:1B:70:23:26:04:4F:D0:41:A4:8F:32:84:D3:8F:14:72:9A:12
            X509v3 Authority Key Identifier:
                keyid:E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e3132312e302f32342d3234203d3e20313437313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:28:c9:09:54:37:a7:bd:14:1e:31:6f:d0:7a:d3:b3:f8:32:
         2b:44:a1:0a:11:80:86:7f:2f:cb:a0:16:53:86:ca:e3:0c:7f:
         18:a3:fd:e8:3a:29:bf:98:48:76:b0:a5:4d:89:19:65:35:fb:
         28:18:55:0e:a2:da:e2:d8:cb:50:c6:e2:8e:3b:76:9e:d9:fc:
         32:f6:a8:ea:48:ea:28:35:44:d3:b5:93:47:99:0f:68:b5:dc:
         b8:ad:2a:b6:e2:3b:0f:cb:38:8f:9a:ef:a3:9e:65:ea:81:1a:
         94:cf:3f:02:bd:30:53:e5:76:88:6f:5e:ac:00:f3:b2:73:d2:
         ee:ba:21:69:f4:3d:0a:c8:05:b8:c2:53:f7:59:bf:eb:1c:15:
         e2:ef:96:e0:e6:a5:c8:b7:c4:14:36:09:4f:aa:01:03:86:f8:
         cf:2f:23:17:64:21:e4:e8:57:d3:17:34:08:30:28:cf:a0:5d:
         b2:94:61:c8:d8:70:2a:53:39:90:e3:ac:67:df:38:c8:67:c6:
         78:16:d1:3f:e0:f0:96:14:da:97:89:0b:49:3e:aa:c6:dd:94:
         a0:d4:e9:10:16:0f:95:a4:d3:81:7a:11:bf:4d:d5:b0:fd:3e:
         1d:6a:21:32:08:e8:bf:d9:be:ee:85:44:e0:ef:11:10:ab:9f:
         48:75:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org