Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (raw, json)
Hash identifier:          9Fgs7hWJuuOtFl0pJ1PAqQEu5PslUFaq/LB6Vrj8s2c=
Subject key identifier:   04:BE:6E:19:55:4F:D7:2D:31:45:80:FD:A7:86:9F:00:B4:C1:D5:F4
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       42DB25681C91ADEF4B60B9F3D278F6BA069C097A
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
Signing time:             Thu 29 Aug 2024 17:00:01 +0000
ROA not before:           Thu 29 Aug 2024 16:55:01 +0000
ROA not after:            Thu 28 Aug 2025 17:00:01 +0000
asID:                     147107
IP address blocks:        103.174.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 19:29:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:db:25:68:1c:91:ad:ef:4b:60:b9:f3:d2:78:f6:ba:06:9c:09:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Aug 29 16:55:01 2024 GMT
            Not After : Aug 28 17:00:01 2025 GMT
        Subject: CN=04BE6E19554FD72D314580FDA7869F00B4C1D5F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:a8:22:22:b5:de:36:aa:ec:20:ab:97:62:
                    56:b6:40:5a:c4:a3:77:da:31:55:69:ff:ca:fc:ae:
                    f9:a3:4d:00:a7:ff:e7:96:ed:53:2d:37:67:23:f9:
                    81:33:fc:de:ca:92:c5:7d:ba:42:ae:61:1d:af:4a:
                    19:31:58:fd:f1:ff:39:9e:3d:c5:b0:36:90:3e:4b:
                    34:5f:e0:25:19:68:ad:63:62:79:85:09:8d:46:07:
                    80:a5:ad:6a:48:8e:5e:3b:09:5f:78:a9:d6:b4:fc:
                    88:9c:bd:2b:c5:d7:73:37:30:13:a6:29:7a:55:51:
                    87:f8:57:65:fb:90:c3:60:b9:06:dd:1a:26:bb:64:
                    6c:6b:73:d8:94:f1:88:dc:25:2f:06:f1:cd:2e:26:
                    83:5b:d9:7c:85:4f:d9:0d:95:7a:1f:10:4b:1f:4d:
                    71:97:aa:21:f0:d4:37:d9:7c:c4:44:af:d1:d8:6d:
                    7c:71:9b:ab:83:d3:f5:62:d9:aa:34:bf:7c:99:68:
                    ab:c4:aa:8c:84:98:8b:db:d1:d1:c3:4a:39:6d:6d:
                    da:56:30:9d:b8:38:df:60:13:54:9c:70:2e:29:a6:
                    fe:5c:89:80:e7:91:e2:b8:1f:a0:56:ca:e5:3d:a8:
                    95:5c:a7:09:39:c7:89:e3:d0:5f:f5:f0:94:37:93:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BE:6E:19:55:4F:D7:2D:31:45:80:FD:A7:86:9F:00:B4:C1:D5:F4
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:9e:7f:15:b0:a3:c7:2e:e6:57:6d:f0:13:78:1c:e5:7b:
         f4:d4:ba:74:df:c1:db:af:f5:4e:e9:48:b2:52:1b:5d:89:be:
         4e:2d:a8:91:2f:2d:4b:de:eb:62:0a:0c:8c:2d:91:2f:3e:f3:
         a0:8f:f4:4c:4c:2c:99:12:4a:3f:52:0f:42:95:87:62:be:88:
         35:f2:0f:34:71:6e:69:69:ac:6f:e9:2a:fe:48:f9:24:3b:a2:
         b9:ca:86:2a:43:5b:98:0f:36:96:7c:3c:9d:14:c5:64:60:f7:
         31:f7:38:c3:f8:1a:8b:72:ec:94:bd:8b:f8:d5:a8:8e:22:8c:
         1d:6b:c3:73:5d:cb:f6:ce:07:d3:b2:5e:77:fa:6f:aa:b9:b0:
         ef:bb:84:77:bf:a3:01:b2:88:3a:a7:e6:2e:ec:af:0b:24:db:
         06:f3:87:14:cd:27:9e:2b:73:ce:14:fc:6e:23:35:79:b1:24:
         66:02:4c:ed:e7:0f:04:25:e5:48:2c:ba:31:05:23:48:5e:1d:
         86:42:5a:79:29:4b:cc:2d:5d:ce:86:71:ea:c0:62:e7:86:e7:
         9e:06:ec:2e:a0:da:2b:e0:46:d0:c6:e1:61:41:3d:46:ae:5f:
         b8:62:eb:d7:b6:d9:fc:a8:ac:28:ea:9b:4f:b4:53:aa:f7:76:
         4f:7b:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org