Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa (raw, json)
Hash identifier:          DqtJsr5167SGaeopCEIdkAiLan35IBjNtIuCsQQRgNc=
Subject key identifier:   0A:21:AF:74:2E:5B:75:6D:5C:DE:12:F4:21:42:38:16:95:BA:89:C8
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       1597ADE57CBE2AB73F276A79E254E263D9F140B9
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa
Signing time:             Thu 28 Sep 2023 17:00:00 +0000
ROA not before:           Thu 28 Sep 2023 16:55:00 +0000
ROA not after:            Thu 26 Sep 2024 17:00:00 +0000
asID:                     147107
IP address blocks:        103.174.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:97:ad:e5:7c:be:2a:b7:3f:27:6a:79:e2:54:e2:63:d9:f1:40:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Sep 28 16:55:00 2023 GMT
            Not After : Sep 26 17:00:00 2024 GMT
        Subject: CN=0A21AF742E5B756D5CDE12F42142381695BA89C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:ee:d9:63:d8:ec:1b:f6:57:86:9a:c0:2f:
                    a3:1f:92:47:22:ea:de:a0:50:88:2d:12:55:ce:2b:
                    02:4e:04:8c:52:04:f6:95:a1:ef:65:ba:7d:0d:f6:
                    5a:4d:f8:45:cd:63:d9:b6:68:9b:67:1e:e3:e7:25:
                    51:81:96:fb:7f:7a:4b:9d:ed:be:fa:fd:11:7c:a0:
                    31:f7:96:15:d9:7b:d2:7b:e4:20:87:1d:33:c5:28:
                    7e:fb:36:b9:7a:5a:2d:c5:61:65:90:df:69:a2:4a:
                    dd:1c:74:bb:53:a7:1d:cb:05:18:53:5d:e2:db:0e:
                    7b:8f:d0:4a:31:c4:f2:79:72:ee:15:fb:70:b3:8f:
                    6b:62:0b:d7:a0:e5:54:49:95:99:fb:aa:d6:7b:19:
                    95:7e:3d:aa:b3:b4:d5:06:2e:43:a2:40:58:e0:6e:
                    6a:c1:cd:6f:8b:c3:2c:01:6c:f9:18:95:8f:df:b4:
                    30:5b:0a:b7:86:00:74:13:46:41:1d:12:00:29:f0:
                    04:17:98:fc:cb:6d:dd:c8:2d:45:30:70:51:a5:3e:
                    e6:e0:a1:2c:8e:47:dc:80:46:50:86:a2:e8:4e:99:
                    0b:70:e9:8e:3f:f6:62:bf:64:59:91:84:1a:5a:9f:
                    e6:9e:02:05:12:01:4f:a5:88:70:ee:b3:24:f3:db:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:21:AF:74:2E:5B:75:6D:5C:DE:12:F4:21:42:38:16:95:BA:89:C8
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32332d3233203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:12:c8:85:8e:b7:59:07:b5:3e:71:81:14:80:08:90:e9:
         cd:9a:70:33:97:63:ab:3e:6c:1e:f1:96:46:74:f4:a5:1c:68:
         d2:cc:7b:30:1d:2c:e1:ea:28:ab:5d:72:0e:ca:ec:eb:40:4b:
         4c:6c:b9:40:0b:59:d3:0f:7b:d7:61:2a:4f:23:c1:23:d0:ed:
         2d:7a:4d:7e:47:80:4c:11:82:d8:35:9e:1f:ae:43:32:8e:3e:
         c3:28:9f:ab:f7:39:53:7a:ba:4e:7c:d3:d6:91:35:70:89:c5:
         24:e9:2e:77:5e:36:45:c9:1b:61:81:f9:61:82:b8:35:67:5d:
         aa:50:b5:64:2c:0f:32:ed:3a:d8:e6:5b:49:e5:d2:7a:62:4c:
         4f:e2:50:d9:35:0e:0b:99:5b:33:66:ff:b2:33:51:42:a4:68:
         92:95:ab:25:e3:40:e3:eb:fe:6d:e4:56:2d:63:ee:bd:f8:d0:
         fb:8d:9a:fe:a4:32:05:fe:e2:ed:07:cb:85:5f:2c:23:40:d5:
         a8:b5:55:1d:3c:f7:7d:a7:ab:3e:bb:6f:98:f9:08:94:b6:17:
         18:f4:1f:bc:da:4e:d0:50:77:dd:bc:54:63:3d:bc:33:e0:72:
         38:9e:6b:cd:bc:df:74:2b:fe:05:a6:75:09:33:6d:34:ba:fa:
         b9:29:bf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:51 2024 by rpki-client on console-ams.rpki-client.org