Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa
File:                     3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa (raw, json)
Hash identifier:          kLXV4c0AsptnLtsv+VBQpTSid6cdacw5Etx4DoTbLDk=
Subject key identifier:   2A:D7:81:46:14:C1:7A:52:33:C5:1E:9F:B5:F3:BC:3B:CE:52:41:5E
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       5D986C332B6514BBBCF169861BE31EF83DEE1980
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa
Signing time:             Wed 04 Oct 2023 09:01:26 +0000
ROA not before:           Wed 04 Oct 2023 08:56:26 +0000
ROA not after:            Wed 02 Oct 2024 09:01:26 +0000
asID:                     147107
IP address blocks:        103.174.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:98:6c:33:2b:65:14:bb:bc:f1:69:86:1b:e3:1e:f8:3d:ee:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Oct  4 08:56:26 2023 GMT
            Not After : Oct  2 09:01:26 2024 GMT
        Subject: CN=2AD7814614C17A5233C51E9FB5F3BC3BCE52415E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:18:39:0e:09:e0:f3:8f:98:6a:a5:77:2f:
                    94:46:24:e0:73:44:08:70:2f:fc:7d:ba:bd:24:d1:
                    63:e4:bb:f0:5a:cd:6b:f9:f9:ae:ba:c5:7b:9a:5b:
                    c0:fc:9e:8f:06:0b:d4:70:fc:c6:98:b8:c3:bf:e0:
                    26:bc:a0:ad:e1:eb:70:a0:21:c0:23:b9:17:17:75:
                    ca:04:70:1e:c8:65:1c:f1:4c:a2:7f:b4:db:0b:46:
                    ae:32:6d:80:91:0b:f9:af:cb:9d:5f:37:9c:f2:29:
                    66:87:80:ef:4e:8b:f4:dc:78:8c:89:a9:bf:54:4e:
                    0e:ce:3c:fa:76:0f:68:a2:bc:e9:2b:e2:45:ad:1d:
                    d5:0d:8b:1e:d6:83:f8:c9:2d:88:52:fd:25:ef:22:
                    eb:ff:67:1c:db:04:15:dc:fc:c4:61:ff:0f:ac:8b:
                    ce:94:d4:d2:f8:6a:e2:e7:2d:b7:45:20:e1:63:ed:
                    cc:a1:73:55:1b:0a:89:cd:08:02:5a:7b:f6:82:9c:
                    25:f8:4b:f9:a5:12:81:62:d3:dc:d5:ca:49:9c:04:
                    57:10:22:6b:3b:e1:b3:93:06:b5:90:8a:75:d2:49:
                    1f:70:63:5d:cf:98:c8:39:47:50:fc:9e:e5:12:97:
                    7e:30:22:f1:51:43:9b:2a:ed:b0:37:3c:8f:a6:65:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D7:81:46:14:C1:7A:52:33:C5:1E:9F:B5:F3:BC:3B:CE:52:41:5E
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138302e302f32342d3234203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:40:88:e5:f6:52:85:0b:49:7e:aa:30:06:88:c4:d2:e3:
         9d:0d:c9:61:ea:4c:14:7b:a1:79:b5:0a:68:89:c7:f1:49:b2:
         56:1e:15:25:4c:f3:e6:03:e0:e2:2b:7d:19:1a:82:10:c8:3a:
         de:3b:37:a4:c2:b9:45:cb:6c:be:20:6a:35:ed:ce:96:df:90:
         cc:a3:b3:da:92:b1:18:19:4c:63:8c:29:f9:21:2b:0b:6c:24:
         d8:fc:aa:f6:82:2e:90:82:1e:a3:49:67:70:a5:b5:95:4c:a4:
         ff:ce:06:65:25:a3:d0:8a:2d:e2:4e:06:3e:68:bf:e1:bc:29:
         28:0f:55:a2:3a:05:6d:f2:6c:d9:00:f1:61:3e:88:01:11:c0:
         6b:3e:35:53:ba:06:a3:77:68:d5:f6:fa:61:49:90:66:1a:1f:
         73:d7:11:cf:5a:41:24:78:c2:1e:82:75:af:50:77:8b:83:a3:
         a0:d5:60:9a:47:16:4e:45:c8:68:31:8f:7c:21:a8:92:34:fa:
         40:8c:b7:35:9f:63:92:8f:10:65:55:a8:cb:1d:2c:1f:0f:20:
         1f:51:90:27:6c:04:1f:49:08:7e:dc:54:0a:30:89:5b:b5:01:
         70:7a:93:79:ab:89:b3:fe:dc:b4:42:1d:35:94:ce:d6:e7:76:
         f7:a7:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:55 2024 by rpki-client on console-fra.rpki-client.org