Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa
File:                     3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (raw, json)
Hash identifier:          +nCpjggGdcuMM5owXShRuqf78BAW9m96dVBMrpQYYWU=
Subject key identifier:   E7:58:68:1E:97:4E:AE:A6:A4:C0:D0:79:8B:0D:BF:20:9C:E6:56:76
Certificate issuer:       /CN=166B4918E7A1A1641E7C79C537833379E393522E
Certificate serial:       24418F44E477C0BAC4276EC911A14309F9A69BBB
Authority key identifier: 16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa
Signing time:             Wed 04 Oct 2023 09:01:26 +0000
ROA not before:           Wed 04 Oct 2023 08:56:26 +0000
ROA not after:            Wed 02 Oct 2024 09:01:26 +0000
asID:                     147107
IP address blocks:        103.174.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl
                          rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:41:8f:44:e4:77:c0:ba:c4:27:6e:c9:11:a1:43:09:f9:a6:9b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166B4918E7A1A1641E7C79C537833379E393522E
        Validity
            Not Before: Oct  4 08:56:26 2023 GMT
            Not After : Oct  2 09:01:26 2024 GMT
        Subject: CN=E758681E974EAEA6A4C0D0798B0DBF209CE65676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:42:7b:b7:eb:49:c5:dd:6e:0c:1a:4d:e8:
                    d9:b2:ee:e7:88:17:28:a2:ec:ff:df:b0:fe:57:61:
                    b5:13:52:cd:ec:2c:b1:e0:37:3c:1d:41:7e:ac:d8:
                    1e:6f:1f:d2:c0:98:17:ce:67:7d:c3:99:f5:5b:7d:
                    54:48:af:c1:8a:71:4b:a9:61:34:c5:c2:41:ec:48:
                    e5:02:f1:23:41:ef:10:df:7c:9f:37:43:3c:16:5e:
                    e3:1d:85:0e:cc:4d:fa:fb:b6:0a:d6:b7:af:5b:1c:
                    db:70:31:9a:3f:b9:e7:a2:79:24:1a:df:4b:d1:bd:
                    96:12:18:bb:d8:66:6d:3a:82:65:db:e8:5b:98:fa:
                    6e:96:6c:35:0a:cb:3d:ea:4c:fd:ea:44:91:71:9a:
                    9c:7e:0b:41:35:86:da:b4:92:ca:f8:2e:9e:d0:03:
                    05:52:5c:f5:01:f7:3b:db:19:c0:c9:a1:b1:33:72:
                    d3:fa:7f:75:7d:6a:2d:e7:af:1a:a1:ee:72:18:06:
                    b9:af:fb:00:37:72:fd:a9:f5:d4:55:1f:b7:bc:6b:
                    6b:5c:a7:14:97:5a:11:bb:35:45:a9:45:ab:ab:69:
                    c4:1e:6c:e7:71:03:49:c8:e6:c0:87:8f:8c:4e:41:
                    79:8c:35:bd:80:6d:18:2f:c6:21:58:68:0e:7d:12:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:68:1E:97:4E:AE:A6:A4:C0:D0:79:8B:0D:BF:20:9C:E6:56:76
            X509v3 Authority Key Identifier:
                keyid:16:6B:49:18:E7:A1:A1:64:1E:7C:79:C5:37:83:33:79:E3:93:52:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/166B4918E7A1A1641E7C79C537833379E393522E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/166B4918E7A1A1641E7C79C537833379E393522E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:3a:4c:a6:97:90:62:7a:0a:91:d9:6f:f0:bf:2e:c9:0a:
         e0:5b:5c:1c:17:ea:14:e7:d7:1a:f3:d5:01:28:83:d6:14:17:
         dc:e4:85:5c:16:6f:90:46:7d:72:b4:a4:68:24:0b:b9:15:10:
         ce:27:dc:85:7f:1d:8c:21:ba:62:50:b8:dd:d6:57:3d:5b:5a:
         57:60:d7:2d:b7:b0:75:c2:16:9d:e1:92:f0:97:d8:80:10:05:
         21:9d:52:9f:b0:cd:a5:90:3a:15:d0:d5:dd:be:6f:6b:ae:0d:
         a9:21:32:31:5b:98:8a:a5:4f:77:63:c9:0f:cc:eb:26:b2:82:
         54:36:31:ae:9d:ce:b9:10:9b:f1:43:1e:b0:74:e0:59:5c:ec:
         6e:a7:88:27:c6:c1:f7:a2:85:9d:63:37:48:39:78:76:13:3b:
         d2:06:7a:15:74:6d:d6:49:81:00:58:b5:6b:31:67:c4:c9:cc:
         27:4e:f2:ae:cb:20:bf:cd:e1:ae:96:bb:3c:46:30:f3:1d:7d:
         e1:d7:eb:d1:23:12:3f:d3:57:7a:25:ad:ab:cc:28:06:bb:bd:
         94:c9:0b:4a:74:59:c6:f9:e5:8d:82:58:91:09:c2:91:ff:b5:
         9b:b8:3f:58:3f:6c:19:70:2f:7a:a3:0b:c8:c2:b6:3b:8a:65:
         27:74:2b:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJEGPROR3wLrEJ27JEaFDCfmmm7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlF
MzkzNTIyRTAeFw0yMzEwMDQwODU2MjZaFw0yNDEwMDIwOTAxMjZaMDMxMTAvBgNV
BAMTKEU3NTg2ODFFOTc0RUFFQTZBNEMwRDA3OThCMERCRjIwOUNFNjU2NzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JEJ7t+tJxd1uDBpN6Nmy7ueI
Fyii7P/fsP5XYbUTUs3sLLHgNzwdQX6s2B5vH9LAmBfOZ33DmfVbfVRIr8GKcUup
YTTFwkHsSOUC8SNB7xDffJ83QzwWXuMdhQ7MTfr7tgrWt69bHNtwMZo/ueeieSQa
30vRvZYSGLvYZm06gmXb6FuY+m6WbDUKyz3qTP3qRJFxmpx+C0E1htq0ksr4Lp7Q
AwVSXPUB9zvbGcDJobEzctP6f3V9ai3nrxqh7nIYBrmv+wA3cv2p9dRVH7e8a2tc
pxSXWhG7NUWpRauracQebOdxA0nI5sCHj4xOQXmMNb2AbRgvxiFYaA59Eh15AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU51hoHpdOrqakwNB5iw2/IJzmVnYwHwYDVR0j
BBgwFoAUFmtJGOehoWQefHnFN4MzeeOTUi4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzI4NTI5MS1jZTkyLTQxNDQtOWMxOC05ZThjMTkxZGRlYzYvMC8xNjZCNDkxOEU3
QTFBMTY0MUU3Qzc5QzUzNzgzMzM3OUUzOTM1MjJFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY2QjQ5MThFN0ExQTE2NDFFN0M3OUM1Mzc4MzMzNzlFMzkz
NTIyRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMjg1MjkxLWNlOTItNDE0NC05
YzE4LTllOGMxOTFkZGVjNi8wLzMxMzAzMzJlMzEzNzM0MmUzMTM4MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrrUwDQYJ
KoZIhvcNAQELBQADggEBAEG4Okyml5BiegqR2W/wvy7JCuBbXBwX6hTn1xrz1QEo
g9YUF9zkhVwWb5BGfXK0pGgkC7kVEM4n3IV/HYwhumJQuN3WVz1bWldg1y23sHXC
Fp3hkvCX2IAQBSGdUp+wzaWQOhXQ1d2+b2uuDakhMjFbmIqlT3djyQ/M6yayglQ2
Ma6dzrkQm/FDHrB04Flc7G6niCfGwfeihZ1jN0g5eHYTO9IGehV0bdZJgQBYtWsx
Z8TJzCdO8q7LIL/N4a6WuzxGMPMdfeHX69EjEj/TV3olravMKAa7vZTJC0p0Wcb5
5Y2CWJEJwpH/tZu4P1g/bBlwL3qjC8jCtjuKZSd0K4g=
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:51 2024 by rpki-client on console-ams.rpki-client.org