Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa
File:                     3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa (raw, json)
Hash identifier:          e4qI+/HPpQdGWwN+QNEZ7WelYi1Yg4WS3gRNgD1IxJs=
Subject key identifier:   1B:08:37:F9:52:3B:EA:74:CB:F8:22:B1:8A:12:31:3B:CD:5C:B8:07
Certificate issuer:       /CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
Certificate serial:       242444D3EF6EFD90E12C5EDFA00B050F9CD77665
Authority key identifier: B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa
Signing time:             Thu 10 Oct 2024 17:00:02 +0000
ROA not before:           Thu 10 Oct 2024 16:55:02 +0000
ROA not after:            Thu 09 Oct 2025 17:00:02 +0000
asID:                     141628
IP address blocks:        103.161.146.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl
                          rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:24:44:d3:ef:6e:fd:90:e1:2c:5e:df:a0:0b:05:0f:9c:d7:76:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6E5A7744DCBF917614CBF06789CD9180354FB9B
        Validity
            Not Before: Oct 10 16:55:02 2024 GMT
            Not After : Oct  9 17:00:02 2025 GMT
        Subject: CN=1B0837F9523BEA74CBF822B18A12313BCD5CB807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:e1:f6:7c:68:a0:4d:3c:3c:ae:63:71:b5:
                    66:cb:f8:ae:90:2d:d9:2d:bc:4c:23:98:40:ea:0e:
                    d4:fa:cb:f2:7e:e2:fe:d8:ed:75:9f:20:49:a7:71:
                    91:09:04:57:5e:71:81:9d:e7:05:4f:29:3c:8c:b3:
                    b9:a8:9e:89:e5:de:88:70:e8:00:e3:e5:3a:14:d0:
                    4d:01:76:b2:33:49:44:5d:2c:45:64:62:19:44:b3:
                    e9:f0:ad:8b:b9:db:46:f2:71:2a:80:a9:c2:99:e2:
                    ed:6a:2a:a5:38:e6:89:39:2f:67:3e:47:f7:62:57:
                    8d:69:47:a5:69:be:58:22:45:c6:2b:6f:43:49:b7:
                    55:00:c8:2d:e6:dc:cb:01:50:85:d8:1c:ac:65:a4:
                    ee:80:7f:e3:a5:ac:21:fc:5f:c7:ba:b0:d0:a3:9d:
                    54:d9:4d:ca:30:5e:8c:4c:93:56:db:6f:39:44:59:
                    cf:1b:2d:f9:77:c1:03:06:0d:8f:53:99:da:f1:ef:
                    24:03:5c:a0:82:45:ba:68:9c:41:fa:da:0a:35:13:
                    b5:45:15:65:5a:69:e7:14:3a:7d:f3:b2:7a:2a:7f:
                    2e:ba:7c:93:46:85:35:6a:93:0f:72:e8:d1:00:8c:
                    ee:a2:0b:d1:43:14:74:84:0b:bc:74:0a:a2:bf:ee:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:08:37:F9:52:3B:EA:74:CB:F8:22:B1:8A:12:31:3B:CD:5C:B8:07
            X509v3 Authority Key Identifier:
                keyid:B6:E5:A7:74:4D:CB:F9:17:61:4C:BF:06:78:9C:D9:18:03:54:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/B6E5A7744DCBF917614CBF06789CD9180354FB9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6E5A7744DCBF917614CBF06789CD9180354FB9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60403675-5fa9-4e73-b4a9-232069b31ad9/0/3130332e3136312e3134362e302f32332d3234203d3e20313431363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:74:b2:24:89:ea:1c:d7:59:56:1d:67:8b:9e:8e:f6:6e:5e:
         ed:b9:25:23:9d:5e:d6:29:4b:f5:a6:de:72:7f:12:6c:1d:94:
         93:8a:eb:b2:23:c8:4e:c0:8c:ea:92:21:0c:f5:80:94:f8:9a:
         6d:5b:d8:00:7c:38:a3:af:6c:10:bf:27:06:3b:f6:9a:61:48:
         19:07:4a:31:b5:f5:f6:60:f9:7c:4e:17:84:59:04:ae:de:0d:
         88:94:0f:cc:fb:9e:aa:36:95:65:91:a0:07:5a:34:3b:78:e5:
         a3:da:65:78:88:b8:50:7a:2b:41:22:ad:06:9e:88:10:9f:a5:
         39:78:88:22:b0:20:1c:47:e2:34:29:6e:21:5c:be:99:17:1c:
         79:61:f4:0e:27:d8:90:ac:b3:fa:b2:c2:ed:b8:39:28:44:29:
         3d:96:0b:8e:3c:72:d4:54:17:9b:93:fc:2e:57:b3:c7:08:03:
         bb:0f:71:6e:52:7c:83:13:a7:0f:6d:3c:7c:2c:c7:bb:b5:99:
         20:8a:3d:39:c5:50:7f:93:80:25:c2:c2:35:40:af:8f:e8:c3:
         cf:20:e2:8b:3d:26:ac:82:5b:d6:5c:94:0d:e3:ca:fe:71:6e:
         a1:41:cd:1d:25:19:06:d0:45:92:a5:37:fe:e5:96:1b:df:04:
         27:7f:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org