Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa
File:                     3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (raw, json)
Hash identifier:          VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=
Subject key identifier:   16:3B:0A:BB:D2:3D:06:34:CC:CC:78:94:41:5F:0F:0E:E7:32:D0:BE
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       022979EAE7F8C377854EF4EFEE580C1A335F72F6
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa
Signing time:             Thu 31 Oct 2024 03:02:55 +0000
ROA not before:           Thu 31 Oct 2024 02:57:55 +0000
ROA not after:            Thu 30 Oct 2025 03:02:55 +0000
asID:                     150199
IP address blocks:        103.220.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:29:79:ea:e7:f8:c3:77:85:4e:f4:ef:ee:58:0c:1a:33:5f:72:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Oct 31 02:57:55 2024 GMT
            Not After : Oct 30 03:02:55 2025 GMT
        Subject: CN=163B0ABBD23D0634CCCC7894415F0F0EE732D0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:eb:4c:a2:1a:d3:6f:40:5a:b1:a1:25:c0:
                    f1:ce:52:cc:4e:61:64:2b:98:65:28:59:3e:68:7b:
                    46:3e:56:6e:5e:c9:ce:2a:33:8a:db:38:3f:15:47:
                    de:e4:68:fb:10:ac:22:5a:0f:18:44:a9:c8:df:99:
                    98:81:0c:2c:4a:5f:2d:e6:e4:bd:58:35:8e:66:08:
                    54:e4:0d:62:6b:b3:a1:49:ea:4f:5a:49:ab:53:9b:
                    0b:3e:5b:f2:23:f9:9b:a7:ac:79:77:70:45:b0:23:
                    e9:60:51:0d:72:3b:34:a5:d7:ef:60:63:0d:01:1b:
                    c0:70:f7:2d:b8:3f:0f:67:e1:59:8d:77:74:7e:0c:
                    9a:8e:ff:d7:b1:82:99:57:6d:ff:74:af:31:0d:28:
                    8e:2d:48:22:8f:9a:44:e0:f0:67:33:45:9d:d8:19:
                    5f:71:66:94:9c:bb:f9:b1:59:54:bb:0a:6c:84:3b:
                    c7:b8:c7:a2:65:1b:10:60:7c:39:b2:1a:07:a1:14:
                    61:7c:ca:93:8d:b1:5c:77:e3:1e:6a:66:ae:97:7f:
                    0d:9c:ad:49:f1:2f:22:ec:d1:c8:7f:d6:a3:74:67:
                    7c:49:66:02:66:ad:ed:d8:4b:a6:f4:d7:3a:ab:d0:
                    98:89:57:54:fb:ac:84:89:ea:60:70:15:62:98:0e:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:0A:BB:D2:3D:06:34:CC:CC:78:94:41:5F:0F:0E:E7:32:D0:BE
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:04:7b:2b:7b:ff:b2:24:15:2b:a3:2c:2f:72:6a:40:d1:
         a4:b1:b5:cf:e0:80:b2:34:cb:24:da:ef:7a:0c:93:7f:e7:3f:
         02:28:e6:1c:76:e9:c2:94:cc:e8:1b:92:48:dd:12:a4:59:06:
         98:85:bb:f0:93:24:43:4d:09:cf:78:a0:59:a7:d2:bc:f2:b3:
         04:79:ff:d0:d7:25:26:a8:a5:e9:67:55:40:a6:93:b8:03:75:
         99:b0:73:13:22:90:cd:64:c9:2b:bc:94:44:a7:b4:9c:f9:02:
         eb:f1:fa:e1:72:a2:d1:20:51:d1:bd:b4:90:de:55:95:ca:d0:
         f5:7e:a5:d5:c7:ce:34:c4:08:14:86:8e:21:12:a5:31:3c:f6:
         20:88:30:5d:8b:c4:5c:69:31:21:0c:9a:32:b3:6e:dc:e9:e8:
         18:c8:12:30:74:44:0f:0d:0e:52:d3:0a:8c:f0:df:be:e1:11:
         1d:58:c1:03:3c:25:18:b6:ba:f8:ec:d3:10:07:81:64:e2:fc:
         ae:e3:81:2c:9c:6a:5e:48:9a:a9:d7:57:ce:9d:6d:9d:e0:21:
         0b:48:f2:53:5d:be:12:e1:f9:16:ec:0f:2a:64:56:63:47:67:
         65:5c:80:70:25:47:d1:b9:68:65:8c:a3:a4:6b:b7:30:5b:33:
         bd:01:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org