Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa
File:                     3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier:          1JS7BDeBUPrlE38obX4/dOtxoMlb98tZXz73Js3EUv0=
Subject key identifier:   B9:42:98:A0:2C:C7:AB:B1:1A:3E:10:62:C0:DF:B2:CA:41:0F:91:5F
Certificate issuer:       /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial:       586D015C49E75246B6CA20700DA5D4D1DEBF6E65
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa
Signing time:             Thu 19 Sep 2024 04:02:23 +0000
ROA not before:           Thu 19 Sep 2024 03:57:23 +0000
ROA not after:            Thu 18 Sep 2025 04:02:23 +0000
asID:                     140389
IP address blocks:        103.160.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
                          rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6d:01:5c:49:e7:52:46:b6:ca:20:70:0d:a5:d4:d1:de:bf:6e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
        Validity
            Not Before: Sep 19 03:57:23 2024 GMT
            Not After : Sep 18 04:02:23 2025 GMT
        Subject: CN=B94298A02CC7ABB11A3E1062C0DFB2CA410F915F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fa:d9:80:26:8e:40:bf:6e:83:cb:1c:bc:66:
                    f6:f5:1a:aa:b3:2f:6f:cd:c9:29:7b:31:4e:b1:e7:
                    65:22:2c:c7:15:8f:9e:a8:7f:bb:0f:da:54:da:7b:
                    74:a2:de:a7:e6:21:dc:ab:61:b7:c8:7f:2a:94:fb:
                    6b:07:bb:f2:09:88:c9:22:45:dc:31:bf:1b:bc:57:
                    98:71:ca:84:38:a5:c7:07:bc:ac:43:75:e0:d9:65:
                    bf:cf:5d:28:24:c0:d2:99:75:f9:af:12:ab:19:39:
                    15:a5:75:e7:8f:3c:29:4d:3e:30:0c:b5:70:67:9f:
                    14:a2:ed:ea:62:1b:90:15:8f:5c:63:37:13:de:23:
                    19:68:7e:ef:48:bd:89:24:35:9f:f5:fa:c9:21:9f:
                    11:f2:fb:c7:95:f6:c4:d9:c4:f0:48:56:a1:b8:f0:
                    d4:ca:ad:73:94:c9:83:13:67:82:e1:93:2c:4b:97:
                    f5:c7:61:8c:bf:e5:a1:67:89:19:c1:7b:ad:cd:0a:
                    59:2e:45:0f:e7:06:f6:41:7a:07:72:e0:6c:a9:d1:
                    e9:3e:3f:12:f8:84:9f:fb:81:13:1b:68:d8:4b:9b:
                    00:ea:7c:be:77:d7:49:9f:5e:5c:0c:c2:ee:5a:54:
                    9a:29:93:fd:8e:a7:31:7b:05:d9:25:ab:26:5d:03:
                    79:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:42:98:A0:2C:C7:AB:B1:1A:3E:10:62:C0:DF:B2:CA:41:0F:91:5F
            X509v3 Authority Key Identifier:
                keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32332d3233203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:2d:b7:3b:8a:b2:46:21:6e:6d:84:ac:bf:8d:26:f6:1b:ec:
         2d:71:9c:8c:de:5a:7e:99:c7:ef:80:ff:9b:05:15:38:11:71:
         96:b7:22:bc:ec:d5:f2:f1:64:17:71:f0:74:15:c5:4c:93:cc:
         4b:6f:c9:d6:be:cd:d5:c3:0d:31:53:ff:0a:bd:9a:5c:b6:81:
         aa:54:5f:d7:74:a1:26:cc:c1:cf:7e:7a:af:89:ea:cb:e4:4f:
         dd:b6:1d:9e:5d:fb:96:a7:ef:cc:8c:8a:71:2e:db:f8:5a:bf:
         f8:20:a7:ef:23:a4:af:77:be:80:97:7c:2d:66:4e:30:c6:e9:
         a3:50:57:d4:70:d2:6c:23:6b:94:bd:e8:38:b6:ae:99:b4:17:
         dd:27:46:6f:0f:07:5d:4f:17:71:40:c3:19:81:c7:70:ae:5d:
         56:67:74:99:44:00:c2:f5:29:8a:9e:98:3d:c4:92:d6:99:73:
         14:0f:5f:c1:4a:26:f0:50:08:4b:7b:21:19:6e:dd:50:94:e9:
         04:1f:59:24:b4:eb:16:32:e6:c8:67:14:4f:b5:8e:53:5a:f0:
         bb:e9:4c:f2:72:67:c0:a4:77:21:12:6f:56:b4:c2:9b:ad:3b:
         33:38:55:80:14:17:b2:60:2d:30:6c:33:82:3d:73:4f:db:6e:
         99:80:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org