Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          2GAO2WKhJLUYMWxiP8tf/oiHTNGvRf7OUHdDN/T5hcE=
Subject key identifier:   7D:37:D5:56:8F:AF:4B:75:BB:75:3C:B1:45:BD:C2:06:92:00:C0:33
Certificate issuer:       /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial:       570918E12606705BA824D7C9E59CF92EEA94EEEE
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa
Signing time:             Thu 19 Sep 2024 04:02:24 +0000
ROA not before:           Thu 19 Sep 2024 03:57:24 +0000
ROA not after:            Thu 18 Sep 2025 04:02:24 +0000
asID:                     140389
IP address blocks:        103.160.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
                          rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:09:18:e1:26:06:70:5b:a8:24:d7:c9:e5:9c:f9:2e:ea:94:ee:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
        Validity
            Not Before: Sep 19 03:57:24 2024 GMT
            Not After : Sep 18 04:02:24 2025 GMT
        Subject: CN=7D37D5568FAF4B75BB753CB145BDC2069200C033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:88:a7:e4:d5:6a:98:a6:1a:aa:8c:50:8b:
                    0d:0c:fa:a9:04:63:a1:cd:bc:98:fc:e3:ce:15:10:
                    3d:e4:c6:f1:0a:c9:c5:b8:8c:2d:83:89:7a:15:6c:
                    57:a2:48:2b:d3:55:87:96:94:d0:2a:38:10:53:7e:
                    bb:83:50:64:65:3d:69:7f:34:3f:36:29:b4:da:01:
                    77:9c:81:88:c8:96:f1:da:3c:38:fc:4a:8d:ec:f7:
                    b1:6b:e1:07:65:8f:2d:05:92:82:98:db:94:07:df:
                    69:e7:a9:21:97:d2:2b:b5:02:1b:da:cd:cd:40:45:
                    51:4c:4f:68:3e:76:8f:3c:86:f7:a3:10:13:d4:e5:
                    24:95:78:0d:89:ca:95:9d:f8:0b:bf:7c:5e:48:80:
                    f2:49:fb:5f:e1:38:17:dd:ca:40:62:f2:79:e1:36:
                    ba:3c:64:dd:24:28:cd:71:dc:d9:cd:23:9a:df:e0:
                    2d:b1:40:4b:fb:52:cf:c0:5e:e5:2a:db:96:e3:68:
                    55:4c:ff:0e:cc:2b:4f:91:77:78:25:dd:d7:a4:8e:
                    06:43:ac:9c:22:eb:38:42:aa:e1:31:98:57:f5:d8:
                    05:a0:42:95:09:8a:78:e2:56:e4:f3:81:46:46:bd:
                    9d:81:bf:0e:ec:cc:19:01:6f:ec:18:da:fe:0e:5b:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:37:D5:56:8F:AF:4B:75:BB:75:3C:B1:45:BD:C2:06:92:00:C0:33
            X509v3 Authority Key Identifier:
                keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231322e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0f:04:ba:f9:5f:48:3e:56:bf:86:14:67:c4:97:9d:e8:66:
         58:b1:89:0c:dc:5a:44:6a:44:e3:3a:15:f4:68:30:2c:cc:28:
         59:f2:08:87:73:24:6c:c4:8a:58:76:7f:49:2b:65:24:02:f2:
         42:14:54:18:60:fc:ed:43:b8:e8:9a:c4:5e:a6:68:6c:07:9e:
         b0:5b:a6:55:8d:f2:c2:0b:05:c4:49:96:d3:2f:1c:fe:be:dd:
         4e:48:c0:df:49:5a:80:6f:f1:de:e5:1b:c3:86:1a:aa:b1:40:
         88:57:3e:44:e3:d6:2e:dc:52:43:08:03:79:bc:78:72:97:41:
         67:fc:64:30:e7:78:70:91:73:03:41:29:b0:c2:fa:2c:09:66:
         df:3f:ba:ab:f8:fa:48:39:6f:4d:1c:86:af:f6:b9:da:bd:57:
         0a:ad:14:0d:e8:eb:eb:47:78:03:64:46:37:4e:ba:b7:45:f5:
         dc:75:d6:fd:b9:4a:e3:8c:93:db:4f:5e:fb:02:76:0d:55:2b:
         24:8c:36:e0:93:4f:74:14:01:2f:73:9f:f3:58:bb:82:b5:e5:
         b6:a3:b7:da:69:b1:7a:b6:a3:10:2e:d3:b6:d8:ed:42:28:36:
         a7:b1:08:14:56:f0:6c:72:c7:1f:e7:4b:df:0d:66:bd:33:17:
         56:8d:85:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org