Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          KV7WAcps5bEh+GpkHGUsm2cNdf7FvTEK1qCj8UclR4o=
Subject key identifier:   61:2B:98:90:7E:A5:73:D2:68:24:EC:FA:9B:83:39:35:4E:CD:52:84
Certificate issuer:       /CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
Certificate serial:       3849E8E2402C213BB575942E3BC500D6A64E0FE9
Authority key identifier: C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa
Signing time:             Thu 19 Oct 2023 04:01:50 +0000
ROA not before:           Thu 19 Oct 2023 03:56:50 +0000
ROA not after:            Thu 17 Oct 2024 04:01:50 +0000
asID:                     140389
IP address blocks:        103.160.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl
                          rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:49:e8:e2:40:2c:21:3b:b5:75:94:2e:3b:c5:00:d6:a6:4e:0f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6E3A22817CE6E098DFC674B26288C83D6C3F1CE
        Validity
            Not Before: Oct 19 03:56:50 2023 GMT
            Not After : Oct 17 04:01:50 2024 GMT
        Subject: CN=612B98907EA573D26824ECFA9B8339354ECD5284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:ba:45:75:69:77:9f:9e:b3:25:16:f5:4b:
                    4a:c7:75:ae:b9:79:d0:af:50:03:aa:02:4c:66:42:
                    c5:dd:03:73:d2:56:f5:01:ba:b9:41:17:0a:bb:51:
                    3e:f2:15:87:50:b2:f6:83:2f:2c:38:74:25:ec:52:
                    11:3f:80:88:56:96:51:5f:6f:ec:4d:35:b0:91:b6:
                    4b:12:85:b3:87:84:d2:a1:db:73:73:f0:66:16:74:
                    bf:e6:cc:e1:57:ed:52:fa:44:46:6a:2d:f7:7a:a5:
                    c2:16:b2:99:db:01:82:ff:c3:5f:6e:30:d2:d3:58:
                    30:4a:00:86:aa:b3:eb:38:d6:26:9f:c3:62:e8:4d:
                    4e:ff:d3:3d:9c:cb:fd:ee:18:67:b9:55:31:f7:59:
                    0b:b6:f8:cc:84:16:86:c4:1f:29:e5:10:80:ad:61:
                    98:01:e7:0e:2e:46:a9:17:d4:56:86:5e:da:2c:37:
                    e3:fd:7a:2c:d8:a2:79:d9:6c:30:3c:2d:67:db:7d:
                    62:d9:a7:8a:28:ec:1f:20:23:e2:c0:33:a3:47:ae:
                    a2:b1:e0:cc:5c:c2:6c:33:1b:e9:7d:26:0c:68:9b:
                    e3:68:1e:67:3d:ef:2a:e6:83:cc:c8:89:87:0c:97:
                    b5:29:69:c5:0b:49:39:2e:69:bb:da:27:50:eb:38:
                    f4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:98:90:7E:A5:73:D2:68:24:EC:FA:9B:83:39:35:4E:CD:52:84
            X509v3 Authority Key Identifier:
                keyid:C6:E3:A2:28:17:CE:6E:09:8D:FC:67:4B:26:28:8C:83:D6:C3:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6E3A22817CE6E098DFC674B26288C83D6C3F1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bee1ee1-a5b5-4c64-bbbb-2636352dacfc/0/3130332e3136302e3231332e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b8:d8:19:37:a4:54:da:9a:d9:2b:1c:4a:a7:7b:05:36:8d:
         a2:f0:c4:fc:5f:cf:52:a0:e2:b0:94:1e:16:9b:8c:1b:1d:7a:
         89:6b:ef:1d:46:6e:d9:46:ea:0d:13:f8:4e:e5:57:46:33:ca:
         54:52:85:ed:9c:56:0d:72:8f:c9:d4:02:71:07:2a:30:81:11:
         70:00:08:78:3e:f1:9e:da:c9:f2:6a:81:45:ce:cf:49:ef:76:
         57:3a:69:7a:0c:89:b6:ba:91:0a:47:17:42:24:49:65:29:ce:
         78:81:fc:3a:9d:56:be:d5:ba:d2:0c:24:94:fa:16:40:56:4a:
         64:b8:30:de:c3:fa:83:fd:06:01:07:57:c4:32:b6:31:6a:72:
         83:59:93:8e:8a:29:90:db:45:21:cb:3d:37:81:c9:70:22:db:
         71:47:2d:38:ed:d5:86:2a:7b:78:16:40:9e:2c:3a:3f:d4:80:
         75:24:12:df:a7:11:5f:16:b3:e9:f2:2d:4d:52:b9:5f:d5:91:
         09:89:64:14:ed:31:8d:08:eb:f0:28:f8:48:1b:b8:2b:60:6d:
         04:4e:61:f9:d1:0a:90:e5:6f:7f:e7:05:16:81:2a:61:9d:a0:
         a1:60:c3:d6:0b:52:94:31:b6:a2:25:91:92:3e:9b:ec:b3:77:
         ba:35:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:55:20 2024 by rpki-client on console-ams.rpki-client.org