Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
File:                     3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (raw, json)
Hash identifier:          2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=
Subject key identifier:   CB:A2:B5:9F:49:22:1D:FC:D1:2E:4D:13:90:EB:21:A9:ED:05:14:48
Certificate issuer:       /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
Certificate serial:       7B7E4C4C544D1EC6D983AF72A61687EF1767B789
Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa
Signing time:             Thu 08 Aug 2024 04:58:32 +0000
ROA not before:           Thu 08 Aug 2024 04:53:32 +0000
ROA not after:            Thu 07 Aug 2025 04:58:32 +0000
asID:                     141606
IP address blocks:        103.160.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl
                          rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7e:4c:4c:54:4d:1e:c6:d9:83:af:72:a6:16:87:ef:17:67:b7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8
        Validity
            Not Before: Aug  8 04:53:32 2024 GMT
            Not After : Aug  7 04:58:32 2025 GMT
        Subject: CN=CBA2B59F49221DFCD12E4D1390EB21A9ED051448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:42:ad:93:c0:56:76:04:c4:af:88:28:3d:
                    88:cd:a4:b4:02:33:31:12:b1:15:0c:7c:63:9f:fd:
                    3c:6c:48:f7:e6:91:57:06:78:44:5d:84:33:59:bc:
                    e9:66:90:18:2e:44:85:49:fa:58:71:a3:d7:74:e3:
                    f5:9f:6a:e6:15:98:81:30:c0:1b:a3:f1:7e:c2:09:
                    91:bc:d2:90:69:1c:e4:56:10:c9:c8:93:46:c3:8b:
                    be:96:94:9a:42:7e:7b:f1:d3:4d:b1:f0:eb:cc:94:
                    1a:a7:2d:38:6b:46:b8:a5:92:84:ba:e6:93:4f:ab:
                    db:45:31:51:6b:78:fc:5c:3f:6f:8f:87:b9:f9:ea:
                    46:74:46:1f:26:db:fb:c0:9b:3c:cd:20:b1:2c:c7:
                    b7:eb:28:64:b9:1c:ba:8d:81:f6:8e:63:e8:08:42:
                    5b:01:70:c4:bb:83:c5:97:5b:26:fe:3b:1c:17:53:
                    90:2f:4a:ec:54:60:f0:71:f5:2e:19:2c:e3:19:5b:
                    65:ed:7e:b6:f7:e0:b7:61:e6:d8:9e:3e:0c:c0:d1:
                    25:5b:6f:bf:80:76:3f:fa:3d:04:14:2f:df:59:af:
                    d5:b7:a4:3a:1c:6a:ef:12:c3:4d:62:fd:2f:6c:c1:
                    b4:86:e7:ec:74:45:a7:73:45:1b:62:9f:36:3a:e7:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:B5:9F:49:22:1D:FC:D1:2E:4D:13:90:EB:21:A9:ED:05:14:48
            X509v3 Authority Key Identifier:
                keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:76:e3:76:0e:d7:f9:9b:fb:2c:18:83:b5:72:f2:37:4e:a9:
         59:25:be:3d:39:6b:ff:51:52:10:39:ff:7d:1d:00:b7:b2:05:
         74:da:77:d5:b8:76:a3:ff:33:93:95:d1:4f:91:92:69:43:4b:
         42:d0:55:36:85:92:35:58:f7:32:ef:8d:f8:33:3a:9f:a9:72:
         3f:a8:2d:67:70:ff:21:54:e5:2f:9d:4e:32:fb:58:b0:a6:86:
         1f:bf:99:e8:98:e9:b1:bc:aa:07:a3:97:b3:60:fe:a7:e7:4b:
         17:51:e3:84:a5:c9:93:5a:4e:43:45:6a:08:49:0a:b3:8b:bc:
         6f:41:3e:9b:56:cd:0b:e6:28:1e:be:99:bd:53:1a:81:89:4a:
         d5:1a:b6:8c:77:be:1d:34:e8:a5:fa:29:e7:da:05:a3:f0:30:
         6d:e4:56:51:92:8c:e1:e1:3b:c5:50:47:11:5f:98:f2:76:47:
         97:b6:36:5f:fe:cb:c7:17:9f:2b:5f:91:88:e4:09:cb:b8:49:
         2e:26:8e:47:17:44:8a:b6:34:cd:b0:47:9f:1a:2b:7f:58:9a:
         e4:73:1e:f8:97:1f:d9:03:44:55:41:8f:0d:75:64:94:c3:8f:
         54:92:59:03:6c:5b:86:4f:ca:98:9b:ad:4a:d1:cd:02:3e:0a:
         ee:cc:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org