Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa
File:                     3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          paFKt6o0V+erS5HMhIrJfWgyUpdeSz8l0mwrNctd67E=
Subject key identifier:   DF:8F:69:81:CF:3C:2F:35:D6:D1:9C:0E:B0:9F:14:52:EF:37:D3:0A
Certificate issuer:       /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
Certificate serial:       26E42DCF8028A92488E9B929E2ECD2FDF24B1C85
Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa
Signing time:             Tue 22 Oct 2024 07:00:01 +0000
ROA not before:           Tue 22 Oct 2024 06:55:01 +0000
ROA not after:            Tue 21 Oct 2025 07:00:01 +0000
asID:                     139456
IP address blocks:        103.167.132.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl
                          rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e4:2d:cf:80:28:a9:24:88:e9:b9:29:e2:ec:d2:fd:f2:4b:1c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE
        Validity
            Not Before: Oct 22 06:55:01 2024 GMT
            Not After : Oct 21 07:00:01 2025 GMT
        Subject: CN=DF8F6981CF3C2F35D6D19C0EB09F1452EF37D30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:cd:6c:0d:e7:58:02:48:64:47:9d:c4:da:
                    38:b3:fb:f0:d2:6d:e9:a7:58:7a:dd:0a:dd:cd:dd:
                    ec:e5:e9:ab:0a:23:be:b3:d2:90:ad:84:77:9e:db:
                    47:df:eb:4b:09:49:22:b7:10:de:2c:aa:92:43:f9:
                    aa:d8:e5:aa:89:8b:54:7d:34:a8:93:a0:db:7b:ca:
                    c3:35:dc:3f:2e:15:e8:91:42:f1:d5:31:d4:44:8c:
                    ce:07:dc:c6:06:3f:fe:0b:df:5a:8a:9e:a6:ac:57:
                    a7:ce:24:9d:c0:ff:64:a6:8d:c8:1b:ed:70:21:e1:
                    25:79:fb:71:9d:1d:39:bb:27:ef:37:b2:da:a5:ab:
                    9d:12:6b:2d:6f:b0:56:5c:7a:96:f4:ed:fd:6d:37:
                    02:2a:4d:0c:a6:07:1a:9a:5b:c0:5f:8c:b1:f2:f3:
                    50:b6:6e:5b:07:3e:46:b7:da:95:d5:90:e0:c7:73:
                    94:3e:2e:f7:0c:ff:c9:45:81:f6:19:2e:f7:93:39:
                    82:cc:14:34:83:31:dc:40:47:c0:4c:84:19:67:c3:
                    5b:47:b9:26:c0:22:ef:ca:8e:d8:99:f6:b2:4d:af:
                    b4:5e:b5:44:06:db:54:db:77:52:9f:a2:27:26:1d:
                    ee:99:2d:dd:a3:5a:fd:0f:4a:6b:6d:f3:8a:83:be:
                    f3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8F:69:81:CF:3C:2F:35:D6:D1:9C:0E:B0:9F:14:52:EF:37:D3:0A
            X509v3 Authority Key Identifier:
                keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:13:0c:1c:51:16:cd:d2:5e:c4:a2:e5:b4:c3:8b:64:4a:
         d7:43:57:1f:f8:d1:a9:46:0b:1f:7b:2c:73:aa:ce:52:6e:12:
         58:a4:7f:0b:37:38:b9:e4:76:f9:b8:68:d9:82:a7:1d:87:85:
         6b:23:7a:12:62:4c:cf:bb:94:d9:23:ac:30:d5:1c:37:3b:8b:
         f1:92:3c:c6:18:77:92:4c:39:69:c5:69:07:2c:43:99:ed:ed:
         e4:80:fe:3d:21:04:f0:f7:93:89:68:05:ce:85:ab:2c:42:9e:
         ce:b7:02:2f:e3:f8:d1:ca:6d:f6:86:bb:2e:44:19:cf:63:e2:
         89:57:30:a5:ce:c1:2e:42:88:f4:4e:b3:02:65:e7:91:32:b1:
         c9:ad:e5:9b:08:91:91:e2:c5:28:82:64:73:d3:c4:42:e6:8d:
         f3:d3:48:f6:d0:2e:59:95:6e:96:e4:e8:a6:e2:9d:c2:da:fd:
         01:5d:9e:a3:01:73:3e:a1:86:e3:41:b6:78:29:a4:f1:87:fb:
         00:e4:5a:89:c8:a6:82:eb:50:4b:be:ea:44:33:6a:38:d1:25:
         00:b5:cc:8c:0b:32:70:8f:64:be:94:57:d1:8e:46:4c:78:bc:
         10:a4:33:f7:4f:73:86:99:5e:4c:a4:5a:9a:86:9f:02:5f:ae:
         24:4b:a4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org