Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
File:                     3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (raw, json)
Hash identifier:          T/avkK1K5KQqb3goD2eSalwCBXNjyLMnINGvgboUmkE=
Subject key identifier:   A0:FF:C0:B4:E5:7D:CC:36:A6:06:75:90:EC:7D:26:9E:49:61:F9:25
Certificate issuer:       /CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
Certificate serial:       74FA3F2686CECB881B12C8F7938CE384CF3D1C71
Authority key identifier: B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
Signing time:             Sun 04 Aug 2024 03:00:01 +0000
ROA not before:           Sun 04 Aug 2024 02:55:01 +0000
ROA not after:            Sun 03 Aug 2025 03:00:01 +0000
asID:                     147100
IP address blocks:        103.174.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl
                          rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fa:3f:26:86:ce:cb:88:1b:12:c8:f7:93:8c:e3:84:cf:3d:1c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6829F5E7EF7B5DF3397CD3222160BE94449AC6E
        Validity
            Not Before: Aug  4 02:55:01 2024 GMT
            Not After : Aug  3 03:00:01 2025 GMT
        Subject: CN=A0FFC0B4E57DCC36A6067590EC7D269E4961F925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:a8:84:75:48:8b:7f:da:82:04:38:b8:ea:
                    ee:6c:2b:70:52:16:1d:d1:de:49:c8:3d:6f:1e:b7:
                    cf:9b:8f:93:be:4e:2e:25:68:26:8b:d6:e2:bf:67:
                    16:d3:f8:3f:c5:5c:13:83:b0:ce:27:9f:38:b9:ef:
                    27:11:dd:10:9f:85:77:69:e7:ae:7b:cc:13:81:ad:
                    55:b4:f8:2e:d0:bd:63:5a:83:87:4d:6d:33:3f:18:
                    7b:e7:9e:f2:e4:ee:4f:3f:16:be:19:2c:15:54:9d:
                    90:44:ce:53:4b:17:08:e6:1e:d8:37:23:f1:66:23:
                    0a:77:af:a5:7b:1e:0b:0d:6a:f4:2a:80:94:2b:92:
                    04:aa:b8:25:84:52:15:92:04:c7:30:78:48:b7:84:
                    da:b4:93:fe:18:41:14:af:78:32:54:53:51:37:a2:
                    13:1d:a8:70:13:35:1c:19:82:b7:24:90:7f:64:c7:
                    df:64:95:34:47:0e:69:23:00:da:4e:fe:9b:16:d3:
                    d9:4f:47:04:28:91:17:3b:9b:d7:70:6e:96:02:2f:
                    31:2b:d7:fe:a7:04:82:61:49:f3:40:ad:36:95:e4:
                    db:b5:2d:d8:46:3f:2c:df:88:66:ce:33:6d:50:f4:
                    64:79:91:70:cd:15:b1:bd:18:23:97:8a:38:e4:42:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FF:C0:B4:E5:7D:CC:36:A6:06:75:90:EC:7D:26:9E:49:61:F9:25
            X509v3 Authority Key Identifier:
                keyid:B6:82:9F:5E:7E:F7:B5:DF:33:97:CD:32:22:16:0B:E9:44:49:AC:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6829F5E7EF7B5DF3397CD3222160BE94449AC6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7b:96:56:d8:9d:cb:43:89:fc:5b:c7:6e:5d:dd:3c:e4:b9:
         ec:94:c0:c4:bd:ed:69:46:5e:c9:62:3d:88:4e:d9:ce:12:d4:
         b7:2e:30:e1:ed:85:1c:3d:53:b0:fc:f8:b7:9a:57:a9:93:06:
         44:06:35:d1:e1:e7:c4:94:e7:9e:1f:5e:b5:bc:66:25:8e:59:
         2c:d0:b8:c1:98:7b:cd:56:84:70:2b:10:92:b7:dc:0d:08:8d:
         bd:20:ad:d3:f2:46:14:cc:0c:52:ee:52:2e:d3:0d:f2:67:c2:
         19:f0:6e:20:e6:3c:e4:c1:a6:c1:c1:db:be:17:93:5e:8f:3b:
         8d:01:a1:4b:3b:c0:c0:56:3d:dc:7e:54:93:e6:3d:d0:e2:0f:
         04:a6:fc:3a:2d:a8:dc:8c:90:a3:11:13:73:2d:40:28:5b:3e:
         3e:53:4e:f6:1e:f0:24:a1:20:1f:67:0b:d9:4e:d7:60:94:70:
         98:59:4a:1d:ec:7e:5b:32:f1:e6:22:73:eb:a8:67:a3:4a:d7:
         77:c1:cb:82:ea:a4:de:b8:8d:6d:c8:e2:1d:42:cd:70:ad:4d:
         79:a1:b9:9f:14:3e:1c:fa:dc:b8:5b:2d:ee:e3:f7:2e:7d:a6:
         3c:d2:2b:8e:5d:bc:5b:1a:cd:e3:e2:10:53:68:0e:8e:c7:fa:
         9a:d3:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org