Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
File:                     3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (raw, json)
Hash identifier:          1XfisJs/ysfUSJEq2SKUZaUiy/UBC2c5lcY3FLtGS0M=
Subject key identifier:   B8:34:E3:25:C8:05:DD:5F:68:FE:54:77:A7:56:CD:BB:A9:B7:C3:1A
Certificate issuer:       /CN=722FE79638E6D14E4794815122247CBEC27B8505
Certificate serial:       1CA775F277936DF491188E9A4F5770BFECF1F3A5
Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa
Signing time:             Sat 06 Apr 2024 16:00:00 +0000
ROA not before:           Sat 06 Apr 2024 15:55:00 +0000
ROA not after:            Sat 05 Apr 2025 16:00:00 +0000
asID:                     141984
IP address blocks:        103.167.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl
                          rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a7:75:f2:77:93:6d:f4:91:18:8e:9a:4f:57:70:bf:ec:f1:f3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505
        Validity
            Not Before: Apr  6 15:55:00 2024 GMT
            Not After : Apr  5 16:00:00 2025 GMT
        Subject: CN=B834E325C805DD5F68FE5477A756CDBBA9B7C31A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:79:f5:2e:0b:33:7c:fd:91:f7:38:cb:32:
                    b7:37:cb:9c:c2:1c:a4:c0:53:6d:32:b7:14:30:5a:
                    f3:7f:3d:82:af:48:52:4d:2b:51:65:57:c9:51:4a:
                    15:02:9a:7a:29:68:22:cf:dc:58:d6:b9:55:02:db:
                    75:45:1e:ce:3d:ac:4f:a8:a2:cb:ec:11:c7:44:ea:
                    65:bd:fd:c7:66:ae:9a:81:e8:09:94:56:c0:ca:c0:
                    1d:53:13:c6:40:a2:73:1d:7a:9f:6c:6a:1f:1e:5c:
                    72:9e:19:10:84:e4:39:21:10:5b:8b:47:79:e5:a7:
                    c3:5f:7f:35:17:bd:10:71:bd:cf:5a:ee:47:4f:1d:
                    4f:10:33:4c:6a:a7:42:53:a4:2e:f5:e3:a9:fe:2e:
                    04:da:88:66:13:db:6a:05:98:87:92:2f:94:17:b8:
                    8e:a2:d9:fd:ed:5e:7d:60:75:58:62:ff:49:a1:2d:
                    b7:d3:c0:82:8d:ee:a2:6d:6d:07:74:3f:5e:93:b1:
                    1e:1f:6f:5e:ea:28:b6:ff:94:99:cc:a6:9d:7e:05:
                    fc:11:fd:31:23:8c:a3:5e:65:6a:03:6c:12:11:af:
                    3d:30:4b:44:13:e0:08:11:fe:04:a1:77:df:0e:f6:
                    83:a0:db:ee:22:1b:6a:4e:c3:8c:7e:95:53:b0:1b:
                    45:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:34:E3:25:C8:05:DD:5F:68:FE:54:77:A7:56:CD:BB:A9:B7:C3:1A
            X509v3 Authority Key Identifier:
                keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:4b:c3:d6:d9:88:3d:df:3f:1b:4f:14:f5:de:cf:39:4b:
         27:62:cc:a0:d1:cc:ae:7e:50:9f:ab:16:5d:81:b3:9e:cb:48:
         d1:0b:a6:3f:36:9f:53:f9:9a:98:94:c4:6b:ae:45:88:f0:17:
         96:ed:9f:88:08:1a:25:89:d5:f8:df:86:e2:ff:22:70:81:4b:
         67:31:47:76:5b:7f:68:1b:66:0e:36:50:30:7f:67:5e:52:a3:
         ae:db:3e:a3:ca:11:d8:25:7a:93:df:b3:2f:b1:fe:7c:9b:b4:
         e6:9b:cb:17:dc:ad:3b:6e:14:3b:58:ec:08:e3:25:0b:aa:01:
         9b:13:13:1d:39:e2:63:cc:8d:6e:bf:79:b5:a5:fa:6b:86:8f:
         b2:a5:f8:a4:0f:4a:d7:da:89:1c:ae:11:65:74:46:f8:28:e2:
         69:6e:f2:69:c4:51:53:56:29:fc:1c:49:5b:b6:d4:66:ef:3a:
         1e:36:c5:76:59:64:6f:ec:60:11:e9:42:6b:32:b9:5b:fb:47:
         73:24:03:b2:cb:7a:db:17:4a:f3:ec:ff:0e:b8:79:a4:da:f0:
         f6:86:0d:02:67:37:f0:ea:6b:eb:5e:69:7f:fc:2c:5c:e7:e3:
         81:0e:0a:b1:1b:4e:e3:48:61:f0:10:98:1f:89:f6:fa:20:26:
         42:6c:22:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org