Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          wy7LkIaq3Qe5bocRgw2hjn/Q/djrvmqI0m2J6V0g/+8=
Subject key identifier:   26:DB:4A:B2:54:66:5F:51:E5:8D:05:7A:A4:22:DE:36:77:DB:73:4C
Certificate issuer:       /CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
Certificate serial:       7D2BFB7A5CF7B7767BEE7981B518F9828A2D8CC9
Authority key identifier: 6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa
Signing time:             Thu 25 Jan 2024 04:03:46 +0000
ROA not before:           Thu 25 Jan 2024 03:58:46 +0000
ROA not after:            Thu 23 Jan 2025 04:03:46 +0000
asID:                     152017
IP address blocks:        103.255.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl
                          rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2b:fb:7a:5c:f7:b7:76:7b:ee:79:81:b5:18:f9:82:8a:2d:8c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ED97449A90175F41CA7139C43ABDB1DE992C510
        Validity
            Not Before: Jan 25 03:58:46 2024 GMT
            Not After : Jan 23 04:03:46 2025 GMT
        Subject: CN=26DB4AB254665F51E58D057AA422DE3677DB734C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:a1:73:e8:fa:65:9f:96:f8:3b:52:16:7c:
                    55:f0:cd:34:fc:b4:00:d7:31:ed:56:1f:b4:b2:3f:
                    cb:2c:ff:4f:9b:85:0f:9c:68:06:96:38:19:34:53:
                    2e:3d:57:c6:9f:36:2f:db:4b:56:2f:60:78:bc:a8:
                    95:ab:97:59:17:39:16:36:8c:e1:44:1c:54:4f:f7:
                    c9:1d:54:38:89:7d:06:e2:81:84:44:71:83:54:0d:
                    29:52:e1:28:be:82:86:79:37:78:93:44:75:36:60:
                    34:78:cf:77:98:0e:07:66:49:7e:ee:96:b5:a2:46:
                    dd:30:7a:2f:15:6b:13:93:dc:7e:ba:7c:c4:3f:15:
                    ed:fb:1e:6e:7c:58:88:89:7a:f9:b6:ae:02:ca:75:
                    f9:b6:f6:00:de:be:fb:be:67:9b:66:e5:2c:c2:07:
                    50:07:71:74:1c:38:c7:2a:9d:3e:ca:e0:cd:23:e1:
                    16:23:90:ee:ca:b4:3b:e4:66:1e:17:d1:f7:cb:35:
                    48:b2:d5:74:e6:4f:85:ec:50:d9:f5:36:5b:13:5c:
                    f6:50:6a:13:d7:72:a0:b6:1c:15:f4:24:f8:e8:47:
                    92:a5:aa:55:13:4b:3b:b4:38:56:79:36:02:68:ca:
                    31:fb:c1:df:02:0f:a5:91:a1:83:3d:3f:0e:db:e9:
                    e0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DB:4A:B2:54:66:5F:51:E5:8D:05:7A:A4:22:DE:36:77:DB:73:4C
            X509v3 Authority Key Identifier:
                keyid:6E:D9:74:49:A9:01:75:F4:1C:A7:13:9C:43:AB:DB:1D:E9:92:C5:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/6ED97449A90175F41CA7139C43ABDB1DE992C510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6ED97449A90175F41CA7139C43ABDB1DE992C510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136332e302f32342d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:c3:19:8c:3f:11:5d:b0:94:6b:95:d0:92:9b:bd:04:9d:
         f0:3d:62:b2:46:2f:07:01:37:c5:d7:b3:82:c8:13:55:4d:5d:
         bc:43:bb:47:46:ff:3b:8a:0d:78:28:bf:d7:bf:dc:45:a4:53:
         f7:b3:61:c5:2d:69:93:c0:7c:ae:d2:79:e7:1b:e6:3f:7a:69:
         bc:4f:4d:e7:db:58:5b:44:2a:a5:56:6b:c9:1f:d9:95:42:59:
         6a:d8:b9:bb:af:1a:8a:3c:0c:5d:a5:e2:26:83:b3:02:b0:e9:
         26:3d:c7:4f:f6:1e:9d:13:09:c5:74:0a:28:b7:fc:d3:ca:93:
         d6:0a:7a:df:1c:e4:af:96:ca:b3:b6:e1:32:c0:01:da:f4:cd:
         bf:f4:c9:9d:c0:ad:70:6c:06:c9:86:65:2f:d1:8f:c5:5b:40:
         f8:c6:42:28:f5:d6:01:5f:c0:ca:e9:09:e4:c9:47:88:d1:65:
         f9:ab:6f:65:83:cd:84:4d:a6:ca:cb:c3:28:68:92:fb:7e:f1:
         4e:d4:90:24:fa:74:64:bb:bc:d0:1c:69:4b:13:5a:63:68:1a:
         5e:db:6b:4c:0e:9f:77:38:29:ff:fa:5d:83:16:87:a8:43:ae:
         1a:f5:91:5a:61:0a:cd:6c:06:6b:5e:13:05:dc:2a:55:80:80:
         65:fa:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org