Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          Ffk2jetMOvzsWNB1DX1C1YGIG9ayBWUstNPnwpCzNnk=
Subject key identifier:   A4:B2:F8:B7:8A:4E:DB:09:89:5A:6E:C9:CF:45:98:43:FA:4A:32:93
Certificate issuer:       /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Certificate serial:       11F693A4A734A89144455BB92F9AA57628044090
Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa
Signing time:             Sat 16 Nov 2024 10:00:02 +0000
ROA not before:           Sat 16 Nov 2024 09:55:02 +0000
ROA not after:            Sat 15 Nov 2025 10:00:02 +0000
asID:                     141922
IP address blocks:        103.165.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
                          rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 16:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:93:a4:a7:34:a8:91:44:45:5b:b9:2f:9a:a5:76:28:04:40:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
        Validity
            Not Before: Nov 16 09:55:02 2024 GMT
            Not After : Nov 15 10:00:02 2025 GMT
        Subject: CN=A4B2F8B78A4EDB09895A6EC9CF459843FA4A3293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:03:ca:b0:f7:f0:25:f5:23:af:5a:fa:f9:3f:
                    36:90:d3:58:9e:cc:33:b4:50:da:28:33:89:12:b8:
                    fd:b6:7b:6b:b3:9e:6d:e9:37:b1:eb:1d:39:75:f6:
                    91:29:fa:35:d8:67:2b:1e:2d:67:dd:41:5a:2a:40:
                    93:cb:f1:14:8e:26:09:40:4f:97:56:d0:05:a1:c8:
                    03:25:12:11:c1:c5:d9:56:8b:b7:a6:2e:16:be:3b:
                    21:12:21:99:5d:1d:fd:2d:05:4a:67:39:de:0f:d4:
                    db:24:30:21:b7:d8:d4:6f:04:28:f2:42:99:8e:ad:
                    95:6b:5e:5c:b9:e2:b6:29:9a:94:d0:d9:1c:c3:58:
                    aa:80:ff:39:c0:48:64:a8:0b:92:8e:f6:61:07:4d:
                    15:56:91:d2:74:6d:aa:3c:f0:4e:af:e8:3e:34:fa:
                    54:8f:47:f3:9c:61:f5:94:23:a5:ee:66:f7:51:92:
                    94:55:30:d7:81:87:c3:1b:7f:f5:29:46:c2:30:6a:
                    f6:16:56:69:ba:94:4d:d1:4c:53:6e:de:20:37:96:
                    6a:e8:81:ea:ab:20:b3:92:af:14:68:e1:02:d4:d3:
                    e1:a3:e9:ea:23:93:3a:b6:ac:0c:da:9d:1a:2c:be:
                    58:9b:1b:45:e9:3e:7c:57:3e:ae:85:bc:0b:66:8b:
                    32:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:F8:B7:8A:4E:DB:09:89:5A:6E:C9:CF:45:98:43:FA:4A:32:93
            X509v3 Authority Key Identifier:
                keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:39:60:82:ad:1d:4d:ba:60:47:5b:8f:64:81:29:9a:1b:7c:
         a2:30:68:db:20:92:5f:fc:47:b2:80:1a:d3:a5:59:a9:d3:d1:
         d4:17:19:ca:f3:92:1f:d7:ba:1a:89:99:40:13:d7:bf:7e:8c:
         74:e5:64:2c:dd:d0:83:21:e9:42:55:71:8c:ed:88:92:b9:ef:
         a6:24:be:df:2f:87:40:f2:0b:92:41:28:c0:e5:73:42:69:83:
         ec:25:69:d7:c1:76:e0:f0:61:b9:7f:39:f6:ec:ee:60:3d:63:
         a6:4c:87:0c:e2:5a:60:4c:4a:0e:ad:39:70:bc:2f:b6:26:1f:
         00:11:9c:99:17:5d:19:20:66:99:da:0d:7f:04:c0:86:1f:4b:
         0a:0a:b1:f9:2c:b6:ed:49:a7:08:66:8e:49:b5:59:3e:cc:e0:
         b4:d4:83:3f:48:90:47:e7:d0:bb:2c:da:ac:d8:8a:b2:93:92:
         c8:ee:26:33:00:25:9d:62:6a:ad:6f:52:64:20:29:23:9d:43:
         1d:94:38:09:f4:82:3c:4c:e7:e8:58:1c:d5:a6:9c:2c:e7:71:
         02:23:88:ee:92:77:4f:50:ef:fa:1d:54:62:f6:fd:45:6b:2b:
         b8:fc:4f:05:37:63:d3:1a:ec:d2:1e:a4:68:06:d4:5d:38:89:
         d2:bd:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org