Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa
File:                     3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (raw, json)
Hash identifier:          WUBizHzzzhxM47zAVLp5a+ky9A5MD0OWcKmF8MB/Zc4=
Subject key identifier:   23:B8:0B:C9:B9:DA:37:45:61:10:79:15:52:09:E0:E9:1D:92:BD:F6
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       35D58F00ED40D98BC8C1E16B322697BBA5513F43
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa
Signing time:             Tue 16 Apr 2024 07:00:02 +0000
ROA not before:           Tue 16 Apr 2024 06:55:02 +0000
ROA not after:            Tue 15 Apr 2025 07:00:02 +0000
asID:                     141907
IP address blocks:        103.163.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d5:8f:00:ed:40:d9:8b:c8:c1:e1:6b:32:26:97:bb:a5:51:3f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Apr 16 06:55:02 2024 GMT
            Not After : Apr 15 07:00:02 2025 GMT
        Subject: CN=23B80BC9B9DA3745611079155209E0E91D92BDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:90:68:89:1a:85:e5:2d:72:5c:2f:c5:25:
                    23:ec:3e:ea:c4:0d:60:aa:28:6f:bc:ef:05:3c:93:
                    90:8e:f7:b1:34:07:fb:af:45:15:b1:1b:1a:43:d5:
                    5f:62:c9:eb:cf:19:81:88:79:4a:a8:78:9a:47:9a:
                    85:f5:a9:93:fa:88:24:c4:3b:06:aa:81:b0:d0:23:
                    e8:f3:0c:13:70:03:35:1a:63:52:57:7c:0d:f6:a6:
                    73:36:26:b3:c8:0d:04:30:ad:5a:0d:3e:dc:e5:bd:
                    48:9e:7a:11:42:67:a0:b3:e2:d2:78:9f:0a:4c:d9:
                    71:86:c2:49:da:4c:5e:ec:8f:d8:ad:60:33:1a:fa:
                    9e:2a:d3:70:c9:57:f8:27:1e:8e:9f:d0:7b:d3:12:
                    c4:a2:c6:3c:7a:4d:70:8c:31:89:72:cf:d2:52:a7:
                    38:a0:ad:54:6e:65:56:1c:c9:29:9e:2b:7e:61:11:
                    85:79:b9:bd:3f:ad:c1:d8:dd:37:4b:1a:05:6e:9c:
                    69:37:00:84:3e:2d:ba:dc:46:cb:16:e7:5c:4d:c7:
                    e2:13:0f:68:1a:be:3b:cc:6f:d8:bf:a0:9b:78:d8:
                    80:1c:b9:22:b7:a3:dc:65:46:3d:2f:17:32:d6:8e:
                    e6:18:bf:1d:dd:89:0b:b2:2d:e7:db:9d:7e:9e:f5:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B8:0B:C9:B9:DA:37:45:61:10:79:15:52:09:E0:E9:1D:92:BD:F6
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:de:1f:c0:0c:1d:65:9a:d3:73:17:09:5c:df:59:64:c2:aa:
         2f:0e:cf:9d:ce:97:1d:9e:00:38:5a:73:ef:2f:b9:e8:d8:2d:
         c2:87:26:5d:47:9e:4b:12:0b:7c:87:f3:da:bc:70:ec:9f:b8:
         a7:24:e8:6d:2a:89:88:23:ca:a1:92:f7:6a:33:05:80:e6:9d:
         46:94:60:bf:96:43:2c:43:81:5c:ee:ec:43:c9:17:91:5f:19:
         ef:c3:b8:b0:61:46:10:77:e6:e7:c8:c3:57:d7:99:2d:a6:26:
         e0:22:79:b4:52:a1:6b:98:b1:0f:a5:49:0c:36:73:89:a9:8f:
         c4:9e:25:4e:cf:29:14:43:e6:90:72:ec:32:cd:6b:e0:90:52:
         e6:e0:16:e7:51:24:8c:2a:6b:a0:f4:21:50:ac:8a:38:0f:f8:
         d5:b6:4d:c9:c0:47:9d:49:3e:6d:4c:a8:32:f0:04:ff:d9:8b:
         6c:47:ed:ad:77:59:f5:10:b1:24:1e:d4:cc:a6:98:96:c1:f2:
         bf:47:b1:39:9c:c8:1d:5d:6f:50:dc:cd:4c:6d:70:f1:df:fe:
         53:ea:20:40:8e:58:7c:19:a4:fb:00:3d:8f:b4:57:9b:cf:82:
         c0:9c:2f:96:86:71:07:42:35:a2:b2:0c:db:51:1b:4a:b8:69:
         e2:b7:1e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org