Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          5ONTU3XNmPd+Jia2SjSoFLaYUUSHPHyRmEYmOL+oYM8=
Subject key identifier:   DF:65:28:E8:90:20:BA:8E:AD:5E:19:BE:B0:DB:4F:62:C9:3A:BB:F2
Certificate issuer:       /CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
Certificate serial:       5B3F21A298763C63611941B619780812E0A8D43F
Authority key identifier: 6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa
Signing time:             Tue 26 Dec 2023 12:00:02 +0000
ROA not before:           Tue 26 Dec 2023 11:55:02 +0000
ROA not after:            Tue 24 Dec 2024 12:00:02 +0000
asID:                     131743
IP address blocks:        103.162.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl
                          rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3f:21:a2:98:76:3c:63:61:19:41:b6:19:78:08:12:e0:a8:d4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A
        Validity
            Not Before: Dec 26 11:55:02 2023 GMT
            Not After : Dec 24 12:00:02 2024 GMT
        Subject: CN=DF6528E89020BA8EAD5E19BEB0DB4F62C93ABBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:8e:75:6e:f1:1b:ef:30:95:2b:22:c4:87:
                    cc:a7:81:24:07:f7:d6:ff:db:50:59:3d:3e:8e:8c:
                    0c:41:3a:db:08:e9:2b:fd:96:6a:36:71:f6:ae:d4:
                    d1:87:72:ee:c0:c4:aa:f1:23:fa:65:7d:5b:3e:41:
                    77:18:fb:8b:cb:30:42:a9:23:dc:91:de:d2:50:51:
                    d7:f1:5f:50:d0:02:9b:5d:7b:bc:2e:1e:fb:7d:d4:
                    a6:f0:e0:89:3b:fa:2c:99:c5:2c:2b:9b:7e:91:62:
                    24:ff:18:43:bb:dd:37:b6:78:9b:56:1e:e2:a8:ab:
                    97:63:0a:d8:34:45:c1:91:ef:ef:4f:d5:81:b3:96:
                    6f:7a:68:2c:bc:db:82:ff:3a:a7:28:19:d3:d6:10:
                    31:66:92:23:d1:5d:ae:b6:1d:9a:bf:fc:12:1e:6b:
                    37:a6:4a:09:ef:31:03:b9:5c:0f:89:3b:26:2c:23:
                    81:80:18:02:a8:ff:5d:62:13:f8:8c:1a:6b:79:ea:
                    ac:bb:cc:fa:80:59:90:c9:9e:24:7c:6a:c2:5f:31:
                    a0:ab:b3:50:dd:3a:cc:43:d7:7f:5e:c6:d7:be:e9:
                    03:7d:17:54:85:74:1c:39:78:4a:9a:10:9d:d3:07:
                    b2:34:0e:29:c8:fa:24:f5:53:c6:18:81:48:2a:35:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:28:E8:90:20:BA:8E:AD:5E:19:BE:B0:DB:4F:62:C9:3A:BB:F2
            X509v3 Authority Key Identifier:
                keyid:6C:DF:5C:D1:FD:DF:F2:C0:24:C1:3A:29:26:4D:70:FA:51:F9:58:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6CDF5CD1FDDFF2C024C13A29264D70FA51F9587A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d266511-639e-4c2b-9634-9cc1e22fa708/0/3130332e3136322e3231392e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:f0:55:92:c4:b5:76:33:b4:4a:1a:9c:af:1d:2e:01:bd:
         72:1c:ff:15:54:1b:1f:68:d0:48:af:34:cc:c7:05:77:53:d6:
         16:c1:bf:30:58:2b:e4:45:a2:8c:5e:2e:ba:e8:d6:7b:b2:f8:
         d0:0d:08:4c:c4:cd:8c:aa:ee:01:dd:7e:4f:cb:73:c6:97:5c:
         3b:2f:f6:db:82:64:76:8d:ad:04:d3:3f:76:cf:34:3b:cf:37:
         62:21:a8:5c:4d:33:78:e5:fb:5b:b8:29:c8:ef:fa:62:cd:cd:
         dc:a2:b9:57:60:78:c9:ec:3c:0b:30:ba:f3:33:26:0f:90:14:
         41:da:1e:24:31:a3:ad:f2:ae:dd:85:a1:fd:d6:46:0b:63:fe:
         44:a5:44:8b:fa:30:31:8b:d1:19:6d:86:1d:c8:c1:20:c9:f3:
         6d:5b:99:9b:a1:56:dc:8b:b5:16:0f:69:ab:35:a8:d5:24:6d:
         24:19:fd:1e:b1:0f:e1:6a:9f:6c:bf:57:e4:d1:59:55:8e:17:
         01:5b:3e:77:58:29:1b:c7:11:3e:e5:e8:66:7d:1b:83:b4:a9:
         01:52:b6:0d:d6:31:97:a7:56:4e:ed:ec:82:77:57:e9:d0:e7:
         32:3c:f3:e8:b7:46:f4:f4:ad:b3:35:4a:48:c5:99:ad:19:5a:
         d0:a8:1a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:28 2024 by rpki-client on console-fra.rpki-client.org