Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa
File:                     3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (raw, json)
Hash identifier:          q2Yb4yMAQtfwd6naBrfG63XhT4cy5Z0/X6q/WuK9T+Q=
Subject key identifier:   82:B1:04:DC:83:7C:25:A8:66:86:B0:A2:A9:6A:FD:3E:FF:68:58:31
Certificate issuer:       /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
Certificate serial:       1B3318B1321C5CE03EF0EB24BD4D273CB6CA5E79
Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa
Signing time:             Fri 31 May 2024 09:00:00 +0000
ROA not before:           Fri 31 May 2024 08:55:00 +0000
ROA not after:            Fri 30 May 2025 09:00:00 +0000
asID:                     141967
IP address blocks:        103.167.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl
                          rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:33:18:b1:32:1c:5c:e0:3e:f0:eb:24:bd:4d:27:3c:b6:ca:5e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786
        Validity
            Not Before: May 31 08:55:00 2024 GMT
            Not After : May 30 09:00:00 2025 GMT
        Subject: CN=82B104DC837C25A86686B0A2A96AFD3EFF685831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:21:0c:74:87:8b:c4:68:d6:a3:f6:b0:39:
                    b8:94:c1:70:85:0f:5f:bd:4e:1b:97:c7:90:0f:bc:
                    58:cb:d7:26:3d:02:be:f3:0a:15:6a:d8:36:f4:39:
                    b4:bf:bb:58:48:e9:ab:78:07:6f:7f:9e:3e:88:cb:
                    69:ee:5a:f0:40:e0:32:ab:5e:38:d4:6a:5d:a1:02:
                    34:14:dc:fd:51:53:3b:a5:f4:dc:0b:8d:b6:00:01:
                    07:ec:1e:a3:cc:4e:45:fe:cb:61:da:3e:4c:ff:46:
                    52:16:0b:a2:04:4f:04:51:52:a8:16:4c:64:a9:0a:
                    a3:b3:8d:93:3c:86:ed:d3:cf:f5:a4:1b:74:64:fb:
                    77:02:43:65:90:db:86:a5:8c:b0:a3:44:4c:a1:2c:
                    4a:c6:cd:14:b7:be:ce:e6:2c:16:9c:3f:5b:55:ff:
                    89:c5:b7:a9:0b:9a:76:d0:13:9e:60:65:ec:52:3e:
                    61:0b:15:43:a9:3b:d4:e6:68:9b:e6:af:ab:12:dd:
                    e6:c2:aa:6b:b3:c3:4c:73:48:37:3c:a7:12:a1:45:
                    31:b9:61:fb:97:c5:b3:27:88:3d:e4:8a:e8:40:f2:
                    31:26:67:66:46:55:49:fe:ef:a8:4d:f0:70:35:3f:
                    04:e3:06:87:b8:7a:5b:b1:1a:7d:e7:b0:6c:c4:e8:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B1:04:DC:83:7C:25:A8:66:86:B0:A2:A9:6A:FD:3E:FF:68:58:31
            X509v3 Authority Key Identifier:
                keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/3130332e3136372e322e302f32342d3234203d3e20313431393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:c3:f8:0d:df:66:42:3e:ed:a0:41:be:c0:39:95:57:92:
         08:b8:32:eb:a3:4d:a1:6a:e2:e5:02:c1:ab:a4:f9:b9:f7:18:
         a4:09:bc:f9:5c:f7:67:6f:fc:65:29:fa:47:33:eb:98:2b:b7:
         7f:cc:0e:e0:1a:79:fc:2a:74:95:b4:82:36:62:91:7d:5f:1e:
         99:a7:42:37:78:93:65:31:d7:d7:3a:cc:a2:d9:77:e4:62:67:
         40:fe:9f:7b:74:0e:c0:fe:5c:f1:1e:cc:d8:aa:78:8a:15:98:
         44:52:9d:01:02:42:b7:bc:ee:8b:e8:07:7c:78:2c:6b:bb:61:
         e2:31:a1:70:6e:06:5a:a5:f0:8a:1b:23:4f:03:b9:cf:c7:88:
         58:34:5b:4b:2a:56:b0:3f:65:28:98:0b:46:29:7e:fb:0b:b5:
         10:0b:8a:27:e8:bb:da:97:1c:e4:6e:e4:2a:c6:c4:b5:d7:fe:
         2c:a6:e2:9c:3d:ed:4e:0b:bc:a0:3e:99:a8:17:76:18:6c:79:
         b4:25:fc:6b:9c:19:9e:10:6b:99:0a:ad:7c:4f:fa:6c:a7:ff:
         02:39:92:65:f9:1e:3a:31:6e:8f:c6:37:45:25:0c:45:09:2c:
         69:1f:95:56:d3:39:9d:cc:a4:8d:2c:2e:f9:c3:3f:ea:de:cb:
         dd:0e:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 17:59:29 2024 by rpki-client on console-fra.rpki-client.org