Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
File:                     3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa (raw, json)
Hash identifier:          VV5ehMDwSUkvouMf+fJlgQxlHwrflAWXNPb6QaSMTl0=
Subject key identifier:   B6:EE:87:7F:3F:13:B4:A5:09:E9:B1:62:60:B4:6D:27:97:F5:1A:74
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       59B5E6578C4E63755C183A2E857A382CC5966175
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa
Signing time:             Tue 16 Jan 2024 16:00:00 +0000
ROA not before:           Tue 16 Jan 2024 15:55:00 +0000
ROA not after:            Tue 14 Jan 2025 16:00:00 +0000
asID:                     141613
IP address blocks:        103.161.130.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:e6:57:8c:4e:63:75:5c:18:3a:2e:85:7a:38:2c:c5:96:61:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Jan 16 15:55:00 2024 GMT
            Not After : Jan 14 16:00:00 2025 GMT
        Subject: CN=B6EE877F3F13B4A509E9B16260B46D2797F51A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:5c:28:86:86:9d:4e:14:a6:16:3e:af:08:
                    81:c7:57:71:5b:7d:6a:f8:7a:38:a9:ab:dd:44:65:
                    c2:db:48:5f:bc:ad:0f:29:af:b6:fa:8a:07:e3:82:
                    79:fd:d2:6d:d2:1c:67:a3:4a:12:f6:ae:ae:1c:45:
                    0e:04:79:85:fc:84:0c:16:7d:f1:d8:94:1e:33:5d:
                    e0:3e:4d:50:69:de:59:74:8c:76:32:97:81:bb:43:
                    e9:6f:36:c1:dd:09:ae:c4:6a:36:1e:3d:b4:d5:1b:
                    1b:80:85:d3:c0:88:05:4f:27:63:6a:1e:98:e2:bd:
                    aa:68:e4:2b:57:33:ad:c3:f5:c3:93:d0:c9:a2:17:
                    0b:f8:82:1f:fb:b6:24:ad:e8:90:03:19:f7:7f:cf:
                    b8:72:e2:fe:79:78:f2:de:2c:4f:2b:78:d0:be:c4:
                    5f:9a:b5:4f:9e:a0:e9:01:d5:84:69:9a:c0:37:2b:
                    7e:56:eb:20:80:86:94:cb:25:d0:0c:bc:74:3a:c9:
                    e2:4a:2f:e7:30:b2:3c:7b:8f:40:d5:0d:73:50:e8:
                    0b:c9:64:66:4b:92:d7:8c:44:e9:df:61:ed:fe:05:
                    c7:c7:57:14:be:23:37:10:e9:dd:79:fd:57:38:69:
                    7e:71:2c:34:ee:7d:6d:b5:5a:53:0a:e7:da:04:50:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EE:87:7F:3F:13:B4:A5:09:E9:B1:62:60:B4:6D:27:97:F5:1A:74
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32332d3233203d3e20313431363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:eb:06:41:3d:83:3e:1f:b0:a9:ed:b7:6a:39:80:43:9f:
         0e:88:a1:44:13:df:98:be:96:fd:e5:6b:5a:ff:6c:67:45:89:
         cc:17:c9:06:e3:be:4c:be:54:5f:e5:e5:8c:dc:99:a3:4e:0a:
         e7:e3:fb:bd:37:31:4f:0b:9d:f0:ac:56:97:07:61:5e:f4:d0:
         f4:24:d4:dc:12:68:f8:7f:d0:05:6d:00:aa:58:af:3a:88:00:
         da:39:c3:b3:1a:d4:8a:de:20:38:db:96:20:4c:3f:2a:17:88:
         fc:41:aa:84:83:36:8b:54:79:e5:00:7e:fe:27:ab:29:10:a6:
         e3:53:a9:c7:a3:3b:41:51:33:ce:71:1f:71:0b:8a:10:3a:b5:
         ab:d8:c1:f0:c2:2e:4e:8e:b2:fb:7e:c2:d9:05:0e:11:f2:83:
         d0:b3:ad:6e:94:a7:47:28:d6:ea:f6:60:72:0f:84:cc:6c:68:
         bc:fe:16:f3:74:d2:d1:c6:b9:27:41:47:8d:13:33:40:33:2e:
         90:a2:a4:6f:76:e3:9f:26:52:06:b8:af:9f:88:ac:ff:9c:31:
         47:7a:01:d4:5c:f7:38:9c:46:dc:01:c8:d7:89:04:86:94:10:
         81:fb:ac:1a:8d:d5:f8:02:a7:3d:c6:65:46:66:fd:0e:01:bc:
         08:0a:6f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org