Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa
File:                     3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa (raw, json)
Hash identifier:          oVA/zTVzwpQAdk1sz6vUM7ibas7Xi73r55VKgLZiUC0=
Subject key identifier:   34:FD:BB:55:34:21:65:D8:EE:C2:60:15:D7:8F:3B:49:C8:ED:2C:FE
Certificate issuer:       /CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
Certificate serial:       552E4C1C257903843414EA5195AD846ABAE52B9F
Authority key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa
Signing time:             Tue 26 Dec 2023 11:00:00 +0000
ROA not before:           Tue 26 Dec 2023 10:55:00 +0000
ROA not after:            Tue 24 Dec 2024 11:00:00 +0000
asID:                     141613
IP address blocks:        103.161.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl
                          rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2e:4c:1c:25:79:03:84:34:14:ea:51:95:ad:84:6a:ba:e5:2b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC
        Validity
            Not Before: Dec 26 10:55:00 2023 GMT
            Not After : Dec 24 11:00:00 2024 GMT
        Subject: CN=34FDBB55342165D8EEC26015D78F3B49C8ED2CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:15:3f:c7:c8:40:dc:46:59:3b:34:35:72:
                    08:5d:db:d2:6f:f2:37:56:ec:2b:d2:74:bf:f1:09:
                    7a:7f:a4:bf:2c:8a:e1:33:71:2b:24:a9:4a:f2:18:
                    e0:99:bb:92:c2:f7:59:bc:2e:ea:3e:bd:6f:ac:98:
                    55:a3:e0:5f:ab:c5:57:e9:a0:a4:74:10:13:db:16:
                    ef:ed:1b:ef:40:2a:99:b0:8b:b3:24:a7:e3:d9:56:
                    06:c2:e2:bd:35:74:5b:86:64:e6:f5:24:01:f4:6a:
                    46:99:55:73:3d:37:73:82:94:44:31:e4:a1:9c:be:
                    12:95:b7:a7:7f:c5:d8:49:61:9a:81:70:e2:07:f0:
                    5f:49:1e:b9:4f:fb:97:9c:9b:14:60:cb:92:ad:db:
                    2b:5b:c8:a7:22:84:29:19:6c:9f:10:81:92:5a:4f:
                    d9:9e:1a:0f:47:88:30:ba:21:ff:83:c0:07:00:e3:
                    ee:4e:c4:0d:5b:27:0d:09:a8:fd:35:b5:ab:ea:7d:
                    15:15:27:4b:77:72:06:9b:ba:ef:3e:8a:5d:26:86:
                    94:7e:44:86:f2:dd:f6:9c:c1:af:91:71:88:ee:3f:
                    37:ef:71:69:ff:fb:17:c2:5a:aa:2e:1e:48:dd:a4:
                    ba:98:23:53:56:4e:82:e7:b0:44:e2:72:8e:9a:a6:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FD:BB:55:34:21:65:D8:EE:C2:60:15:D7:8F:3B:49:C8:ED:2C:FE
            X509v3 Authority Key Identifier:
                keyid:F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/3130332e3136312e3133302e302f32342d3234203d3e20313431363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:76:7f:bf:a8:cb:3e:5d:70:8e:c5:e4:a2:28:46:db:d1:
         5d:0e:78:f6:36:86:26:ec:10:d1:5c:98:62:0c:ef:10:ff:54:
         15:93:8c:da:92:68:b2:2b:79:05:20:b4:29:f5:e7:91:15:b2:
         7e:a0:e1:46:2d:52:25:ec:ce:1b:8b:ed:ce:6d:c3:46:bf:1e:
         64:c2:61:b1:93:0b:21:c3:6a:36:3c:1a:08:a7:50:91:0b:32:
         ac:f4:a3:b3:b9:c1:98:c4:1c:93:f8:0f:f0:f2:74:98:fc:70:
         91:83:73:2f:e1:63:f7:03:a9:35:4f:67:4b:cb:85:07:0c:04:
         1e:87:18:49:0b:f6:16:3a:79:ed:43:2b:c0:df:06:26:14:3e:
         c3:9b:9d:6b:2a:1e:79:0b:c8:8a:8c:5c:56:54:b6:70:66:12:
         53:bc:2e:43:2f:b7:6a:1e:21:fc:d9:c6:32:22:ba:d0:9b:ee:
         df:8a:94:89:80:70:ae:a5:e8:33:a1:71:ab:a4:3c:35:0e:de:
         e4:8f:23:79:55:33:2f:92:06:22:91:00:0e:79:b0:a2:42:24:
         2a:84:af:09:02:a3:5e:af:ed:b1:38:2f:e5:da:36:a8:1b:c9:
         66:0f:c1:05:68:82:83:14:fe:94:e5:6b:07:f4:18:1d:0a:be:
         d4:22:f1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org