Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          Owoc57S0Y+5CHUbh+9gayaf05ecIdO86CaiUN4mubRo=
Subject key identifier:   E1:F2:21:CA:CA:26:62:D6:CE:3C:26:7E:C0:11:4B:5A:CD:93:9E:6E
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       260934AF0E439BBFCC8EF90211761E64716DB325
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:48:02 +0000
ROA not before:           Mon 15 Jul 2024 02:43:02 +0000
ROA not after:            Mon 14 Jul 2025 02:48:02 +0000
asID:                     48465
IP address blocks:        103.161.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:09:34:af:0e:43:9b:bf:cc:8e:f9:02:11:76:1e:64:71:6d:b3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jul 15 02:43:02 2024 GMT
            Not After : Jul 14 02:48:02 2025 GMT
        Subject: CN=E1F221CACA2662D6CE3C267EC0114B5ACD939E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:55:e1:77:0c:85:20:e1:23:d3:a0:2a:10:
                    39:a6:73:ec:51:46:68:7a:b3:ed:d5:f6:30:36:a4:
                    85:0a:d5:14:9a:65:0b:5e:f3:cc:56:e2:28:65:49:
                    00:4b:34:06:7f:b6:2f:e4:f2:75:08:4f:4f:d8:ff:
                    1f:94:3f:ff:2e:1c:c4:ff:3c:f7:d0:b2:64:d2:fd:
                    f3:d1:fa:a3:be:d7:f5:c5:49:4c:49:83:39:cc:b0:
                    60:d4:a7:28:4f:4d:5e:4c:93:82:62:d3:50:5a:d2:
                    7f:67:e5:6e:03:ec:11:cd:8e:42:af:01:3f:d7:b2:
                    23:1c:5c:80:45:cd:f1:7d:45:ce:48:18:8b:6c:fd:
                    e6:3f:46:6b:4e:fb:18:2d:36:d3:c7:c4:b0:dd:22:
                    a2:e1:fa:81:4c:be:16:70:05:32:84:fa:24:a8:e6:
                    ae:79:4f:84:da:34:15:c3:fb:30:21:b6:2e:04:4c:
                    e7:d7:4a:50:52:25:2d:91:a8:c5:28:4e:1c:da:b3:
                    6d:b2:4c:91:e9:35:b2:4f:85:7d:26:24:ed:1e:6f:
                    38:4a:57:90:69:bd:3a:16:00:71:27:44:78:9f:3a:
                    03:e4:98:dc:f9:b5:fd:b9:33:bc:f0:22:32:f7:54:
                    d3:8b:8e:38:f8:70:f3:3b:50:32:50:7c:fe:d9:96:
                    ec:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:21:CA:CA:26:62:D6:CE:3C:26:7E:C0:11:4B:5A:CD:93:9E:6E
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:73:c8:74:fb:6d:1d:83:c2:16:03:76:81:30:22:70:ad:92:
         6a:cd:dc:38:97:94:13:b8:f7:61:8b:8e:25:dc:5f:4e:e2:3c:
         fb:b2:35:76:5c:ab:76:80:ab:6e:a9:b1:0f:0a:6f:a4:69:73:
         40:75:0b:3d:a0:3e:88:6b:bc:a8:af:77:80:e1:84:27:35:2a:
         75:ea:a1:af:e6:57:b7:81:05:77:6e:67:1d:de:6b:b6:62:bb:
         89:12:d0:61:e4:a6:40:3a:ab:3b:a9:52:96:7a:91:cf:95:5d:
         d8:6c:f0:10:4c:17:f2:da:03:10:f5:d2:14:2f:47:54:de:06:
         58:fb:ad:14:54:29:bd:3e:10:97:00:2c:4e:22:01:bd:0d:70:
         48:8f:03:eb:20:34:3e:2a:3e:42:80:72:b0:77:d5:dd:5e:91:
         f3:78:08:69:75:d4:b4:e1:db:9e:3f:36:e3:31:49:7f:24:b5:
         cd:ce:80:5c:14:8f:ab:e8:cd:0c:bd:fd:0a:a2:dd:00:01:32:
         3b:17:d2:e1:e5:91:ab:3a:a3:f6:ff:6d:2f:f9:94:3f:a1:d2:
         fd:b2:c3:7a:a0:d2:03:11:36:bb:2d:da:a8:e2:bd:5c:4a:f8:
         f7:76:d6:55:e8:a5:9b:e4:c6:c6:02:cf:1a:3f:8a:78:db:93:
         04:59:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org