Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          8uNanM9zz65ga2RoA4D0oi2HgE75rc8JJUEWGV4Ynnk=
Subject key identifier:   15:E5:A7:4E:FF:29:78:6C:B5:8E:A2:1D:B5:8D:BA:57:B3:24:FC:FA
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       0460B02B5FF226EEF764B47FB68611C4529A3121
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:47:53 +0000
ROA not before:           Mon 15 Jul 2024 02:42:53 +0000
ROA not after:            Mon 14 Jul 2025 02:47:53 +0000
asID:                     48465
IP address blocks:        103.161.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:60:b0:2b:5f:f2:26:ee:f7:64:b4:7f:b6:86:11:c4:52:9a:31:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jul 15 02:42:53 2024 GMT
            Not After : Jul 14 02:47:53 2025 GMT
        Subject: CN=15E5A74EFF29786CB58EA21DB58DBA57B324FCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:09:ff:dd:01:74:36:54:dc:5f:76:e8:32:4a:
                    03:26:54:c3:14:54:17:48:9e:40:04:6f:95:24:4a:
                    74:df:86:1b:a7:b8:81:b0:a1:b9:1d:d9:b7:5e:d4:
                    f5:47:8e:81:91:4d:a0:00:ce:d4:34:58:fb:f6:c2:
                    09:34:37:c7:21:c3:e8:bb:7f:93:a6:9e:8f:29:ac:
                    b5:e2:33:01:48:94:fc:71:bb:66:d2:cf:e1:39:9c:
                    ce:c3:32:bf:0a:23:d5:2d:85:23:62:ec:6c:6c:a9:
                    f9:e4:3c:62:39:c1:81:30:2a:81:67:fe:74:c4:1e:
                    0f:09:1c:08:f2:ba:39:55:3d:7a:93:aa:5d:04:f1:
                    05:c5:40:86:12:83:77:62:61:9b:36:85:21:33:28:
                    89:ab:35:02:8a:e5:48:a8:7e:58:0c:17:e8:64:18:
                    70:7e:e9:25:01:f2:17:4b:c6:a8:57:ab:1a:05:b7:
                    4c:d4:a4:c9:1c:64:c2:6b:b9:64:01:06:28:0b:33:
                    5a:1f:8f:45:d2:c3:c8:d0:a2:d4:66:cc:57:d9:72:
                    70:b6:34:cd:c9:29:95:29:66:ae:33:3c:10:51:1a:
                    27:0d:47:f7:f9:6b:9e:e9:dc:b0:9d:91:74:a0:3e:
                    3b:d4:25:53:06:c8:b4:9b:fe:3a:1b:05:63:8a:7d:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E5:A7:4E:FF:29:78:6C:B5:8E:A2:1D:B5:8D:BA:57:B3:24:FC:FA
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:a8:2a:86:6b:af:74:9e:f4:8d:73:07:0a:5a:41:1c:3b:ab:
         85:cf:d8:9c:6c:03:1b:5e:e7:9f:98:5c:af:2f:4d:ff:01:3c:
         ab:b1:d8:40:5d:44:2d:c7:38:39:2c:10:94:f0:ad:33:f8:dd:
         75:20:83:5a:ad:02:e9:08:b8:ff:24:dc:74:b3:7a:65:ad:08:
         9b:bd:c8:bd:bd:36:92:e6:ae:e1:35:34:98:42:a8:aa:d5:cc:
         84:88:47:87:0a:85:9e:19:bc:59:2b:d5:ed:3b:19:93:ec:4c:
         be:be:33:da:9f:c8:d0:9a:36:ad:7f:ae:e4:9f:8a:3f:df:67:
         ca:66:c6:cd:1d:e2:66:d3:09:f7:8c:3d:35:34:d6:c2:fa:37:
         07:a8:35:b1:f3:01:2b:9c:89:7d:1e:1f:7f:7f:29:c2:19:40:
         57:a5:cc:38:1f:c0:d4:1b:90:49:71:d3:4b:b8:5e:c3:78:35:
         2f:fa:b9:34:f0:af:1c:ec:e4:9d:6a:20:f4:28:bb:28:4b:1c:
         7d:29:e6:36:40:40:7d:ac:ec:65:fa:38:ae:78:ea:08:34:83:
         58:bf:ea:41:cf:8e:f1:aa:44:b6:f5:06:ec:07:a1:1c:79:83:
         e2:f3:a0:38:86:67:be:e2:66:38:fc:04:0b:dc:04:3d:72:c1:
         95:36:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org