Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa
File:                     3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa (raw, json)
Hash identifier:          CU0E6ODLOVr7R0e/WE9Jmu1sx/4RgJSVG+qslNVFaLw=
Subject key identifier:   11:F5:8E:58:B1:90:57:8E:46:F7:85:03:52:F9:B3:27:B3:6B:67:DA
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       19B06B51E1278663B77A2C6F57ED7445207805C5
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa
Signing time:             Thu 25 Jan 2024 09:00:02 +0000
ROA not before:           Thu 25 Jan 2024 08:55:02 +0000
ROA not after:            Thu 23 Jan 2025 09:00:02 +0000
asID:                     133840
IP address blocks:        203.161.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b0:6b:51:e1:27:86:63:b7:7a:2c:6f:57:ed:74:45:20:78:05:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jan 25 08:55:02 2024 GMT
            Not After : Jan 23 09:00:02 2025 GMT
        Subject: CN=11F58E58B190578E46F7850352F9B327B36B67DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b4:9e:00:d6:e1:39:5f:36:56:61:6a:d0:54:
                    63:55:28:a4:ca:60:b2:48:32:6f:9e:1d:75:cf:39:
                    1a:d4:96:38:80:a0:d8:19:4f:4a:df:45:92:62:fa:
                    5f:26:a2:30:50:b3:74:6a:14:c3:9e:8f:73:99:43:
                    9d:bd:fa:fe:cc:22:8f:a6:e5:11:99:ff:e1:57:45:
                    26:b5:32:1d:d5:55:76:4e:8f:e8:b5:7d:cb:5c:01:
                    c9:40:16:c6:da:0a:e1:89:ae:2b:6f:b7:53:92:59:
                    0c:cc:ac:e4:4d:59:16:68:1e:6e:81:f9:5a:42:69:
                    68:c9:e9:51:b7:bf:9b:a4:9d:c2:4b:71:60:4a:b4:
                    6e:11:eb:62:f2:cc:ba:b6:06:b0:98:c1:c3:da:47:
                    1a:11:46:1f:32:02:29:db:ae:fd:59:34:a6:87:f3:
                    78:4b:25:94:64:79:d9:3f:d5:cc:65:98:31:4d:04:
                    0c:ec:37:5a:74:97:fe:9f:3a:4e:94:63:3a:73:43:
                    c5:3b:bb:61:bf:c1:7d:f0:57:7b:17:88:80:f5:9b:
                    32:b5:ab:8e:7f:1b:f8:af:72:8f:ab:c1:87:72:ba:
                    eb:68:93:7a:8d:86:44:37:f9:4e:53:40:82:eb:75:
                    4d:9a:27:75:2c:f9:d0:70:cf:84:6b:6d:84:42:61:
                    fa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F5:8E:58:B1:90:57:8E:46:F7:85:03:52:F9:B3:27:B3:6B:67:DA
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31382e302f32342d3234203d3e20313333383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:74:8f:af:84:ea:1a:a9:b6:4b:aa:60:a1:0f:91:83:80:e4:
         0c:69:71:30:e0:26:10:df:45:f2:5f:f0:80:31:b5:07:d4:f3:
         1c:58:93:18:fe:84:c7:8a:ca:67:a2:bd:65:f6:7b:a7:ab:bb:
         02:c2:dd:96:82:ca:38:f1:dd:04:fa:b7:0d:18:bc:d5:f9:b0:
         cf:87:05:82:77:05:cf:7c:6b:22:ac:d5:38:fa:2e:2e:43:fa:
         9b:36:44:ed:9b:ac:72:f8:e6:2d:e1:e2:5f:61:f5:73:ac:0d:
         bd:a1:06:d8:0d:0c:1d:31:2c:18:c6:08:d1:c9:19:a4:af:1d:
         14:59:67:0c:b1:ad:94:22:40:b7:8d:ed:69:56:74:7c:bd:5d:
         ae:0a:76:83:ce:8f:8a:90:98:70:02:d1:35:a8:ee:a1:f3:e5:
         7c:7f:e5:c9:a8:04:1d:ec:90:18:e1:dd:c7:76:c8:c7:94:5a:
         35:45:b1:d7:34:88:68:68:f8:63:dc:3d:ac:f3:be:be:69:92:
         9b:c4:aa:32:9a:7b:42:0c:cf:97:32:36:a9:46:73:69:d5:1d:
         0b:3a:b4:fd:4e:09:8b:3d:e9:e0:2c:8d:e5:47:74:16:3e:c3:
         dc:de:56:93:bc:89:51:88:07:2c:18:d7:23:d7:56:35:28:4c:
         0b:22:c5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:02 2024 by rpki-client on console-ams.rpki-client.org