Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa
File:                     3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          ZA9UCrOb9VRHYRqwtTEG+XFF3eEU+1WpZsRN/6Vwoa0=
Subject key identifier:   30:F7:68:24:61:CA:F2:01:47:0E:6F:D8:24:E0:90:99:B4:E4:4E:AD
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       5F55BCA9688075458DBC479F030ECAD98B68A900
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa
Signing time:             Thu 14 Nov 2024 07:01:57 +0000
ROA not before:           Thu 14 Nov 2024 06:56:57 +0000
ROA not after:            Thu 13 Nov 2025 07:01:57 +0000
asID:                     141630
IP address blocks:        203.161.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:55:bc:a9:68:80:75:45:8d:bc:47:9f:03:0e:ca:d9:8b:68:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Nov 14 06:56:57 2024 GMT
            Not After : Nov 13 07:01:57 2025 GMT
        Subject: CN=30F7682461CAF201470E6FD824E09099B4E44EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:5f:79:1c:ff:ec:75:f7:2d:e3:a1:0e:56:
                    fc:68:84:bf:8a:24:6f:e6:64:8e:db:eb:b7:f9:42:
                    5b:4d:e5:0d:c3:89:4f:18:77:cf:07:0d:d8:ef:86:
                    67:51:3d:8a:de:f7:68:dd:ab:00:01:62:ee:44:66:
                    c1:d0:09:32:79:ea:0c:02:73:14:33:8f:1f:f0:8c:
                    b6:8a:ac:ba:87:b9:5a:c9:ad:f6:15:da:d7:17:71:
                    63:0b:b3:b4:43:af:d9:32:e1:f2:da:8c:1f:9d:cf:
                    33:35:a7:40:31:90:7c:46:b5:47:e0:6e:b1:32:54:
                    f1:dc:88:73:df:8d:19:8f:1a:c5:b4:d6:33:0e:c9:
                    ea:9b:10:5d:f0:db:c0:9b:6e:2a:1e:e7:13:91:1d:
                    23:64:75:a2:9a:74:41:1e:2c:aa:da:a8:aa:51:42:
                    7b:43:d1:96:e6:80:0a:08:3e:3d:5e:8c:c6:08:45:
                    40:b2:52:a4:14:11:38:b7:fc:85:9d:ef:ca:39:f3:
                    19:60:d5:56:d1:34:20:17:1b:4a:96:45:21:06:2b:
                    bc:bf:0d:56:c5:7a:03:34:6b:3e:25:09:e3:b6:69:
                    2c:07:89:67:61:6d:e3:12:f0:6e:4e:85:f5:4d:f0:
                    55:e8:30:3a:97:6a:bc:38:79:c3:29:3a:0a:db:27:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F7:68:24:61:CA:F2:01:47:0E:6F:D8:24:E0:90:99:B4:E4:4E:AD
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:43:97:6c:73:21:c9:fb:d7:ce:1f:88:ea:c3:86:16:a7:64:
         9b:89:93:4a:d7:8c:d8:33:be:2b:f7:82:bc:96:a7:82:41:f7:
         b3:1c:34:5d:d8:39:70:a2:81:8c:85:fb:a0:a8:37:79:18:a1:
         26:8a:36:99:5d:ae:3c:88:fa:a7:5b:01:0c:53:5c:55:88:33:
         f0:5a:85:b1:09:49:cb:01:61:25:d7:96:fe:22:d3:df:bc:13:
         cf:32:ab:24:10:79:43:08:2f:08:1d:a8:5f:21:2d:4a:ef:91:
         3f:70:5c:10:c7:79:50:dd:88:70:9c:c3:e5:93:1f:f8:46:77:
         e3:c6:81:e5:81:91:40:ed:a7:3d:16:60:1c:b8:1d:08:5a:b8:
         18:78:c1:26:e3:3c:6a:8d:9c:bc:97:c7:90:89:ff:93:35:18:
         a2:c2:3b:c3:d6:58:37:51:a1:27:6f:8d:2a:f9:c3:7d:90:ff:
         ff:9b:a3:e5:aa:7b:1b:9a:87:c6:17:c6:96:b5:2d:4f:65:1d:
         fb:5f:36:a8:15:90:a5:23:8e:23:65:d5:42:85:f8:f2:41:d5:
         c3:57:2a:41:d1:a2:ac:3b:49:9c:27:44:ab:1e:50:0b:0a:37:
         f1:59:a5:11:d6:1f:74:3f:41:3d:18:e7:4d:7a:6f:f7:bd:80:
         56:eb:9d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org