Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa
File:                     3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          a5hnFbZG3S+h4bMubAiU6mlo0YLIR8VZ7k16vE1Pakk=
Subject key identifier:   ED:14:F4:F1:F3:E1:98:C5:E6:77:41:23:CA:12:EF:86:AD:2C:ED:49
Certificate issuer:       /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial:       4259D606862D8C8A0655D0BC738729C37B4B9722
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa
Signing time:             Tue 27 Feb 2024 03:00:02 +0000
ROA not before:           Tue 27 Feb 2024 02:55:02 +0000
ROA not after:            Tue 25 Feb 2025 03:00:02 +0000
asID:                     150552
IP address blocks:        103.86.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
                          rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:59:d6:06:86:2d:8c:8a:06:55:d0:bc:73:87:29:c3:7b:4b:97:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
        Validity
            Not Before: Feb 27 02:55:02 2024 GMT
            Not After : Feb 25 03:00:02 2025 GMT
        Subject: CN=ED14F4F1F3E198C5E6774123CA12EF86AD2CED49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:0c:d4:51:7a:31:bd:cf:42:a9:97:df:33:
                    60:c3:c8:72:91:00:88:36:19:90:7c:26:25:d0:79:
                    72:fe:91:0d:be:04:45:8f:0c:6d:6d:45:87:0b:b8:
                    eb:c6:42:4c:88:45:0f:ed:36:8d:6d:92:24:39:c0:
                    93:38:32:8b:e2:6a:b1:c6:53:06:dd:ff:d6:6c:6d:
                    6a:1d:36:f7:c7:00:ac:1e:9f:a4:83:06:7c:f7:8a:
                    53:f2:92:c2:97:48:70:0b:68:94:bc:b8:0e:1f:99:
                    27:db:76:1c:a7:a5:d3:2c:b8:c1:34:7f:cf:8d:3c:
                    4c:fa:41:88:06:27:62:f6:54:fc:be:7e:14:bf:00:
                    7c:db:f5:6d:d9:ec:73:69:70:78:b6:8f:21:e5:1a:
                    f3:62:01:29:df:2e:13:75:ed:07:66:8d:d6:8d:0a:
                    fd:ef:6a:66:32:66:67:5b:eb:70:88:20:fd:14:1a:
                    ae:bd:61:c4:b2:8c:23:c8:e4:90:eb:2c:cc:17:e2:
                    1c:fb:5a:b7:89:be:dd:17:72:5d:69:dc:0f:d4:6f:
                    d8:e0:ee:0d:5c:4b:19:b3:98:df:86:6e:d9:30:35:
                    30:d1:4e:11:3b:15:2b:e8:2a:7d:b0:37:bd:d1:70:
                    0d:13:78:b4:3c:0b:8e:16:11:1c:9c:3e:f9:c8:64:
                    04:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:14:F4:F1:F3:E1:98:C5:E6:77:41:23:CA:12:EF:86:AD:2C:ED:49
            X509v3 Authority Key Identifier:
                keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a6:25:25:b0:4b:9b:9d:39:61:0a:a2:af:69:fa:79:7e:5c:
         c1:b7:68:62:43:e9:63:98:07:77:b7:75:10:ec:fb:54:70:96:
         b9:9d:c7:be:ba:12:55:a0:d6:13:10:20:d2:6b:9e:9c:9e:c0:
         32:f6:c3:8d:37:20:1e:42:af:5a:cf:7a:9a:e2:f8:5a:94:e8:
         57:cb:a5:7c:e5:95:27:92:1e:ac:1a:15:f0:b8:e9:6d:ab:12:
         c7:5b:61:ad:44:e4:fa:87:1d:f0:c8:d6:df:a5:29:53:42:e2:
         e0:c3:d9:c9:38:ca:16:0f:96:80:a9:cd:00:9f:95:35:43:8b:
         f0:42:e8:32:82:74:90:c3:5c:b7:17:f6:26:0f:eb:de:75:a0:
         fd:59:2a:cb:52:89:52:2e:38:29:39:e7:46:b1:39:0b:ab:a5:
         90:12:df:f8:00:ee:d1:13:77:30:47:76:17:95:44:8f:0f:ae:
         18:4d:ff:4c:09:44:6a:80:6e:85:ea:c3:97:1b:8f:36:ab:35:
         f7:5c:58:fc:ce:0f:f0:a5:39:d3:0a:a5:f8:51:d3:cb:c8:dc:
         43:9b:b4:cf:59:60:b1:3f:0f:10:36:d5:67:26:c6:eb:68:2e:
         fb:b2:a5:94:9f:e9:90:ef:d1:13:12:5c:8e:94:a7:75:5b:04:
         3b:b9:7f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org