Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
File:                     3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          pScQhM/K8viK1WUou2U66svMU0pENRrqklYWG0461xE=
Subject key identifier:   03:55:C6:E9:A6:33:98:4B:F8:7C:C0:15:01:AF:36:1F:DA:AF:76:34
Certificate issuer:       /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial:       05761540B432F0D8CC47937904FD4360011C3E95
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
Signing time:             Tue 27 Feb 2024 03:00:02 +0000
ROA not before:           Tue 27 Feb 2024 02:55:02 +0000
ROA not after:            Tue 25 Feb 2025 03:00:02 +0000
asID:                     150552
IP address blocks:        103.86.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl
                          rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:76:15:40:b4:32:f0:d8:cc:47:93:79:04:fd:43:60:01:1c:3e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
        Validity
            Not Before: Feb 27 02:55:02 2024 GMT
            Not After : Feb 25 03:00:02 2025 GMT
        Subject: CN=0355C6E9A633984BF87CC01501AF361FDAAF7634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:5b:1c:b8:bc:7e:03:76:50:bf:b4:ff:89:
                    fd:9f:c0:50:2b:17:f4:09:3f:06:0e:aa:b1:26:d3:
                    ce:bf:a9:fb:a4:e0:df:31:40:55:d8:41:40:ce:19:
                    c6:ea:05:d6:4a:d2:f2:46:69:d6:5a:b4:d2:8c:5f:
                    b6:d8:0a:18:08:fc:9c:8e:1b:0c:c0:cc:48:0d:f4:
                    5c:f7:fc:e9:a8:6c:bb:dd:de:da:b1:f9:e6:91:6e:
                    48:3a:c2:17:df:96:52:ce:67:40:bc:63:3c:e4:c9:
                    6a:f8:8c:58:c2:6c:36:2e:af:4e:8f:0a:fd:bd:91:
                    ba:8f:bb:f6:c9:28:75:20:c4:32:86:25:ae:e9:35:
                    cd:96:c8:68:bb:fe:bd:be:4c:a0:a7:95:fd:e2:d0:
                    7a:3d:e9:5c:46:08:5b:da:15:9d:9a:6f:8e:ac:53:
                    c5:d0:8d:2b:f8:15:7e:93:53:1e:ba:10:11:7d:84:
                    85:6e:32:ea:7e:1e:b5:df:3f:b8:96:03:dd:71:b8:
                    29:c5:5f:14:1e:e4:89:5e:a3:e6:56:c4:48:df:f8:
                    84:dd:d5:8f:8e:ec:a5:3c:45:0f:16:4a:79:81:d2:
                    93:33:1c:d6:a0:59:83:70:5d:86:c4:4d:1b:7f:eb:
                    4a:2d:e0:e6:a6:95:fd:91:06:76:59:85:65:30:ae:
                    bc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:55:C6:E9:A6:33:98:4B:F8:7C:C0:15:01:AF:36:1F:DA:AF:76:34
            X509v3 Authority Key Identifier:
                keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:d7:03:a0:68:ef:0e:ec:6e:8c:c3:b2:ce:4d:6a:84:ec:
         57:08:9b:37:21:fe:1f:5e:59:95:78:91:e8:a9:91:77:04:8f:
         0a:c4:a0:c6:72:2c:b9:23:91:ac:31:bf:44:ed:0c:90:06:ba:
         36:f2:fd:63:d3:ff:58:c8:54:8f:56:2c:61:4d:3e:31:4d:1a:
         e7:32:be:01:f2:24:7b:16:cd:0c:4b:f6:e6:79:15:0e:be:b8:
         8d:8f:51:e5:45:3e:d3:b6:f3:76:23:3c:e8:4a:48:b8:b1:c6:
         e7:35:9d:65:91:75:3c:f3:38:34:f9:ab:29:bf:e1:74:5e:9e:
         e0:1e:16:46:ea:7f:16:22:0b:af:30:df:58:d1:ee:c9:0f:1f:
         82:31:25:90:16:13:3e:25:22:fd:a9:64:e2:57:89:a3:55:35:
         76:46:5c:e1:50:bd:9f:18:e6:d6:3d:15:30:51:10:79:fa:eb:
         16:15:56:65:08:3c:48:95:a5:67:56:0b:a0:92:04:47:1d:27:
         45:b2:b6:f2:fa:54:35:63:a0:9f:85:b9:3e:1a:24:3d:5f:ab:
         3c:7c:d7:b6:25:b9:f3:6b:e6:4f:df:c9:6c:8e:28:45:70:3d:
         2e:fa:17:7e:50:aa:d2:d8:a4:64:d3:8e:fa:9b:29:98:85:e7:
         0d:8c:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:23 2024 by rpki-client on console-ams.rpki-client.org