Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
File:                     3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (raw, json)
Hash identifier:          FGwbd9tIyRJHyRLZhA3WCejnwIFVTTW/Zh4pthqgOTY=
Subject key identifier:   06:5E:65:AE:61:9F:57:D1:5E:A6:74:10:70:BE:77:35:44:CC:49:3E
Certificate issuer:       /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial:       7D61D79DCA444DB210922E1EBB52CE92F7B0263A
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
Signing time:             Wed 11 Dec 2024 04:00:01 +0000
ROA not before:           Wed 11 Dec 2024 03:55:01 +0000
ROA not after:            Wed 10 Dec 2025 04:00:01 +0000
asID:                     141657
IP address blocks:        103.161.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
                          rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:61:d7:9d:ca:44:4d:b2:10:92:2e:1e:bb:52:ce:92:f7:b0:26:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
        Validity
            Not Before: Dec 11 03:55:01 2024 GMT
            Not After : Dec 10 04:00:01 2025 GMT
        Subject: CN=065E65AE619F57D15EA6741070BE773544CC493E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:ac:41:9c:60:1f:72:c4:bc:d5:ed:6b:3f:
                    54:9f:c0:e4:79:5a:a0:63:ba:b4:34:a2:bc:81:01:
                    f9:41:3e:a4:fc:04:d4:10:e7:c7:da:d2:c2:80:c1:
                    5b:ad:ce:40:dc:cb:10:a6:9e:46:69:22:1f:73:b1:
                    61:db:74:71:48:34:32:8d:cd:1b:46:d3:03:dc:c2:
                    7e:55:a3:cb:dc:52:23:d5:22:f7:cd:c3:dc:f1:a6:
                    eb:6a:03:6c:9d:ec:a9:d5:1d:bc:7f:19:a7:fe:44:
                    6e:68:69:78:d9:8c:4d:30:52:6d:9e:89:35:38:08:
                    c9:95:cc:77:94:81:50:4a:d7:0a:32:0f:5b:6f:be:
                    94:69:f9:20:cd:28:7b:da:1a:ac:0a:43:9d:04:d0:
                    ee:c1:2e:d7:40:80:cd:01:89:6c:cc:01:4c:c8:7e:
                    91:d3:4c:0a:5d:64:93:82:05:9a:99:fb:f3:2d:51:
                    b8:a3:4c:13:14:5d:57:15:0c:1f:0b:95:1d:e6:18:
                    4e:f8:b1:73:79:53:a2:96:8e:88:0b:06:a8:2b:dc:
                    7a:0a:f9:83:9c:6d:a8:55:4a:98:a3:04:50:c8:4f:
                    ac:4b:f5:13:c0:9f:8c:61:f9:a2:1e:42:f0:88:9b:
                    5b:2a:ef:18:a4:e7:f0:c3:5b:a4:6b:5e:5c:43:9c:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:65:AE:61:9F:57:D1:5E:A6:74:10:70:BE:77:35:44:CC:49:3E
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:2f:46:5b:7b:50:fb:56:5a:d3:cb:f1:f6:57:54:e6:ee:
         28:53:6d:4c:d6:51:1e:f7:4d:5f:ce:e9:90:f9:68:4c:5d:f5:
         d0:f9:f2:e4:42:96:70:08:fc:67:5a:bb:87:8f:6d:15:fb:1b:
         4e:fa:97:5f:75:49:4d:d4:5f:02:e1:17:bb:20:d3:af:ca:87:
         85:1e:30:ef:fb:6a:84:44:02:01:8d:fd:77:f2:be:e8:83:62:
         27:47:fa:ee:84:ed:da:d5:47:15:33:54:32:e8:14:6b:63:7c:
         ef:73:de:99:3e:fb:d3:1a:72:79:56:7c:cf:5c:05:b3:25:57:
         02:eb:ce:ea:07:5c:a9:27:60:25:d8:66:5e:72:c3:53:85:5c:
         26:7b:d2:a3:04:90:8d:d4:f1:a5:b4:fa:20:50:c3:7e:5e:83:
         2b:b1:e9:81:97:bd:88:0c:02:2c:a3:d4:2b:82:38:0e:67:fb:
         f0:fe:e3:44:e3:05:07:6b:35:eb:27:0a:c3:5b:8b:71:aa:34:
         2f:b9:5f:39:19:ca:c5:89:b9:ca:55:60:0e:b2:4c:9c:4a:f2:
         8c:7e:a1:f9:c0:5a:2d:88:9f:0e:aa:77:53:c1:6a:b2:29:b6:
         ab:cb:f3:7b:99:88:8c:7c:20:30:75:8b:d4:f3:ce:81:eb:d5:
         1c:78:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:32:03 2025 by rpki-client