Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
File:                     3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (raw, json)
Hash identifier:          ZcuLefK+yAknTSgNc0AblKwaXXvM+7Ik+wo2Htxgbns=
Subject key identifier:   5C:5C:87:C6:AB:55:6E:5A:64:5B:8F:83:CB:85:2B:46:15:A6:B9:22
Certificate issuer:       /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974
Certificate serial:       6AFCA68F2DCBD63A9DC1FF9EB9C3DA94D7FB875F
Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa
Signing time:             Wed 16 Oct 2024 08:00:00 +0000
ROA not before:           Wed 16 Oct 2024 07:55:00 +0000
ROA not after:            Wed 15 Oct 2025 08:00:00 +0000
asID:                     141889
IP address blocks:        103.163.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl
                          rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fc:a6:8f:2d:cb:d6:3a:9d:c1:ff:9e:b9:c3:da:94:d7:fb:87:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974
        Validity
            Not Before: Oct 16 07:55:00 2024 GMT
            Not After : Oct 15 08:00:00 2025 GMT
        Subject: CN=5C5C87C6AB556E5A645B8F83CB852B4615A6B922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:20:bd:67:30:fb:eb:38:1b:a9:90:fa:8a:2c:
                    de:47:33:4b:a1:63:23:b5:9e:94:aa:dc:c0:94:0a:
                    a6:ba:e1:97:2d:06:61:8e:60:bb:19:2e:8d:cd:de:
                    70:d6:01:95:8d:7f:8d:8b:3e:66:51:b6:06:ad:c8:
                    67:c4:94:f1:9f:4c:0f:5e:30:32:d1:69:d2:6d:52:
                    e1:7e:11:29:51:66:dd:0a:f8:3a:e9:5a:d6:00:f4:
                    f3:2a:14:25:e7:f9:10:a8:83:57:f1:43:f2:d6:66:
                    2d:95:2d:7c:de:cf:78:fb:0c:5f:8b:6b:a5:41:c7:
                    09:d3:00:dd:e7:dd:9c:8d:60:11:64:19:22:63:46:
                    06:d4:1e:a5:13:f5:0a:2f:95:cb:f4:79:cc:70:2a:
                    85:88:77:da:37:6e:73:94:77:61:6a:1a:7f:d2:7d:
                    e0:e5:8c:43:49:2f:3f:9a:a9:fb:00:78:bb:e4:f4:
                    72:f9:3c:4d:2b:27:2d:3c:93:de:09:41:cb:27:83:
                    b7:75:86:13:26:af:9d:43:56:9b:13:37:7f:d5:06:
                    b6:ac:cb:5a:9d:38:db:c2:bb:2a:a2:d4:f7:8f:f1:
                    ad:20:9f:5e:9a:2d:13:3b:73:bc:33:78:bc:d4:34:
                    d2:1c:b6:3e:9d:01:28:d0:e3:2f:10:b0:15:31:d2:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5C:87:C6:AB:55:6E:5A:64:5B:8F:83:CB:85:2B:46:15:A6:B9:22
            X509v3 Authority Key Identifier:
                keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:57:cf:ff:c7:86:fb:2b:f0:d4:d8:f8:66:cf:b9:7e:99:27:
         b9:ae:ed:ed:c1:6d:4c:2b:46:ea:08:11:42:ad:e2:22:11:8c:
         0a:6e:7c:32:5e:ef:b4:de:72:11:51:45:1b:e5:60:a2:b2:c7:
         b7:a8:94:3b:31:a3:39:21:c2:4f:f4:34:f2:d0:c2:7f:f1:54:
         0d:1a:f6:77:ca:a2:0d:32:24:e6:4d:01:f6:ae:94:59:0a:2a:
         a3:1a:1a:5f:b0:88:7b:5d:97:5c:84:fb:54:f3:9a:81:4d:90:
         fb:18:b3:d9:93:2f:38:de:19:5b:a9:25:26:e2:07:d1:17:b8:
         7e:b0:71:65:c3:9d:75:af:be:3c:14:c0:2b:d1:c8:c3:0e:c4:
         bf:86:22:03:6b:69:0f:9c:b0:21:ce:e5:f6:af:19:84:18:ca:
         e1:92:74:c5:f2:2a:af:d6:5f:42:e4:d7:8d:43:14:e5:0c:60:
         8f:ea:b2:e3:36:3f:8a:38:dd:b4:73:7d:67:d8:e0:71:ac:09:
         f6:88:2c:58:5b:f8:36:34:71:65:5a:95:c3:db:99:02:c2:12:
         ba:35:0b:36:d9:9d:86:00:4c:e8:74:30:80:c0:56:11:93:a7:
         4d:44:b6:08:90:9a:f8:8b:ed:09:8a:20:3b:98:09:c5:1c:19:
         94:c4:8c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:52 2024 by rpki-client on console-fra.rpki-client.org