Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa
File:                     3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa (raw, json)
Hash identifier:          iLJOpbKVDPUcgPyjz0oDASfiDS5awyYCI5Qvynr0sXI=
Subject key identifier:   20:6C:74:66:C1:B4:5E:40:C0:E4:CD:BA:87:97:D1:B6:CF:ED:3F:2E
Certificate issuer:       /CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
Certificate serial:       181CBE0CA2F11075F3D60B64DB185558D3A3F071
Authority key identifier: E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa
Signing time:             Sun 26 May 2024 02:00:01 +0000
ROA not before:           Sun 26 May 2024 01:55:01 +0000
ROA not after:            Sun 25 May 2025 02:00:01 +0000
asID:                     141913
IP address blocks:        103.164.230.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl
                          rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:1c:be:0c:a2:f1:10:75:f3:d6:0b:64:db:18:55:58:d3:a3:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7231D1A3E051BD903DB86D7DE0077C2333EBB58
        Validity
            Not Before: May 26 01:55:01 2024 GMT
            Not After : May 25 02:00:01 2025 GMT
        Subject: CN=206C7466C1B45E40C0E4CDBA8797D1B6CFED3F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:75:5c:3a:c1:00:ff:44:e2:62:39:5a:67:
                    5b:ab:0a:0d:64:70:a2:bb:d8:3e:bc:1e:32:52:16:
                    22:ff:be:8d:32:9e:2f:fe:0d:8b:d9:16:47:62:1d:
                    7d:87:9d:32:43:63:46:d0:09:29:20:2e:c9:9f:9e:
                    b6:33:52:ef:57:3a:7b:e1:08:0c:8e:de:d4:4a:e8:
                    76:a9:1d:62:a6:4e:b9:64:1b:2c:46:92:bf:a5:7c:
                    f7:2a:3c:01:e8:47:cd:e3:cf:0c:a6:a8:95:3f:1d:
                    07:83:04:a6:3c:6b:a8:fd:38:a2:74:35:23:6d:a9:
                    fc:b6:47:4e:fe:db:7b:6c:a4:33:51:2d:b7:43:a3:
                    88:e0:63:a7:d4:a5:05:42:cc:20:f1:d1:9c:16:89:
                    3c:04:78:28:81:6f:43:c9:6a:ad:fc:2f:9c:ce:40:
                    05:bf:0b:58:cb:c7:23:15:32:b4:0a:39:22:cc:0d:
                    f9:29:94:fe:75:45:c8:63:d8:c1:82:c4:5a:cd:3d:
                    1a:0c:9d:37:7c:0f:f4:6f:b4:78:ad:ff:b7:90:92:
                    b3:2a:b5:67:1d:ea:dd:89:3a:c0:51:dd:57:25:39:
                    41:64:4d:02:53:18:86:e9:c3:9f:c5:21:ee:53:eb:
                    61:62:46:d5:c5:46:af:ed:ce:14:e9:a1:e1:a6:cd:
                    5b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:74:66:C1:B4:5E:40:C0:E4:CD:BA:87:97:D1:B6:CF:ED:3F:2E
            X509v3 Authority Key Identifier:
                keyid:E7:23:1D:1A:3E:05:1B:D9:03:DB:86:D7:DE:00:77:C2:33:3E:BB:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7231D1A3E051BD903DB86D7DE0077C2333EBB58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a1794aa-3291-483b-ac0b-7bc7b1a67cc6/0/3130332e3136342e3233302e302f32332d3233203d3e20313431393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:13:05:27:0f:15:ad:63:e0:a4:cb:d4:b5:45:0e:9a:d1:b8:
         3a:06:37:d3:d6:b5:17:e0:9d:64:63:5c:f6:64:99:45:18:5a:
         2e:8e:ca:27:65:5b:ca:c6:43:1d:41:10:17:46:a7:9b:5a:69:
         15:f3:aa:a6:ef:e8:15:b7:14:a3:d6:14:a2:0c:36:21:ab:59:
         c2:93:6e:5e:53:30:d5:b1:1a:99:de:75:83:72:c8:2e:13:b1:
         c8:4e:88:d1:1f:8b:19:b6:30:37:a2:5f:55:b1:f5:43:07:01:
         07:72:7e:08:a1:fe:ee:27:2f:29:e1:13:85:81:59:09:ff:07:
         df:2c:77:12:e7:14:15:2e:2e:22:92:71:05:6d:37:25:93:25:
         2a:6a:69:ed:9d:88:30:c9:ac:8f:40:2d:92:f6:b9:f8:57:42:
         92:04:ae:6e:b9:c5:75:ba:80:c2:ad:66:84:0c:51:d7:5e:97:
         45:92:b0:eb:32:04:e2:61:e4:57:9d:9f:8d:66:e9:65:7f:23:
         32:72:da:64:e5:41:33:71:39:1a:b3:d3:d4:85:f7:51:79:39:
         f5:96:59:f7:99:ba:32:7f:3e:6e:c6:3c:ab:21:70:d6:7a:06:
         51:86:d8:2d:33:3a:32:bf:a6:93:62:e6:e1:b3:a9:97:26:71:
         a0:42:39:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org