Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa
File:                     3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa (raw, json)
Hash identifier:          4ujJx3862oYXI+kui8VPv/8wetRwESOHwDeVR8biwJY=
Subject key identifier:   16:76:1E:E5:9A:67:42:7F:9E:3E:E5:04:E7:4A:7D:6B:FC:00:6E:E5
Certificate issuer:       /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
Certificate serial:       2907D4E6CA6B330D0A454027DCCE63C0E2240448
Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa
Signing time:             Thu 12 Sep 2024 16:00:04 +0000
ROA not before:           Thu 12 Sep 2024 15:55:04 +0000
ROA not after:            Thu 11 Sep 2025 16:00:04 +0000
asID:                     141579
IP address blocks:        103.160.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl
                          rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:07:d4:e6:ca:6b:33:0d:0a:45:40:27:dc:ce:63:c0:e2:24:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
        Validity
            Not Before: Sep 12 15:55:04 2024 GMT
            Not After : Sep 11 16:00:04 2025 GMT
        Subject: CN=16761EE59A67427F9E3EE504E74A7D6BFC006EE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:0a:c5:ae:e8:ae:ca:bc:c4:3e:5e:65:ed:
                    8f:61:9e:10:73:a6:ce:8a:8f:63:e6:be:3d:32:ec:
                    71:da:31:f9:09:6c:61:c6:df:08:78:8d:72:f1:14:
                    6d:8c:d8:6a:36:91:78:a5:be:19:f2:b6:ed:36:6f:
                    7f:5e:ed:d3:dd:59:dd:f7:d7:a3:c2:04:39:75:d7:
                    89:1a:f1:a4:ef:e0:17:f5:fa:4a:21:57:56:a4:7e:
                    6d:27:b1:40:62:cc:03:d2:d2:3f:0a:7a:18:e1:4c:
                    c5:26:5c:9e:7c:e1:65:3d:4f:a0:de:7b:8c:3a:34:
                    5f:f3:a1:de:71:95:eb:8e:85:f6:c6:20:d3:18:5a:
                    03:3c:2d:cc:c4:15:5e:b3:63:d0:dc:4e:ee:51:8a:
                    fa:71:8e:d0:4f:ff:06:e9:f4:df:b1:3c:9d:2e:6c:
                    f5:5f:4e:d4:2c:2c:c2:ee:92:f3:06:0d:e9:5a:3d:
                    50:25:8e:23:f3:89:15:a3:09:15:d7:e5:84:2e:44:
                    8b:60:c8:d0:8c:20:5d:2f:e0:b5:6f:6a:58:e5:49:
                    21:28:d7:8e:49:8e:c2:1e:82:3c:9c:6e:1e:83:ef:
                    a3:77:e5:61:57:37:09:e6:95:e1:e4:0e:5a:49:b4:
                    df:fd:a3:00:df:12:66:eb:60:f1:f1:ed:52:22:86:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:76:1E:E5:9A:67:42:7F:9E:3E:E5:04:E7:4A:7D:6B:FC:00:6E:E5
            X509v3 Authority Key Identifier:
                keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39342e302f32332d3233203d3e20313431353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:5f:bf:7d:19:2b:7a:4e:35:75:e5:30:a7:34:3c:cc:21:93:
         ed:fd:cf:bf:dd:35:73:9a:83:70:33:43:79:ec:c4:ac:b1:e6:
         91:67:10:1f:9a:77:ea:46:c6:9d:ba:58:3e:46:f8:76:49:9d:
         09:a5:50:5f:ac:43:a0:74:9b:0d:58:8a:4d:45:80:5e:43:41:
         14:5d:f8:58:f5:e5:5e:5f:a6:1f:de:56:74:28:b6:4f:9f:3f:
         17:27:57:12:52:2d:63:c8:24:d6:2e:c4:6a:9f:bc:2c:8e:82:
         6c:c3:b1:d5:f8:e6:12:50:c3:e2:a6:83:b9:39:0a:84:df:c8:
         9e:cb:3b:c2:27:fd:b3:1c:11:2b:c5:c4:f5:e8:05:b3:e9:63:
         8a:2d:f4:0f:28:ce:c3:51:64:81:60:2a:28:37:0f:eb:37:0f:
         46:1f:9d:b1:ed:8a:3a:e4:8a:d8:f5:1d:fc:9d:3e:87:d5:df:
         71:ca:c5:a2:8a:2e:93:7f:24:51:f0:fe:aa:e8:3e:55:53:eb:
         ea:0a:a7:91:dc:5b:9a:3e:6e:c1:96:eb:2d:d4:e5:73:af:40:
         d5:a8:3d:08:6d:80:d5:9e:75:59:ff:71:4c:1f:87:5b:df:4b:
         9a:8b:41:b2:66:a2:f2:8c:b7:59:f3:9d:7d:4b:5c:df:c9:9d:
         47:f8:ac:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org