Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa
File:                     3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa (raw, json)
Hash identifier:          HKp1z82dwndkEh4Vdac5ps8RWvQhptPK64Rz93mARG4=
Subject key identifier:   0B:8B:1B:52:8E:15:45:32:21:F2:59:20:07:07:F8:2B:CE:DE:D6:46
Certificate issuer:       /CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
Certificate serial:       7F4B2ECED87DE239DEA25789A5711124EFBB0C9C
Authority key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa
Signing time:             Sat 05 Oct 2024 04:01:11 +0000
ROA not before:           Sat 05 Oct 2024 03:56:11 +0000
ROA not after:            Sat 04 Oct 2025 04:01:11 +0000
asID:                     141579
IP address blocks:        103.160.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl
                          rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4b:2e:ce:d8:7d:e2:39:de:a2:57:89:a5:71:11:24:ef:bb:0c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751
        Validity
            Not Before: Oct  5 03:56:11 2024 GMT
            Not After : Oct  4 04:01:11 2025 GMT
        Subject: CN=0B8B1B528E15453221F259200707F82BCEDED646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:8a:74:c7:16:69:f1:7c:6e:56:65:1d:86:
                    5d:b4:13:d3:89:b7:51:c7:06:41:98:81:3f:8c:47:
                    51:5a:84:5e:d9:f0:bf:78:47:0a:88:98:5d:8c:69:
                    67:72:4c:96:c8:7c:67:52:2b:3c:24:12:07:ea:6c:
                    6f:af:ca:3c:8a:7f:0b:5f:39:6e:90:7e:7d:a0:c1:
                    8d:58:8d:7c:a6:54:08:0e:0e:05:a5:48:66:bf:29:
                    39:0d:ef:67:a1:1b:b8:60:32:39:22:a9:97:02:87:
                    19:d0:37:85:ed:38:38:f8:23:b3:cf:df:3a:97:bd:
                    49:6c:28:4f:d9:b9:c9:40:c9:a4:57:f5:34:cb:44:
                    c6:10:22:44:06:ee:1e:5e:03:b3:a7:5c:c2:95:a5:
                    ad:ef:c5:a7:3a:91:17:89:ec:87:60:f7:b4:39:d6:
                    60:09:1d:de:24:0f:54:75:86:78:7b:20:aa:18:e1:
                    1b:7a:44:ff:59:e4:e7:04:a3:9f:e8:5f:44:a7:cb:
                    eb:8f:5f:18:f0:f0:6a:dc:93:68:08:c5:e9:d6:64:
                    35:b8:2a:a5:0e:8f:24:90:9b:5c:8f:81:17:0e:07:
                    16:51:c9:99:86:bc:64:b0:50:05:b3:ec:a3:03:fa:
                    a0:79:88:ff:64:1a:e1:73:26:e3:d0:c1:b0:6e:16:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8B:1B:52:8E:15:45:32:21:F2:59:20:07:07:F8:2B:CE:DE:D6:46
            X509v3 Authority Key Identifier:
                keyid:F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/3130332e3136302e39352e302f32342d3234203d3e20313431353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9a:b3:03:27:91:08:f7:3a:18:75:4e:71:5b:f7:31:0f:9b:
         9b:c9:61:3a:96:99:10:0b:fc:82:41:5c:6f:86:81:d2:99:77:
         f9:98:c4:c9:ec:a3:f5:bf:3a:5f:15:9a:b7:3c:fc:a5:d9:4a:
         2b:ee:e5:f7:ce:36:63:cc:f9:be:7d:7b:1b:cf:1a:12:a0:e9:
         fe:c1:42:60:80:24:7c:0d:55:74:04:63:8f:a0:55:34:5a:e6:
         96:15:20:68:0c:d9:bd:ad:03:35:40:15:27:cc:5f:bb:ae:f2:
         4c:ff:73:21:4c:2f:e1:26:0b:c3:59:3b:b4:bf:76:12:43:e5:
         b3:60:35:ec:27:4b:8d:07:d5:db:47:76:e2:62:0e:c1:26:05:
         07:67:84:64:b8:b9:c0:f5:41:72:56:cc:b7:1a:50:72:06:d4:
         1b:f3:13:c8:b8:43:c2:b5:03:4d:b8:2e:b1:69:63:95:50:06:
         59:77:c0:d6:ac:de:11:f6:de:22:fc:b7:4a:fc:da:fb:94:1a:
         bf:50:a3:cb:88:ca:10:03:28:9e:4b:4e:b8:9d:15:47:50:9d:
         1d:b3:f7:83:75:a9:75:4f:db:7e:38:b2:4c:47:d9:24:d2:70:
         c6:e4:25:a8:2c:f6:1b:4b:83:1c:e7:75:de:b2:19:48:7b:60:
         af:c5:62:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org