Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa
File:                     3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa (raw, json)
Hash identifier:          +5iQfae2lwfJtHF0cOlr2Gk29Amb8+u2o3UG7FztUJU=
Subject key identifier:   A6:F7:44:60:EB:DB:2B:98:27:AA:BD:E3:08:90:DE:9E:F7:35:36:CF
Certificate issuer:       /CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
Certificate serial:       44137906A4C2BBC97AB2784E2185958BA51BCB39
Authority key identifier: 6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa
Signing time:             Fri 25 Oct 2024 07:00:00 +0000
ROA not before:           Fri 25 Oct 2024 06:55:00 +0000
ROA not after:            Fri 24 Oct 2025 07:00:00 +0000
asID:                     141598
IP address blocks:        103.160.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl
                          rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:13:79:06:a4:c2:bb:c9:7a:b2:78:4e:21:85:95:8b:a5:1b:cb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A6C813654E0C29339E6CAF522201F8E702FEAD3
        Validity
            Not Before: Oct 25 06:55:00 2024 GMT
            Not After : Oct 24 07:00:00 2025 GMT
        Subject: CN=A6F74460EBDB2B9827AABDE30890DE9EF73536CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:09:2c:a3:d8:b5:d8:7e:b3:1a:60:56:21:
                    66:03:39:4e:55:ab:86:11:21:e0:dd:cd:9a:2e:f5:
                    39:f9:ab:0a:77:31:ed:dd:5b:f6:a5:9d:48:1e:0e:
                    1d:8e:53:49:94:c9:35:3d:52:8d:e3:e9:6a:1d:13:
                    7f:6e:c8:b3:e9:0e:bd:35:fe:bd:bd:81:fb:68:34:
                    f0:df:d3:c0:67:6b:c1:97:42:c3:e6:07:ba:a1:31:
                    b7:f4:b5:63:8a:e8:6f:0e:ea:c6:d5:23:15:f4:22:
                    15:13:83:1a:6f:f1:1d:0e:54:90:f1:67:7a:42:e7:
                    9f:99:3d:cd:29:eb:01:eb:10:0b:8c:4e:ff:c4:e0:
                    24:43:65:ed:39:2e:af:3f:9f:b6:fb:ba:ff:d2:99:
                    9b:b7:e9:25:90:48:38:37:c9:68:61:66:46:ca:6f:
                    9e:aa:9e:1b:78:48:01:d8:98:7e:28:52:e0:8b:42:
                    e0:e1:8f:73:9b:d0:cc:75:ee:b3:9c:07:09:b4:90:
                    84:29:4c:93:67:64:04:85:6c:c8:dc:b0:a4:36:63:
                    2e:b4:c7:92:2b:a4:34:01:6c:54:ff:c0:bb:0a:40:
                    2e:f4:aa:96:48:70:9d:13:88:a6:33:54:89:e7:cd:
                    ce:b6:0e:61:2d:8b:2a:32:48:f1:f0:4a:59:c9:62:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F7:44:60:EB:DB:2B:98:27:AA:BD:E3:08:90:DE:9E:F7:35:36:CF
            X509v3 Authority Key Identifier:
                keyid:6A:6C:81:36:54:E0:C2:93:39:E6:CA:F5:22:20:1F:8E:70:2F:EA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/6A6C813654E0C29339E6CAF522201F8E702FEAD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6A6C813654E0C29339E6CAF522201F8E702FEAD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a682bca3-e858-4d52-b1a3-2f4bae47c9f2/0/3130332e3136302e3138342e302f32332d3233203d3e20313431353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:88:a9:c9:98:15:fa:d4:da:78:67:d6:ba:de:c6:6c:c3:
         80:9a:82:4a:fa:2c:be:8f:40:d7:bd:af:11:ba:5b:a1:c2:55:
         5b:1d:d4:d1:56:90:0a:21:4c:79:81:f7:12:a0:c3:ab:3f:ec:
         d4:f4:1d:e7:d4:35:2e:5b:52:19:49:13:62:d1:27:0c:80:06:
         ea:87:47:0f:d2:58:0e:57:3d:78:ad:21:30:6f:95:02:1d:c7:
         31:4a:0d:db:fb:8f:e7:96:f4:e7:af:09:b6:a2:ec:6a:fe:cd:
         05:6d:50:88:30:c7:82:f3:88:f6:1c:51:6d:fb:18:78:92:4a:
         39:b5:a2:3a:f2:e3:d3:90:c8:94:fa:52:63:f2:65:2c:4e:16:
         9a:66:69:20:6f:d4:f7:64:04:b4:33:f8:7d:83:08:b4:5a:ee:
         db:46:27:2d:7d:f4:50:e8:5e:f7:4e:3d:6d:21:47:c4:b9:ac:
         bb:fe:bc:e2:05:e5:ea:cc:9b:97:c5:cc:59:5c:c7:90:f6:ba:
         81:ef:a4:24:ee:06:2d:a7:72:3a:2c:ee:a6:60:46:7d:26:32:
         4f:39:2c:f9:ca:ce:5a:13:77:62:e9:91:b5:a1:0b:98:ef:e9:
         0c:cd:b0:f2:79:56:cc:f1:2a:90:88:94:9a:5f:0b:ed:a3:53:
         82:7e:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org