Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa
File:                     3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (raw, json)
Hash identifier:          SR6dBqPFpfPa5512o9ewxCNXmByH0nhHUznnar/SHSk=
Subject key identifier:   3E:CC:9A:74:54:7C:CD:25:60:56:3B:A5:B4:0D:04:42:43:A3:4C:AA
Certificate issuer:       /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5
Certificate serial:       24EA3518AF8DC6CD498E1170DFA79AACDF6CAD28
Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa
Signing time:             Wed 20 Mar 2024 06:00:01 +0000
ROA not before:           Wed 20 Mar 2024 05:55:01 +0000
ROA not after:            Wed 19 Mar 2025 06:00:01 +0000
asID:                     142361
IP address blocks:        103.170.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl
                          rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ea:35:18:af:8d:c6:cd:49:8e:11:70:df:a7:9a:ac:df:6c:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5
        Validity
            Not Before: Mar 20 05:55:01 2024 GMT
            Not After : Mar 19 06:00:01 2025 GMT
        Subject: CN=3ECC9A74547CCD2560563BA5B40D044243A34CAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:d3:d4:b0:92:ba:e0:b9:22:a0:eb:0c:4d:
                    05:49:ae:f3:61:c0:e4:e4:17:91:49:26:74:61:50:
                    a7:d6:86:a1:83:88:c9:be:ba:c9:f7:a9:08:a2:9a:
                    a0:ae:0c:e9:01:1a:12:ff:04:db:70:04:f6:c6:a7:
                    7a:02:d6:ad:29:60:5f:16:fa:f0:6a:e6:bc:40:a4:
                    03:7c:46:05:a9:06:c0:91:18:45:a7:0f:14:1c:8b:
                    02:0c:1d:09:63:3a:37:cd:8d:24:1d:91:19:d1:21:
                    28:22:bd:de:2d:6a:f7:da:fa:4b:a0:e8:b9:86:41:
                    72:80:7f:4f:cc:1d:a0:6a:54:03:ea:e2:e0:35:ec:
                    c4:52:3e:11:c4:b7:c2:5f:ce:62:ea:3c:64:01:68:
                    0e:a1:fa:4f:55:b7:83:01:a7:f8:21:ff:fe:d1:b3:
                    c1:63:ab:e2:95:b3:b8:be:4f:27:c9:63:b8:ae:f1:
                    5c:fe:4d:7d:1e:c0:f9:da:50:24:16:72:a9:9b:cf:
                    88:71:3d:ca:04:74:4d:66:79:cb:81:71:0d:d4:9a:
                    9e:c1:6f:8b:50:6a:05:5c:cf:81:52:9f:4d:58:2a:
                    94:9f:5f:6b:84:6c:46:93:67:d8:ba:cf:77:90:af:
                    30:d8:1c:8d:71:2c:28:a3:ed:11:6d:75:07:8a:83:
                    5f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:9A:74:54:7C:CD:25:60:56:3B:A5:B4:0D:04:42:43:A3:4C:AA
            X509v3 Authority Key Identifier:
                keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:56:30:a7:fc:ee:a8:52:9f:52:41:1a:82:8c:22:97:7b:7d:
         73:89:ad:54:de:28:6d:b0:8d:21:47:23:37:c3:34:ed:8f:e9:
         7a:0e:a5:d9:b8:16:9a:6d:8c:15:94:38:9c:a1:1d:39:5e:4f:
         0c:e4:61:41:01:97:70:9a:e5:eb:7c:40:ac:f6:95:c1:a2:d9:
         84:e7:5b:6c:a0:3f:6d:2b:ae:fe:14:e7:5d:cd:99:bb:30:b7:
         52:e6:e4:eb:87:2b:e3:3b:de:e1:9f:0b:d6:ef:db:db:c3:0d:
         ff:8b:42:f4:8f:8e:86:3c:7f:d0:89:52:f2:4d:6f:bf:1d:18:
         2d:72:83:9e:33:3d:63:ff:9f:07:03:60:a3:d5:d3:cd:ee:87:
         a9:37:b2:2e:c8:40:11:72:f5:52:8d:e3:ac:db:94:22:56:57:
         ad:fc:34:61:98:e9:1b:ab:f8:78:33:ad:e9:3f:fe:b6:56:01:
         13:76:5f:8b:2d:e3:a9:ca:f2:29:44:e5:1e:98:17:04:70:f5:
         28:43:2f:f1:09:9d:8f:6a:3c:a9:4f:46:6c:89:8f:13:7a:21:
         26:f3:71:63:36:91:80:e8:80:f1:d1:41:a2:6a:9a:81:88:47:
         38:44:81:b0:5b:f3:df:24:53:fc:d6:f2:a3:12:79:15:26:ce:
         fa:8a:4f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org