Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa
File:                     3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (raw, json)
Hash identifier:          AEPp0WZ28wLYK8s3JrHPiuNh4eYgya/d4mOkAPill4Q=
Subject key identifier:   6E:D0:DC:99:91:FA:98:C7:FE:9F:5B:4F:2A:F9:94:9D:9E:8C:5E:D5
Certificate issuer:       /CN=7195906BF48238F96B0510D75000910A519133F7
Certificate serial:       5C792B7CD3673A070CC961E1E1BDBC9FC43E84FC
Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa
Signing time:             Tue 30 Jan 2024 07:01:57 +0000
ROA not before:           Tue 30 Jan 2024 06:56:57 +0000
ROA not after:            Tue 28 Jan 2025 07:01:57 +0000
asID:                     142311
IP address blocks:        103.168.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl
                          rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 08:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:79:2b:7c:d3:67:3a:07:0c:c9:61:e1:e1:bd:bc:9f:c4:3e:84:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7195906BF48238F96B0510D75000910A519133F7
        Validity
            Not Before: Jan 30 06:56:57 2024 GMT
            Not After : Jan 28 07:01:57 2025 GMT
        Subject: CN=6ED0DC9991FA98C7FE9F5B4F2AF9949D9E8C5ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d9:2a:2d:56:d2:41:29:a9:b1:63:75:e9:c2:
                    e7:0d:e3:d2:ff:e8:93:1f:d8:f7:e1:bb:b2:00:18:
                    4d:7a:c1:1e:62:a3:25:a9:1a:f8:c1:03:8a:1e:5c:
                    04:84:17:19:57:60:70:98:98:b4:99:11:de:6a:20:
                    21:dd:d7:72:6c:8f:25:9d:f4:0a:bf:78:0e:72:44:
                    d4:ff:7b:e4:b8:0f:fa:48:66:5c:05:b3:56:cf:b6:
                    77:03:a1:bf:63:8d:db:1c:40:f2:3c:ca:ae:75:25:
                    ec:fc:cc:87:90:28:7c:d7:11:04:74:38:37:c6:bc:
                    54:e6:45:e4:fd:fe:07:8f:9e:19:84:25:25:97:aa:
                    83:ae:bb:37:10:b0:2c:79:9d:a7:a4:b7:b4:03:f1:
                    5c:16:16:ee:55:47:54:da:7e:04:96:bc:f6:61:30:
                    c2:7f:09:b2:7b:00:8c:82:56:ef:07:e5:6c:8e:7f:
                    32:52:cd:52:98:54:81:a1:c7:ff:94:d1:c5:38:db:
                    b6:db:ca:85:46:0e:c0:0e:7b:66:f5:38:32:95:07:
                    b1:dd:52:9b:83:57:4d:39:47:90:c4:96:e4:4c:5b:
                    b7:b8:e9:3f:8e:1b:bb:43:4a:c3:a8:c8:b5:5a:a1:
                    a7:b0:89:1c:24:78:1b:0c:e4:9b:4a:21:3f:e5:b2:
                    09:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D0:DC:99:91:FA:98:C7:FE:9F:5B:4F:2A:F9:94:9D:9E:8C:5E:D5
            X509v3 Authority Key Identifier:
                keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8f:72:d8:59:ef:71:45:e7:29:b1:0f:4b:0c:2b:6f:26:27:
         a1:39:0a:bb:5b:6b:d5:65:d2:bc:12:31:cf:b3:e9:a8:5d:2d:
         b3:09:55:63:24:b9:2a:b5:9c:4d:7d:50:5e:f0:6a:c8:11:45:
         cf:03:8d:f3:7c:b2:39:2d:27:67:07:3f:43:54:00:a9:cd:49:
         3f:85:05:00:4b:3a:70:d6:00:57:20:15:6e:c0:e7:c0:58:e4:
         3d:f7:fb:9a:d2:7a:3b:a6:5e:6c:38:07:05:c1:1d:35:c3:a7:
         0a:00:6a:b9:6c:5d:82:cd:27:5b:84:a9:95:1e:89:f8:8f:01:
         36:52:45:82:42:1b:d4:02:7a:bc:f2:78:a1:e7:90:06:ca:1f:
         5e:a8:74:32:6e:8b:e4:f2:73:cd:a8:4c:24:0a:98:aa:85:c0:
         f5:74:ce:8e:74:02:86:ea:f3:05:31:da:8f:1c:71:67:23:45:
         17:31:8d:cf:21:a4:a7:14:c8:05:8f:a4:82:22:17:7a:38:42:
         a8:ed:33:a7:ff:31:65:62:6f:fe:c9:5e:c4:04:ec:37:0a:ce:
         06:2a:1c:06:c8:d1:62:5c:7a:ce:b6:69:9b:a5:a2:4a:26:e6:
         73:77:16:80:d0:16:0b:3c:ef:6f:93:6e:27:20:f6:b2:1d:17:
         3f:cf:23:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:55:15 2024 by rpki-client on console-ams.rpki-client.org