Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
File:                     3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa (raw, json)
Hash identifier:          YxKFCCTucAB901FnWvHp1BTAbf/BtJq5T02itlwfgXY=
Subject key identifier:   48:59:81:2E:B4:B0:63:3F:81:19:98:3E:B2:1B:BC:D0:20:5E:3F:50
Certificate issuer:       /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
Certificate serial:       475B1D8678CEB864408117ABF9596B6C5B9828B7
Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa
Signing time:             Mon 15 Jul 2024 18:00:00 +0000
ROA not before:           Mon 15 Jul 2024 17:55:00 +0000
ROA not after:            Mon 14 Jul 2025 18:00:00 +0000
asID:                     141926
IP address blocks:        103.165.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl
                          rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5b:1d:86:78:ce:b8:64:40:81:17:ab:f9:59:6b:6c:5b:98:28:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
        Validity
            Not Before: Jul 15 17:55:00 2024 GMT
            Not After : Jul 14 18:00:00 2025 GMT
        Subject: CN=4859812EB4B0633F8119983EB21BBCD0205E3F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:66:24:f9:18:de:49:68:87:e1:26:c5:a9:
                    49:77:31:50:71:9a:b0:20:f0:7a:84:be:aa:03:df:
                    42:8d:8d:67:04:8b:41:8b:73:4b:b7:8a:cb:4f:bb:
                    71:32:e1:d7:93:e2:8e:1a:d1:ee:11:67:88:e5:79:
                    8d:16:f7:f8:9e:21:b9:4b:d9:6f:3f:91:f0:cf:ac:
                    08:94:6e:fa:86:24:2e:76:12:61:9f:53:a0:9e:87:
                    a2:81:e3:41:43:34:a1:69:dc:26:ca:2b:9f:78:e3:
                    55:65:ff:19:cb:bb:7e:95:f1:5f:34:8b:ff:df:b2:
                    8d:27:52:ba:5c:00:77:7c:c7:a7:95:67:1f:99:b9:
                    cf:00:70:03:9d:f7:ca:5c:90:06:95:6e:19:7c:38:
                    6d:2e:73:83:00:ee:a0:11:6f:78:1a:c4:54:6c:43:
                    63:30:e1:28:ba:4b:a3:e5:ac:67:c1:73:b7:d6:8b:
                    62:7c:8a:9a:27:ca:3c:fc:85:4f:b2:5f:41:df:54:
                    26:92:9f:f3:e8:1d:26:8c:cc:8d:7c:79:b6:9a:3c:
                    42:1a:95:1b:d6:cf:86:f2:4e:ba:41:2c:a9:f3:ae:
                    88:e1:5a:bf:0a:8d:4b:c4:8b:c6:93:03:0a:8a:04:
                    23:71:51:dc:c2:af:f3:02:cc:ca:84:87:81:3f:d1:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:59:81:2E:B4:B0:63:3F:81:19:98:3E:B2:1B:BC:D0:20:5E:3F:50
            X509v3 Authority Key Identifier:
                keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134362e302f32332d3233203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:18:f2:ae:c0:35:7b:05:7d:cd:c5:9d:fb:d3:f5:57:fe:79:
         ec:a3:96:01:a3:82:28:7e:d0:56:51:1f:d8:04:dd:0d:ce:fe:
         d7:78:7d:a9:f2:f1:f9:1c:99:5a:9c:fe:ad:51:54:f8:ca:a6:
         ac:c8:92:15:43:7e:12:4e:2e:00:f2:94:ee:7e:66:84:a2:60:
         fa:1d:b1:7e:57:e1:07:b9:81:28:65:31:d7:ec:5b:e4:1b:3f:
         4a:f2:b3:8e:2d:3b:75:e7:c0:ee:3c:05:d4:a0:3b:79:a7:4d:
         11:76:30:ee:38:a0:d4:b8:bf:75:ce:d9:ec:4f:5a:2e:25:25:
         19:4d:ad:79:53:f0:d3:a6:42:53:1b:b6:9a:c2:0e:da:4c:f9:
         61:20:af:e8:dc:da:3c:0b:6f:87:3b:7a:dd:bf:04:81:a2:45:
         b0:16:67:0a:1f:0d:71:80:4a:61:f8:f2:92:65:ca:e4:f7:6c:
         fc:92:4b:79:a6:79:cb:1b:c8:8c:2c:ef:25:2b:12:7f:32:b5:
         bc:a8:f3:64:41:4a:42:42:ca:db:45:10:a0:4a:91:b7:8e:04:
         99:2d:60:a4:a1:46:58:bf:26:17:b3:ce:64:9b:ad:2f:36:2c:
         fa:35:c0:d9:a5:1b:da:51:8d:f5:40:f1:5b:01:70:6d:0d:65:
         a8:9a:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org