Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa
File:                     3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa (raw, json)
Hash identifier:          AUVW1a/YBIMfPEH65WCqqITKeN3+GOj5IN1vvn/h/KY=
Subject key identifier:   F3:3F:85:A2:21:6C:FF:44:C4:FB:44:01:0E:CA:95:3C:50:9B:77:6D
Certificate issuer:       /CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
Certificate serial:       43738F2C687257DE1CEB85928C248A9413CCED89
Authority key identifier: C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa
Signing time:             Mon 15 Jul 2024 18:00:00 +0000
ROA not before:           Mon 15 Jul 2024 17:55:00 +0000
ROA not after:            Mon 14 Jul 2025 18:00:00 +0000
asID:                     141926
IP address blocks:        103.165.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl
                          rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:73:8f:2c:68:72:57:de:1c:eb:85:92:8c:24:8a:94:13:cc:ed:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5930A139BC72A04603E7234E6AA3938C4FAE3BC
        Validity
            Not Before: Jul 15 17:55:00 2024 GMT
            Not After : Jul 14 18:00:00 2025 GMT
        Subject: CN=F33F85A2216CFF44C4FB44010ECA953C509B776D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:72:d0:8a:dd:e2:66:2f:86:3c:e8:a4:ad:62:
                    7b:bf:fd:78:86:fe:2d:60:ce:21:c8:da:1d:c5:75:
                    51:45:3c:d4:c1:88:2f:a6:6c:87:ad:92:3f:2b:3f:
                    23:60:36:dd:88:e2:5b:c0:dd:30:55:81:b2:a2:39:
                    65:c2:74:38:1c:cc:33:c7:9f:dd:ea:34:b2:cf:37:
                    f9:7c:aa:d1:a0:b2:e4:9e:09:0a:f7:2b:3f:10:79:
                    cb:2f:5e:75:64:6e:30:a4:89:3d:ce:12:80:db:a1:
                    d3:6b:81:a3:89:32:80:ee:0b:b8:90:36:00:29:81:
                    fc:f0:64:61:ba:f2:7b:b6:82:60:45:65:a3:3c:15:
                    15:8c:af:3e:4c:61:4b:15:22:5e:09:20:08:e1:8d:
                    8e:21:16:e9:d1:3d:5c:a5:b0:5a:bb:78:54:34:a9:
                    90:b2:eb:d9:ec:8e:fb:48:79:c8:db:e6:a6:8e:32:
                    93:4a:63:fd:aa:91:d9:de:61:52:64:75:a9:c7:3b:
                    2f:ce:10:40:35:7e:08:48:7a:62:33:d3:e4:2c:4c:
                    79:e3:c3:a2:e2:7b:f2:cc:94:ab:39:0d:71:b8:b8:
                    c5:05:38:92:e9:cf:95:d7:4f:1c:54:c0:30:ed:77:
                    d4:b7:0c:74:d0:12:1e:1c:a9:95:e6:9d:c5:3d:8c:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3F:85:A2:21:6C:FF:44:C4:FB:44:01:0E:CA:95:3C:50:9B:77:6D
            X509v3 Authority Key Identifier:
                keyid:C5:93:0A:13:9B:C7:2A:04:60:3E:72:34:E6:AA:39:38:C4:FA:E3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5930A139BC72A04603E7234E6AA3938C4FAE3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad440c85-3471-4461-b590-1601e19f5318/0/3130332e3136352e3134372e302f32342d3234203d3e20313431393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:67:5d:00:6f:b1:49:66:bd:09:53:dc:d8:ef:a0:61:05:a3:
         7c:08:8c:96:65:9c:07:c1:d6:b1:4d:4a:95:99:73:68:51:1a:
         4c:77:a4:95:00:0b:11:65:0c:bc:0d:e6:6e:b0:b7:06:91:f6:
         81:e9:ec:38:00:b0:1c:8b:2a:94:d6:a1:e6:e9:53:8d:3f:ff:
         35:46:62:dc:2b:9d:68:85:d2:8f:99:01:f6:63:4f:00:8a:a3:
         93:86:40:66:f7:6b:e7:43:8d:5d:76:e3:69:24:31:97:ef:db:
         34:f6:51:e0:c0:49:02:96:51:c2:a7:32:5b:fd:9e:eb:c5:fb:
         02:f0:0f:46:11:70:81:87:8c:49:1c:e9:e6:83:d1:70:62:d5:
         dc:a2:0c:6a:d6:e6:5c:75:ac:6d:ec:9e:cc:0b:cf:c2:ce:e8:
         d6:13:b2:7e:77:07:56:d8:c9:21:5e:a0:41:94:2b:8b:f0:de:
         07:d5:f7:c7:66:5a:58:72:45:0e:f4:32:d3:48:e0:b6:8b:d6:
         fd:29:61:c0:12:d6:a7:6f:41:8c:43:c0:40:39:e6:e9:8d:04:
         a5:3f:cc:68:cd:b2:ca:58:09:9d:98:23:19:fd:ec:0a:f3:2b:
         08:db:e3:00:3f:4a:a6:f3:c6:53:05:74:80:83:c7:23:33:6f:
         05:cd:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org