Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa
File:                     3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa (raw, json)
Hash identifier:          MwGtg9kmkP5IIzKqsRlt76tE2L3U/9oLU+pmxMF8/sk=
Subject key identifier:   80:FD:E6:31:3C:9A:F6:2F:5D:B8:5E:8C:9E:07:82:C4:11:85:63:50
Certificate issuer:       /CN=9481EF5008E46F3618B42A0945A1522D5C041511
Certificate serial:       3A72E61A82BD1BD3A061DCEC4463B2270BB98D0E
Authority key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa
Signing time:             Thu 04 Jan 2024 06:00:02 +0000
ROA not before:           Thu 04 Jan 2024 05:55:02 +0000
ROA not after:            Thu 02 Jan 2025 06:00:02 +0000
asID:                     150493
IP address blocks:        103.59.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl
                          rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:72:e6:1a:82:bd:1b:d3:a0:61:dc:ec:44:63:b2:27:0b:b9:8d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9481EF5008E46F3618B42A0945A1522D5C041511
        Validity
            Not Before: Jan  4 05:55:02 2024 GMT
            Not After : Jan  2 06:00:02 2025 GMT
        Subject: CN=80FDE6313C9AF62F5DB85E8C9E0782C411856350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:55:33:23:54:f9:dc:87:16:5a:c0:76:4a:
                    db:fc:78:98:7e:30:a4:dc:95:e0:7d:78:b3:e1:cc:
                    57:a2:9e:46:37:a7:77:2a:e7:d7:f1:bf:f2:25:96:
                    d5:20:ce:7c:31:ce:ff:b6:7a:43:22:57:fc:28:e2:
                    eb:50:28:58:85:de:49:3e:6c:f3:3a:a7:9a:82:b1:
                    5d:2e:9c:05:7f:ae:88:52:5b:a4:4e:d4:c7:41:7d:
                    06:91:7e:25:d1:46:ec:aa:be:59:69:94:c5:4e:20:
                    50:42:c3:6f:58:d6:e6:8e:65:3e:26:22:ae:5c:5e:
                    18:77:ac:55:de:52:f6:38:a8:b4:0b:c9:d9:c8:92:
                    c8:c8:25:36:0a:83:48:0f:6c:bb:de:b7:12:ad:cf:
                    1d:a7:be:3a:d5:ea:a7:3d:21:69:d4:c9:f4:07:1b:
                    22:e1:8f:0e:0e:79:c2:75:e1:04:e5:4c:08:75:42:
                    16:94:76:83:d7:c0:21:a2:2c:c2:2e:81:1d:9a:61:
                    cb:28:f8:f1:05:7d:f9:70:eb:88:09:9c:83:42:9b:
                    11:3f:d1:69:8f:22:f9:5b:df:96:b8:bf:72:9f:63:
                    de:07:b0:8e:c6:59:8d:d8:8e:42:a8:25:26:b1:5c:
                    9e:77:52:f8:5b:37:c4:3c:90:11:03:d1:80:0b:29:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FD:E6:31:3C:9A:F6:2F:5D:B8:5E:8C:9E:07:82:C4:11:85:63:50
            X509v3 Authority Key Identifier:
                keyid:94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136302e302f32342d3234203d3e20313530343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:17:6a:d8:58:3d:ef:a0:c8:ed:f7:93:e9:97:24:db:1b:36:
         f4:1d:c1:5f:41:19:35:2c:cd:1b:f7:86:a6:38:b6:7f:29:75:
         8a:28:b7:b2:40:48:eb:b6:dd:9c:63:b7:5f:72:8e:3f:56:3c:
         8b:a7:74:73:2b:45:c7:b5:94:84:e6:ec:fb:77:19:ac:2d:a8:
         ff:70:71:03:be:3d:27:ff:94:12:28:c9:ce:d2:ef:cb:9b:f7:
         bd:65:d5:1c:45:b2:c3:3f:9b:7d:82:45:8f:43:1a:18:f5:3b:
         c6:b2:87:1e:de:be:fb:2f:51:47:28:e8:b6:0d:b4:24:fc:7f:
         0f:40:79:a0:56:9f:58:a4:da:cf:7b:94:96:74:10:bd:ed:53:
         18:42:7d:d8:47:a3:cb:42:43:f4:ec:62:19:06:d9:de:27:8e:
         e6:02:bf:59:36:45:81:ef:7f:da:a8:48:0b:cf:7f:76:af:76:
         06:e6:11:f8:2b:6f:9e:6a:e5:ad:67:79:b5:fc:cb:92:37:9a:
         cf:3f:e7:b8:29:7d:59:34:9a:62:ae:ad:4b:7f:6b:b9:4e:0f:
         d3:ad:91:9c:88:ac:43:5c:b7:36:3e:59:b5:03:2e:f1:7e:d1:
         d8:d2:a6:2a:9f:d8:36:c7:4d:d8:99:c2:d4:91:da:83:eb:e3:
         4d:c2:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org