Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa
File:                     3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (raw, json)
Hash identifier:          ZqLjpvYYHU8paHTzEW1DrbyBCtB+akOeIFXjdtozOIM=
Subject key identifier:   2B:78:19:38:95:77:FF:96:E2:61:67:7B:FE:F4:45:1E:7A:88:1D:E1
Certificate issuer:       /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
Certificate serial:       10E0E5ECD7328720801AF41986FA918C5FB974D5
Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa
Signing time:             Fri 09 Feb 2024 10:12:45 +0000
ROA not before:           Fri 09 Feb 2024 10:07:45 +0000
ROA not after:            Fri 07 Feb 2025 10:12:45 +0000
asID:                     150185
IP address blocks:        103.193.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl
                          rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e0:e5:ec:d7:32:87:20:80:1a:f4:19:86:fa:91:8c:5f:b9:74:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
        Validity
            Not Before: Feb  9 10:07:45 2024 GMT
            Not After : Feb  7 10:12:45 2025 GMT
        Subject: CN=2B7819389577FF96E261677BFEF4451E7A881DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:d9:22:74:57:da:5b:92:71:05:77:43:2c:
                    da:6b:a9:b0:d9:77:5e:1c:ab:db:46:b6:70:ee:ff:
                    66:a4:3a:e5:e3:ab:c2:c5:bb:0d:1a:6e:b0:62:e3:
                    e7:75:59:7e:e6:cd:f6:37:c5:df:1d:47:1b:20:80:
                    ac:51:92:46:e2:32:c7:35:5e:ba:92:77:79:5e:59:
                    e7:91:5d:68:6d:c3:b3:3c:08:28:e9:09:5b:f3:2b:
                    ce:55:ba:34:ba:a4:64:b8:ed:e9:1c:b2:cb:a8:3c:
                    ae:41:36:1f:10:8b:9f:91:f2:b3:13:cf:17:1f:d8:
                    3e:0b:b5:0a:7a:a6:af:12:1f:7a:3b:98:63:cb:7d:
                    5e:78:62:d2:95:49:f4:b3:db:0a:3d:05:28:93:94:
                    a6:c2:de:b8:45:25:eb:93:bb:fd:ad:64:28:88:e4:
                    a1:d4:7c:28:cc:ee:07:39:83:03:dc:c3:db:e1:b7:
                    9d:16:15:ef:20:22:4c:9d:d3:dc:14:47:e4:ba:c9:
                    48:83:15:a8:b1:83:d9:ef:86:63:6e:20:47:00:a1:
                    27:4e:76:8f:24:0f:66:09:6e:cb:c3:7f:eb:9e:fe:
                    7a:41:23:ef:0f:69:51:a0:d7:72:00:13:b4:85:80:
                    9c:5d:f9:a8:9b:bd:d2:80:b0:ef:e2:3c:a1:81:96:
                    21:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:78:19:38:95:77:FF:96:E2:61:67:7B:FE:F4:45:1E:7A:88:1D:E1
            X509v3 Authority Key Identifier:
                keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:54:40:bd:3a:d8:cc:01:31:64:10:06:8a:83:7d:c2:76:a7:
         ba:be:69:93:39:26:f7:31:13:39:1f:ca:f4:71:67:fe:92:b6:
         11:c3:89:b7:66:e8:03:95:19:82:64:cb:a4:be:7f:51:e0:bd:
         8b:f7:fb:89:e4:0b:bd:4b:ac:c4:f6:ad:7a:f7:77:fb:ef:7c:
         3f:24:f8:ad:74:d1:df:2e:00:db:46:5a:c4:4c:42:34:9b:7a:
         cd:dc:62:e1:04:8e:14:7b:d6:a7:b6:9c:93:e7:7f:dd:05:7a:
         c6:cb:7c:a7:3f:80:ae:d7:dc:db:d4:d9:00:7d:88:14:34:50:
         28:3d:42:1b:7c:38:46:5e:14:a0:ad:1f:b8:4c:c7:f8:9d:34:
         d9:4b:17:83:f4:b5:29:14:50:de:db:fa:13:64:19:fe:45:f8:
         b9:ce:1e:08:86:56:64:88:8c:9c:ef:6b:ff:b3:87:76:c0:fd:
         ba:f9:f5:29:32:04:68:d2:ef:dd:3d:44:fd:cd:77:7c:ec:84:
         10:20:6e:2f:0f:40:9a:1c:c9:46:fd:5e:ee:f3:c0:27:2f:38:
         da:c6:45:dc:f2:68:ba:e4:96:9b:2c:8a:5d:1c:d2:de:ef:e2:
         cc:c0:24:c7:34:85:5f:be:8c:80:a3:02:7f:8f:3c:a0:a0:09:
         2c:93:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org